Privacy Policy

This policy explains how Sales Scout ("we", "us") handles personal information when you visit our website, use the Sales Scout platform, or receive our done-for-you research service.

We aim to follow the Protection of Personal Information Act (POPIA) in South Africa and, where it applies, the EU and UK General Data Protection Regulation (GDPR).

• Enquiries: your name, email, company, website and message when you contact us.
• Accounts: your name, email and a password (stored only as a one-way scrypt hash).
• Workspace content: information you add about your business, uploaded documents, notes, pipeline activity, outreach drafts and feedback.
• Security and usage data: a session cookie, IP address (for rate limiting and abuse prevention), server logs, and records of AI requests (task type, size and timing, not their content).
• Business research data: publicly available information about companies and the professionals who work at them (see below).

To find prospects, we research companies using publicly available sources such as company websites, published team pages, directories and news. This can include a professional's name, job title and business contact details where the business itself has published them.

• We record the source of every fact so it can be checked.
• We never guess or generate contact details. If it isn't published, it stays blank.
• We don't scrape platforms whose terms forbid it.
• We use this information only to assess business relevance for our clients, never for consumer marketing.

If you are a professional whose details appear in our research and you'd like them corrected or removed, or you object to this processing, email us and we'll act on it promptly.

Our clients decide whether and how to contact the businesses we identify. They are responsible for complying with direct-marketing laws, such as section 69 of POPIA and applicable electronic-marketing rules. We never send messages on anyone's behalf.

• To provide the platform and our research service, including AI-assisted analysis.
• To respond to enquiries and manage our client relationships.
• To keep accounts secure, prevent abuse and fix problems.
• To improve your results using your own feedback. Your data is never used to serve another client.
• To meet legal, tax and accounting obligations.

We rely on: performing our contract with you; our legitimate interests in running and securing the service and in business-to-business research of publicly available information; your consent where the law requires it; and legal obligations.

Sales Scout uses Anthropic's Claude models, through Anthropic's commercial API, to analyse information and draft content. Relevant workspace content and public web pages are sent to Anthropic to process each request.

Anthropic's commercial terms state that API inputs and outputs are not used to train its models by default. If you connect your own Anthropic API key, requests made with it are also governed by your own agreement with Anthropic.

AI output is labelled as confirmed, inferred, suggested or unknown, and every fact links to its source, so a person can check it before relying on it.

We don't sell personal information. We share it only with service providers who help us run Sales Scout, under contracts that require them to protect it:

• Render: application hosting and storage, in the European Union (Frankfurt, Germany).
• Anthropic: AI processing and web research.

We may also disclose information where the law requires it, or to protect our rights, our clients or the public.

Our providers may process information outside your country, including in the United States and the European Union. Where this happens we rely on appropriate safeguards, such as contractual protections, as required by POPIA and the GDPR.

We use one essential cookie to keep you signed in. It is HTTP-only, sent over HTTPS, and expires after 30 days. We don't use advertising or third-party analytics cookies.

• Account and workspace data: while your account is active, then deleted within 90 days of closure unless the law requires us to keep it longer.
• Enquiries: up to 24 months after our last contact.
• Security logs: as long as needed to protect the service, normally no more than 12 months.

Data is encrypted in transit (HTTPS). Passwords are stored as one-way hashes. API keys are encrypted at rest and never sent to the browser. Each client's data is kept separate, enforced both in the application and in the database. No system is perfectly secure; if a breach affects you, we will notify you and the relevant regulator as the law requires.

You can ask to access, correct or delete your personal information, object to or restrict its processing, or receive a copy in a portable format. You can withdraw consent at any time where we rely on it.

Email us to make a request. We'll respond within the time the law allows. You can also complain to the Information Regulator (South Africa) or, in the EU/UK, your local data-protection authority.

Sales Scout is a business service and isn't intended for anyone under 18.

We'll update this page when our practices change and show the date of the latest version at the top. Significant changes will be communicated to account holders.