How we handle your data.

Your profile is private. Employers see your Compass Score and selling style with your name and contact details hidden. They only learn who you are if you accept a specific intro, one company at a time, your choice each time. If you apply to a role yourself, that one company sees your name. You are invisible to everyone else until you say yes.

This is the line we will not cross: the data a company uploads for its hiring audit is never used to source or poach candidates, and the rep marketplace is neverbuilt from any company's upload. Candidate shortlists come only from reps who chose to be on the marketplace. The two datasets are isolated at the database level (row-level security, service-only access), not just by policy. The same applies to transcripts a company scores for its own reps.

We use the sales data you share to produce your audit or your score, and to improve and build our products, including the machine-learning models behind them. We may use de-identified, aggregated insights without restriction. We do not publish your raw data or expose your customers' personal information. Employers accept a data-use agreement at setup; reps control what is shared from their dashboard.

If you import calls from Fireflies, we use your API key for that one request to fetch and score your transcripts, then discard it. It is never stored or logged. Only the trait scores are kept; your recordings and transcripts stay on your Fireflies account.

Data is stored in Postgres (Supabase), encrypted at rest and in transit, behind row-level security so only Scout's server can read it. Call recordings and transcripts you upload are stored privately and used only to compute your score.

Honest status: Scout is not yet SOC 2 certified. It is on our roadmap. If your security review needs specifics before then, reach out and we will walk you through our setup.

Reps can remove uploaded calls and delete their whole profile from the Privacy tab of the dashboard; it takes effect immediately and cannot be undone. Companies can ask us and we will remove everything. We honor deletion requests. We don't hold your data hostage.