Privacy Policy

Overview & Data Controller

This Privacy Policy describes how Scoutix ("Scoutix," "we," "us," or "our") collects, uses, stores, and protects personal information obtained through the Scoutix platform and website (collectively, the "Service").

Role Clarification: Muhammad Mohsin Shabbir / Scoutix acts as a data controller for personal data collected directly from users (account, billing, and usage data). For publicly available business contact data that users search and export through the platform, Scoutix functions as a data processing tool only — the user assumes full responsibility for how that exported data is subsequently used.

By creating an account or using the Service, you agree to the practices described in this Privacy Policy. If you do not agree, please discontinue use of the Service.

Information We Collect

We collect information you provide directly, information generated automatically through your use of the Service, and publicly available business data that our platform aggregates from online sources.

How We Use Your Information

Service Delivery

We use your account and usage data to authenticate your sessions, process lead generation queries, generate results, and enable data export functionality. This processing is necessary to fulfil our contractual obligations to you as a subscriber.

Billing & Subscription Management

Billing data is used to process subscription payments, issue invoices, manage plan changes, handle cancellations, and prevent fraudulent transactions. Payment processing is handled entirely by Paddle; we receive only transaction confirmation and subscription status data.

Service Improvement

Aggregated and anonymized usage data helps us identify performance issues, understand feature adoption, and improve the platform experience. We do not use individual-level data for product analytics without consent.

Communication

We send transactional emails including account confirmations, subscription receipts, password resets, and service notifications. Where you have opted in, we may also send product updates or promotional communications. You may unsubscribe from marketing emails at any time using the unsubscribe link in those emails.

Fraud Prevention & Security

IP addresses and usage patterns are monitored to detect and prevent unauthorized access, platform abuse, and fraudulent activity, based on our legitimate interest in maintaining a secure and reliable service.

Legal Basis for Processing (GDPR — EEA / UK Users)

For users in the European Economic Area (EEA) or United Kingdom, we process personal data on the following legal bases:

Contractual Necessity (Article 6(1)(b)): Account registration data, login credentials, and billing information are processed to perform our contract with you and deliver the Service.

Legitimate Interest (Article 6(1)(f)): Security monitoring, fraud prevention, and aggregate analytics are processed on the basis of our legitimate interest in operating a safe and functional platform, balanced against your privacy rights.

Consent (Article 6(1)(a)): Where you have opted in to receive marketing communications, we process your email on the basis of your freely given consent. You may withdraw consent at any time by using the unsubscribe link in any marketing email.

Lawful Basis for Publicly Available Business Data Aggregation

The business information surfaced through Scoutix (names, addresses, phone numbers, categories, ratings) is sourced from publicly accessible online directories. This data relates to businesses as commercial entities, not to private individuals in their personal capacity. Our processing of such publicly available business data to provide search and export functionality to subscribers is based on our legitimate interest in delivering the agreed service, and is consistent with the reasonable expectations of both users and the businesses whose public-facing contact details appear in public directories.

Scoutix does not process special category personal data and does not use publicly available data to build profiles of private individuals.

Data Sources — Publicly Available Business Information

The core functionality of Scoutix involves aggregating publicly available business information from online directories and mapping services. The types of business data our platform surfaces include:

This information is publicly accessible on the open internet and relates primarily to businesses and commercial entities. Scoutix does not claim ownership of this third-party data. Users are solely responsible for ensuring their use of exported business data complies with all applicable laws in their jurisdiction and in the jurisdictions they target, including anti-spam regulations, telemarketing laws, and local data protection requirements.

Scoutix does not guarantee the accuracy, completeness, or current validity of publicly sourced business data, as such information is subject to change by the original source at any time.

Data Storage & Security

Your account data, billing records, and usage data are stored on secure cloud infrastructure maintained by reputable third-party hosting providers. We implement the following security practices:

While we apply reasonable and appropriate technical measures to protect your data, no system can be guaranteed 100% secure. In the event of a data breach that poses a material risk to your rights, we will notify affected users in a timely manner consistent with applicable law.

Third-Party Services

Scoutix uses the following categories of third-party service providers to operate the platform. Each provider processes data under their own privacy policies and applicable data processing agreements.

Cloud Hosting Providers

We use cloud infrastructure providers to host our application servers, databases, and static assets. These providers may process data in data centers located in various countries.

Payment Processing — Paddle

Subscription billing is managed by Paddle (paddle.com), a third-party Merchant of Record. Paddle processes payment card data and issues invoices on our behalf. Your financial data is subject to Paddle's Privacy Policy. We do not store or have direct access to your full payment card details. Refunds are handled in accordance with our Terms of Service and Paddle's applicable payment terms.

Email Delivery

We use a third-party transactional email provider to deliver account notifications, receipts, and communications. Email providers may process your email address and delivery metadata.

Analytics

We may use analytics tools to understand aggregate platform usage. Where used, these tools are configured to operate on anonymized or pseudonymized data. We do not enable cross-site behavioral tracking or sell user data to advertisers.

Infrastructure & Automation Services

To deliver our data aggregation functionality, Scoutix uses server-side cloud infrastructure including proxy routing services and automation components. These tools are used to facilitate user-requested data queries across publicly available online sources on behalf of users. No personal data of our users is shared with these infrastructure providers beyond what is technically necessary to route and process requests.

International Data Transfers

Scoutix is operated from Islamabad, Pakistan and serves users across multiple countries. Your data may be processed in countries other than your country of residence, including countries where data protection laws may differ from those in your jurisdiction.

When processing data from users in the European Economic Area (EEA) or United Kingdom, international transfers are carried out where necessary for the performance of our contract with you and subject to appropriate safeguards consistent with applicable data protection laws. By using the Service, you acknowledge that your data may be transferred to and processed in Pakistan and other jurisdictions where our service providers operate. Users requiring a Data Processing Agreement (DPA) may contact us at support@scoutix.io.

Your Rights

Regardless of your location, Scoutix respects your right to control your personal information. You may exercise the following rights by contacting us at support@scoutix.io:

We will respond to verified requests within 30 days. Identity verification may be required before processing certain requests. We will not discriminate against you for exercising any of these rights.

EU / UK Users — Supervisory Authority Complaint

If you are located in the European Economic Area (EEA) or United Kingdom and believe that we have not handled your personal data in accordance with applicable data protection law, you have the right to lodge a complaint with your local data protection supervisory authority.

California Residents — CCPA / CPRA Rights

If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) may provide you with additional rights regarding your personal information.

In the preceding 12 months, Scoutix has collected the categories of personal information described in Section 2 of this policy (account, billing, usage, and technical data). We have not sold personal information and do not intend to.

Data Retention & Backups

We retain your personal data for as long as your account remains active and for a reasonable period thereafter to fulfil the purposes outlined in this policy.

Active Account Data

Account data, usage logs, and associated records are retained for the duration of your active subscription and for 30 days following account cancellation, to allow for reactivation or dispute resolution. After this period, your personal data is permanently deleted from active production systems.

Billing & Financial Records

Transaction records, invoice history, and billing data may be retained for up to 7 years from the date of transaction to comply with financial recordkeeping obligations and tax regulations applicable in Pakistan and other relevant jurisdictions.

Backup & Archival Systems

Our cloud infrastructure providers maintain automated backup systems for disaster recovery purposes. Personal data deleted from active systems may persist in encrypted backup archives for an additional period of up to 90 days before being overwritten or permanently purged during routine backup rotation cycles. We do not use backup archives to restore or reactivate deleted accounts.

Anonymized Data

Aggregated, anonymized usage statistics and analytics data — which cannot reasonably be used to identify any individual — may be retained indefinitely for platform improvement purposes.

Cookies & Tracking Technologies

Scoutix uses cookies and similar technologies to operate the Service. We use three categories:

Essential Cookies: Required for authentication, session management, and core platform functionality. These cannot be disabled without impacting your ability to use the Service.

Functional Cookies: Remember your preferences such as language settings and UI configuration between sessions.

Analytics Cookies: Collect aggregated, anonymized data about how the platform is used to help us improve the Service. You may opt out of analytics cookies through your browser settings or account preferences without affecting core functionality.

We do not use advertising cookies. We do not allow third-party advertisers to place cookies through our platform.

Do Not Track Signals

Some browsers include a "Do Not Track" (DNT) feature that signals to websites that you prefer your browsing activity not be tracked. Scoutix does not currently respond to browser Do Not Track signals, as there is no consistent or legally binding industry standard for how such signals should be interpreted or honoured.

We do not engage in cross-site behavioral tracking or share user data with advertising networks. If you wish to limit tracking, you may configure cookie preferences through your browser settings or opt out of analytics cookies through your Scoutix account settings.

Limitation of Liability — Third-Party Data Accuracy

The business information surfaced through Scoutix's platform is sourced from publicly available online directories and listings. Scoutix makes no representations or warranties regarding the accuracy, completeness, timeliness, or fitness for any particular purpose of such third-party data.

Business contact details, addresses, operating hours, and other information may be outdated, incomplete, or inaccurate. Users are solely responsible for verifying any business data before using it for outreach, marketing, or any other commercial purpose. Scoutix shall not be liable for any losses, claims, or damages arising from reliance on third-party business data obtained through the platform.

Children's Privacy

Scoutix is a B2B platform intended exclusively for individuals who are at least 18 years of age. Our Service is not directed at, and we do not knowingly collect personal data from, individuals under the age of 18.

If we become aware that a minor has created an account or provided personal data to us without verified parental consent, we will take immediate steps to delete that information and terminate the associated account. If you believe a minor has submitted personal data through our platform, please contact us immediately at support@scoutix.io.

Compliance Statement

Scoutix designs its data handling practices to align with internationally recognized privacy principles, including principles consistent with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), and the Prevention of Electronic Crimes Act (PECA) of Pakistan — including data minimization, purpose limitation, transparency and storage limitation.

Scoutix does not claim formal regulatory certification or registration with any supervisory authority. This policy represents a good-faith effort by Muhammad Mohsin Shabbir to operate the Service in a legally responsible manner. Users in regulated jurisdictions with specific compliance inquiries are encouraged to contact support@scoutix.io.

Changes to This Policy

Scoutix may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal obligations, or business operations. When we make material changes, we will notify you by sending an email to the address associated with your account and/or by posting a prominent notice on our website at least 14 days before the changes take effect.

Your continued use of the Service after the effective date of an updated Privacy Policy constitutes your acceptance of the revised policy. If you do not agree to the updated policy, you must discontinue use of the Service before the effective date. All previous versions of this policy are archived and available upon request by emailing support@scoutix.io.

Contact