Privacy Policy

Effective date: August 9, 2026

This Privacy Policy explains how the operator of CrowScout (“CrowScout,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal data when you visit our websites, create an account, use our demand-intelligence services, communicate with us, or purchase a plan (together, the “Service”).

The CrowScout operator identified in your applicable order form, invoice, or account notice is the controller of account and business-contact data. For Customer Inputs processed on an organization’s instructions, that organization may be the controller and CrowScout its processor or service provider. Contact us through the contact page to identify the applicable operator or exercise a privacy right.

1. Scope

This policy covers CrowScout’s marketing site, authenticated application, product research and Reddit discovery workflows, notifications, support, and billing interactions. It does not govern third-party websites or services that have their own privacy policies, including Reddit and payment providers.

2. Personal data we collect

Data you provide

  • Account and profile data: name, email address, avatar, language, authentication settings, and account identifiers.
  • Product and research data: product names, website URLs, descriptions, target users, keywords, exclusions, discovery goals, edits, notes, draft content, and feedback.
  • Billing data: plan, transaction, subscription, tax, invoice, and payment-status information. Payment-card details are normally collected directly by the payment provider rather than stored by CrowScout.
  • Communications: support requests, contact-form content, survey responses, and other messages you send us.

Data generated through use of the Service

  • Usage and device data: IP address, browser and device type, operating system, referring page, timestamps, language, approximate location derived from IP, feature interactions, and diagnostic events.
  • Security and workflow data: sessions, sign-in events, audit records, job status and stage, provider run identifiers, counts, timings, warnings, errors, and abuse-prevention signals.
  • AI-generated data: structured product profiles, keyword plans, relevance scores, lead routes, summaries, insights, and draft replies or messages.

Public-source data

To provide Reddit discovery and research, CrowScout may collect or receive publicly available post and comment text, titles, usernames, subreddit names, permalinks, identifiers, timestamps, engagement metrics, and related metadata. Comments are collected on demand when additional context is requested. We may receive this data from public pages or service providers engaged by CrowScout.

Public-source data can include personal data even when it was posted publicly. We use it only for the research, evidence, safety, and product functions described here; we do not treat public availability as permission for every possible use.

Website evidence

When you add a product, CrowScout fetches the normalized public homepage you provide and extracts bounded evidence such as its title, description, headings, canonical URL, language, and cleaned body text. The homepage may be rendered by a collection provider if direct retrieval fails or provides insufficient evidence.

3. How we use personal data

We use personal data to:

  • create, authenticate, secure, and administer accounts;
  • analyze the product website and maintain user-reviewed product profiles;
  • generate queries, discover and deduplicate public conversations, score relevance, and organize leads;
  • generate summaries, insights, and drafts for human review;
  • run durable workflows, display progress, diagnose failures, and prevent duplicate processing;
  • provide support, service notices, setup-completion notices, and requested or preference-based digests;
  • process purchases, trials, subscriptions, tax records, and billing support;
  • measure and improve usability, reliability, accessibility, and security;
  • detect fraud, misuse, unauthorized access, and violations of our Terms; and
  • comply with law, enforce agreements, and establish or defend legal claims.

CrowScout does not publish Reddit replies or send Reddit direct messages for you. Lead scores and AI output support human review and are not used by CrowScout to make legal or similarly significant decisions about individuals.

4. Legal bases

Where a legal basis is required, we process personal data:

  • to perform a contract or take requested pre-contract steps, such as creating an account, running product research, and providing paid features;
  • for our legitimate interests, such as securing and improving the Service, supporting users, understanding product performance, and finding relevant public business conversations, balanced against the rights of affected people;
  • with consent, where required for optional cookies, certain communications, or another stated purpose; and
  • to meet legal obligations and protect legal rights.

You may withdraw consent at any time. Withdrawal does not affect processing that already occurred and does not prevent processing based on another lawful ground.

5. How we disclose personal data

We do not sell personal data or share it for cross-context behavioral advertising. We may disclose limited data to:

  • infrastructure and hosting providers that run the application, database, storage, monitoring, and durable workflows;
  • AI providers that process bounded website evidence, search context, selected public-source content, and draft instructions;
  • collection and data providers used to retrieve public websites or Reddit records;
  • authentication, email, and support providers used for sign-in, account security, notifications, and user communications;
  • payment providers used for checkout, subscriptions, invoices, fraud prevention, and tax handling;
  • analytics providers, if enabled, subject to applicable consent controls;
  • professional advisers and authorities where reasonably necessary for legal, security, audit, or compliance purposes; and
  • transaction participants in a financing, merger, acquisition, reorganization, or sale, subject to appropriate safeguards.

Providers may process data only for contracted services and under their own applicable legal obligations. The particular provider mix may change as the Service develops. You may contact us for current information relevant to your account.

6. International transfers

CrowScout and its providers may process data in countries other than your own. Where required, we use recognized safeguards such as adequacy decisions, standard contractual clauses, or another lawful transfer mechanism. No transfer mechanism eliminates all risk associated with processing data in another jurisdiction.

7. Retention

We keep personal data only as long as reasonably needed for the purposes described above, including to provide the Service, maintain security and audit history, resolve disputes, and meet tax, accounting, and legal duties.

  • Account, product, lead, profile, keyword, workflow, and draft data is generally retained while the account or product remains active.
  • Deleting a product removes product-owned records through the application’s deletion process. A public Reddit thread may remain if another CrowScout product still lawfully references it.
  • Deleting an account begins deletion or de-identification of account-controlled data, subject to billing, fraud-prevention, backup, legal-hold, and security exceptions.
  • Provider logs, backups, and records required by law may persist for a limited additional period and are removed or overwritten under normal retention cycles.
  • Public-source records may be retained to preserve evidence, deduplication, attribution, and historical workflow integrity. We will evaluate valid deletion or objection requests in light of applicable law, source availability, other users’ rights, and our legal obligations.

Because retention needs vary by record and jurisdiction, we do not assign one period to every category. You may ask for additional information about a specific category.

8. Cookies and local storage

The Service uses strictly necessary cookies and similar storage for sessions, security, locale, consent choices, and interface preferences such as theme. These are required for requested functionality.

Optional analytics or marketing technologies, if introduced, will be described in the consent interface and used only where permitted. You can change browser settings or available consent controls, but blocking necessary storage may prevent sign-in or other features from working.

9. Security

We use reasonable administrative, technical, and organizational measures designed to protect personal data, including access controls, authenticated ownership checks, bounded collection, provider credential separation, and workflow audit records. No internet service or storage system can guarantee absolute security. Protect your credentials and contact us promptly if you suspect unauthorized access.

10. Your privacy rights

Depending on where you live, you may have rights to:

  • know whether and how we process your personal data;
  • access or receive a portable copy of certain data;
  • correct inaccurate data;
  • delete data;
  • restrict or object to certain processing;
  • withdraw consent;
  • opt out of sale, sharing, targeted advertising, or certain profiling where applicable; and
  • complain to your local data-protection authority or appeal our response.

Submit a request through our contact page. Please identify whether the request concerns a CrowScout account or public Reddit content and provide enough information to locate the record, such as the account email or relevant permalink. We may verify your identity and authority. Authorized agents may submit requests where local law allows. We will not discriminate against you for exercising a privacy right.

If CrowScout processes Customer Inputs only on behalf of your organization, we may direct your request to that organization. Rights can be limited by exceptions under applicable law, including the rights of others, security, freedom of expression, and legal recordkeeping.

11. Public Reddit content requests

CrowScout is not Reddit and cannot delete source content from Reddit. If you delete or edit a Reddit post, the source platform controls that change. You may separately ask CrowScout to review personal data in a stored public-source record. Include the permalink and explain the request. We will assess it under applicable law and may retain a minimal record where needed for security, legal compliance, or suppression of re-collection.

12. Children

CrowScout is a business service and is not directed to children. You must be at least 18 to create an account. We do not knowingly collect account data from children. If you believe a child provided account data, contact us.

13. Changes to this policy

We may update this policy as the Service, providers, or law changes. We will publish the new effective date and provide additional notice of material changes where reasonably required. Earlier versions may be retained for reference.

14. Contact

For privacy questions, rights requests, complaints, or the identity and address of the operator applicable to your account, use our contact page. If your request is about a transaction, include the order or invoice identifier but do not send full payment-card information.