Privacy Policy

This policy explains what data IntellectScout ("we", "us") collects when you use the marketing site, public radar, or B2B organization workspace. We follow GDPR principles — data minimization, purpose limitation, storage limitation, and data-subject rights — in how we collect, use, store, and help you export personal data. Details for each category are below.

Data we collect

• Account — email and password (email auth), or OAuth identity from GitHub, Google, or LinkedIn: provider subject id, username, display name, avatar URL, and email when the provider shares it.
• Organization workspace — organization name, industry, team size, membership role, and org-scoped problem intelligence (signals, clusters, scores).
• Integrations — when you connect Slack, Jira, or GitHub, we store OAuth tokens, selected channels/repos/projects, and message or issue text needed to cluster problems. See Integrations.
• Public radar & submit — anonymous or signed-in frustration submissions and public source excerpts (Hacker News, GitHub, Stack Overflow).
• Watchlist — problems you save to track over time (signed-in users).
• Usage — a session cookie to keep you signed in and standard server logs.
• Payments — handled by FastSpring (Bright Market, LLC d/b/a FastSpring), our Merchant of Record. FastSpring collects payment and billing contact details at checkout. We receive subscription status and account identifiers from FastSpring webhooks — not card numbers.

How we use it

• Authenticate you and operate your workspace, watchlist, and plan entitlements.
• Ingest, cluster, and rank problems from connected sources and public feeds.
• Generate CSV, JSON, and PDF exports you request from the dashboard.
• Secure, debug, and improve the service.

Integrations & processor role

For B2B workspace data, your organization is the controller of employee and customer message content; IntellectScout acts as a processor to deliver ranked problem clusters. We do not sell integration data.

• Slack / Jira / GitHub — OAuth apps you authorize; we poll or receive webhooks for configured channels, projects, or repositories only.
• OAuth login providers — GitHub, Google, LinkedIn for authentication only.
• FastSpring — billing, tax collection, invoicing, and payment processing as Merchant of Record. FastSpring's privacy practices are described in their Privacy Statement.
• Hosting — production targets Hetzner EU VPS; exact region depends on deployment.

Public sources

IntellectScout processes publicly available posts to detect and cluster developer problems. Evidence excerpts link back to their public source.

Cookies

We use a single httpOnly, SameSite session cookie to keep you signed in. We do not use third-party advertising or analytics cookies on the product. Theme preference may be stored in localStorage ("is-theme") on your device only. FastSpring may set cookies on its hosted checkout pages when you purchase Pro.

Retention

• Organization workspace signals — until you disconnect integrations, delete the org, or contact support.
• Sandbox demo data — purged after approximately 7 days.
• Account data — while your account is active.

Your rights

Depending on your jurisdiction you may have rights to access, export, rectify, or delete personal data. For payment and invoice data held by FastSpring as Merchant of Record, contact FastSpring or use their account-management tools in addition to contacting us.

• Export — workspace CSV, JSON (Pro), and PDF exports are available today from your dashboard.
• Deletion — self-service account deletion is not shipped yet. Email support@intellectscout.com to request account or org removal.
• Rectification — contact support to update account details until self-service profile edit ships.

We do not sell your personal data.

Contact

Privacy requests: support@intellectscout.com.