CCPA Privacy Rights

1. Scope and our commitment

This notice describes the rights California residents have under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and how to exercise them with ScoutSocial. ScoutSocial does not sell, rent or trade your personal information for monetary or other valuable consideration, and we do not “share” personal information for cross-context behavioural advertising as defined by the CPRA. This document supplements our Privacy Policy.

2. What “sale” and “share” mean under CCPA/CPRA

Under CCPA, “sale” means sharing personal information with a third party for monetary or other valuable consideration. Under CPRA, “share” means disclosing personal information to a third party for cross-context behavioural advertising. ScoutSocial does not engage in either practice.

3. Third-party data sharing

We share data with service providers strictly to operate the platform (see our Sub-Processors list). These are contractual service providers, not buyers of your data. We do not share data with data brokers or advertising networks.

3.1 Notice at collection — categories of personal information

We collect the following categories of personal information about California residents who use ScoutSocial:

• (a) Identifiers — name, email, account ID, IP address, platform user IDs.
• (b) Customer records (Cal. Civ. Code §1798.80) — billing identifiers, organisation membership.
• (c) Internet/electronic activity — usage logs, product analytics (with consent).
• (d) Geolocation — coarse, derived from IP only.
• (e) Audio/visual — media files you upload.
• (f) Professional/employment — workspace role.
• (g) Inferences — content-pattern and engagement analytics for the workspace.

Sources: directly from you and your workspace; from Connected Platforms via their APIs on your authorisation; from cookies and similar technologies (where consented).

Business purposes: operating the platform, providing AI features, billing, security, compliance and analytics — see Privacy Policy § 3.

Retention: as per Privacy Policy § 8.

Sale/share: none.

Sensitive personal information: we do not collect or use sensitive personal information for any purpose other than what is reasonably necessary to provide the service.

4. Your rights under CCPA/CPRA

As a California resident, you have the following rights:

• Right to know what categories and specific pieces of personal information we have collected, sources, purposes, and the categories of recipients.
• Right to delete personal information we have collected, subject to legal exceptions.
• Right to correct inaccurate personal information.
• Right to opt out of sale and sharing — we do not sell or share personal information; this right is always honoured.
• Right to limit use and disclosure of sensitive personal information — applies if we ever process such information for purposes beyond providing the service.
• Right to non-discrimination for exercising your rights.
• Right to access and data portability — you can export your data via Settings → Workspace & Preferences → Privacy & Cookies.
• Authorised agent. You may designate an authorised agent to make a request on your behalf by providing the agent written, signed permission; we will verify both your identity and the agent’s authority before responding.

To exercise these rights, use the in-product tools in Settings → Workspace & Preferences → Privacy & Cookies, or email legal@scoutsocial.ai.

5. Verification

When you submit a CCPA request, we verify your identity through your authenticated ScoutSocial session where possible; for unauthenticated requests we may ask for confirmation of two or three data points we already hold (e.g. account email, organisation name, last subscription invoice number). Where an authorised agent submits a request on your behalf, we will additionally verify the agent’s written authority unless you submit the request together with the agent. We respond to verified requests within 45 calendar days and may extend by a further 45 days where reasonably necessary, with notice.

6. Opt-out signals

ScoutSocial honours the Global Privacy Control (GPC) signal as an opt-out of sale and sharing where applicable. Because we do not sell or share, the GPC signal does not change our handling of identifiers; we record receipt of the signal in our consent log.

7. Sensitive personal information

ScoutSocial does not use sensitive personal information to infer characteristics about you (our collection-and-use commitment is set out in § 3.1). You may submit a ‘right to limit’ request via legal@scoutsocial.ai.

8. Contact

Email: legal@scoutsocial.ai

See also our Privacy Policy.