Privacy
Effective Date: September 1st, 2025
RecruitScout respects your privacy and complies with the GDPR and applicable EU data-protection laws.
This Privacy Policy explains how we collect, use, store, and protect your information, and is part of the RecruitScout Terms & Conditions.
1. Data Controller and Data Processor
For website visitors:
RecruitScout acts as Data Controller.
For the RecruitScout SaaS platform:
RecruitScout acts as Data Processor, and the User is Data Controller (see DPA).
Contact:
RecruitScout: compliance@recruitscout.tech
2. Personal Data We Collect
A. As Website Controller (website visitors)
-
contact form submissions (name, email, message),
-
analytics data (IP, device, usage patterns),
-
cookies (functional / analytics).
B. As SaaS Processor (User account + platform)
We collect and process:
-
account info (email, name, login details),
-
Customer Content (uploaded lists),
-
Output Data generated by the Service,
-
data from third-party integrations (email API, CRM connections).
We process only B2B data, not sensitive personal data.
3. Legal Bases for Processing
RecruitScout relies on:
-
legitimate interest (platform operation, analytics, fraud prevention),
-
contractual necessity (providing the Service),
-
consent (marketing communications, where required).
Users (Controllers) must define their own lawful basis when uploading or using data in the platform.
4. How We Use Personal Data
We use data to:
-
operate and provide the RecruitScout Service,
-
authenticate accounts,
-
improve features and performance,
-
provide support,
-
detect errors, abuse, or fraud,
-
send service-related communications,
-
comply with legal obligations.
We do not:
-
sell personal data,
-
use Customer Data for advertising,
-
enrich or combine Customer Data for purposes outside the Service.
5. Cookies and Tracking
We use cookies for:
-
essential platform operations,
-
analytics (aggregate only),
-
performance measurement.
You can disable cookies in your browser, but core functions may not work.
6. Data Sharing
We may share data with:
-
sub-processors (hosting, email delivery, analytics, enrichment),
-
legal authorities when required,
-
service providers under confidentiality agreements.
We do not share Customer Data with unrelated third parties.
7. International Transfers
When transferring data outside the EEA, we use:
-
SCCs (Standard Contractual Clauses),
-
adequacy decisions,
-
GDPR-compliant safeguards.
8. Data Retention
-
Website data: retained as needed for security, analytics, or legal obligations.
-
Account data: retained while the Account is active.
-
Customer Data: deleted 30 days after Account termination.
-
Backups: deleted according to automated cycles.
9. Security Measures
We implement:
-
encryption in transit and at rest,
-
secure hosting infrastructure,
-
restricted access controls,
-
authentication security,
-
monitoring and logging,
-
regular updates and vulnerability patching.
No method is 100% secure, but we follow industry best practices.
10. Data Subject Rights
You have the right to:
-
access your data,
-
rectify errors,
-
request deletion,
-
restrict or object to processing,
-
data portability,
-
withdraw consent (for marketing),
-
lodge a complaint with a supervisory authority.
Requests can be submitted to: compliance@recruitscout.tech
11. Third-Party Services and Integrations
RecruitScout integrates with:
-
email APIs,
-
CRM systems,
-
enrichment providers.
We are not responsible for third-party terms, outages, failures, or policy changes.
Users must comply with third-party policies.
12. Children’s Data
RecruitScout is not intended for minors under 18.
We do not knowingly collect personal data of children.
13. Changes to This Privacy Policy
We may update this Privacy Policy at any time.
Continued use of the Service after updates indicates acceptance.
Website analytics preferences
Optional site analytics and Google Analytics measure page visits, referral sources, use of website features and demo submissions. Both activate only after you allow analytics. Separately, the server counts eligible public page requests without an analytics cookie or persistent visitor identifier. It stores separate daily totals for page paths, approximate countries, device categories and broad referral categories. These totals include requests from people who decline optional analytics; they do not contain individual visit logs, raw IP addresses, user-agent strings, referrer URLs, query strings or joined visitor profiles. Aggregate totals are kept for 180 days and removed during the next traffic cleanup. Requests are not unique visitors, and cached navigation, unidentified bots and network failures can affect totals. You can decline or change your choice using Analytics preferences in the footer. Declining does not prevent you from using the website or booking a demo.
When enabled, our site analytics store a random browser identifier in a secure cookie for up to six months. A visit groups activity until 30 minutes of inactivity. We record page paths, event times, estimated time each page is visible, referral and campaign sources, device and browser categories, and approximate country, region and city when the hosting provider supplies them. We do not store raw IP addresses in visitor logs or use browser fingerprinting. Locations can be inaccurate, for example when using a VPN.
If you submit a demo booking with analytics enabled, its booking reference can link your browser journey to the name and email you provide in Cal.com. This requires a signed booking notification from Cal.com. We do not identify anonymous visitors from their IP addresses. Journey, event and booking-link records are retained for up to 180 days and removed during the next analytics cleanup. Access is restricted to the password-protected admin dashboard.
Google Analytics uses its own cookies and processes usage information. Our custom Google Analytics events exclude FAQ search text, names, email addresses and booking references. Advertising storage and advertising personalisation remain disabled. Your analytics choice is stored on your device for up to six months. Withdrawing consent stops further optional tracking and clears our browser identifier; it does not automatically erase previously recorded data. Contact us using the privacy-policy contact details to request removal.
FAQ searches are separately saved and shared with the RecruitScout team as explained beside the search field. If analytics are enabled, a search can also be linked to the visit in the private dashboard. Cal.com is a separate booking service. See the policy above for contact information and broader terms.