Privacy Policy

AppScout ("we", "us", "our") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

1. Information We Collect

1.1 Information You Provide

• Account Information: Name, email address, password, and profile details when you create an account
• Payment Information: Billing details, payment card information (processed securely through our payment provider Paddle)
• Communications: Content of your messages when you contact support or participate in surveys
• User Content: Information you submit through our platform, including tracked apps, feedback, and success stories

1.2 Information We Collect Automatically

• Usage Data: How you interact with our platform, features used, time spent, and actions taken
• Device Information: Browser type, operating system, IP address, and device identifiers
• Log Data: Server logs recording access times, pages viewed, and technical errors
• Analytics Data: Performance metrics and user behavior patterns (anonymized)

1.3 Information from Third Parties

• Public Forum Data: Publicly available discussions from Shopify forums and communities
• OAuth Providers: Basic profile information if you sign in with Google or other providers
• Payment Processors: Transaction confirmation and subscription status from Paddle

2. How We Use Your Information

2.1 To Provide Our Services

• Create and manage your account
• Process payments and manage subscriptions
• Generate and deliver AI-powered insights
• Track your app development progress
• Provide customer support

2.2 To Improve Our Platform

• Analyze usage patterns to enhance features
• Develop new functionality based on user needs
• Fix bugs and technical issues
• Conduct research and analytics

2.3 To Communicate with You

• Send service-related notifications
• Provide product updates and announcements
• Respond to inquiries and support requests
• Send marketing communications (with your consent)

2.4 Legal Basis for Processing (GDPR)

We process your personal data based on:

• Contract: To fulfill our service agreement with you
• Legitimate Interest: To improve our services and ensure security
• Consent: For marketing communications and optional features
• Legal Obligation: To comply with applicable laws

3. Information Sharing and Disclosure

3.1 We Do Not Sell Your Data

Important: We never sell, rent, or trade your personal information to third parties for their marketing purposes.

3.2 Service Providers

We share information with trusted service providers who help us operate our platform:

• Payment Processing: Paddle for subscription management
• Infrastructure: Cloud hosting providers (AWS/Google Cloud)
• Analytics: Google Analytics for usage insights
• Communication: Email service providers for notifications
• Security: Sentry for error tracking and monitoring

3.3 Legal Requirements

We may disclose information when required by law or to:

• Comply with legal processes or government requests
• Protect our rights, privacy, safety, or property
• Protect against fraud or security issues
• Enforce our Terms of Service

3.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred with appropriate privacy protections.

4. Data from Forums and Third-Party Sources

4.1 Public Forum Analysis

We analyze publicly available discussions from developer forums and communities to:

• Identify app opportunity patterns
• Generate market insights
• Understand developer needs and pain points

4.2 Ethical Data Practices

• We only collect publicly available information
• We respect robots.txt and platform terms of service
• We do not collect private messages or restricted content
• We implement rate limiting to avoid overloading sources

4.3 Data Attribution

Forum data is aggregated and anonymized. We do not associate public forum posts with individual AppScout users unless explicitly connected by the user.

5. Cookies and Tracking Technologies

5.1 Types of Cookies We Use

• Essential Cookies: Required for platform functionality and security
• Analytics Cookies: Help us understand usage patterns
• Preference Cookies: Remember your settings and choices
• Marketing Cookies: Track campaign effectiveness (with consent)

5.2 Managing Cookies

You can control cookies through:

• Browser settings to block or delete cookies
• Our cookie preference center (when available)
• Opting out of analytics via Google Analytics Opt-out Browser Add-on

5.3 Do Not Track

We respect Do Not Track browser signals and will not track users who have enabled this setting.

6. Data Security

6.1 Security Measures

We implement industry-standard security measures including:

• Encryption: SSL/TLS for data in transit, encryption at rest for sensitive data
• Access Controls: Role-based access and authentication requirements
• Monitoring: Continuous security monitoring and intrusion detection
• Regular Audits: Security assessments and vulnerability testing
• Incident Response: Documented procedures for security incidents

6.2 Data Breach Notification

In the event of a data breach affecting your personal information, we will:

• Notify affected users within 72 hours of discovery
• Provide information about the nature and scope of the breach
• Offer guidance on protective measures
• Report to relevant authorities as required by law

7. Your Rights and Choices

7.1 Your Privacy Rights

Depending on your location, you may have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Deletion: Request deletion of your data ("right to be forgotten")
• Portability: Receive your data in a portable format
• Restriction: Limit how we process your data
• Objection: Object to certain processing activities
• Withdraw Consent: Revoke previously given consent

7.2 Exercising Your Rights

To exercise your privacy rights:

• Email us at privacy@appscout.io
• Use the privacy controls in your account settings
• Include sufficient information to verify your identity

7.3 California Privacy Rights (CCPA)

California residents have additional rights including:

• Right to know what personal information is collected
• Right to know if information is sold or disclosed
• Right to opt-out of sale (Note: We do not sell personal information)
• Right to non-discrimination for exercising privacy rights

7.4 European Privacy Rights (GDPR)

EU residents have enhanced rights including:

• Right to lodge a complaint with supervisory authorities
• Right to withdraw consent at any time
• Right to object to automated decision-making

8. Children's Privacy

AppScout is not intended for users under 16 years of age. We do not knowingly collect personal information from children. If we discover we have collected information from a child under 16, we will promptly delete it.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@appscout.io.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws than your country.

9.1 Safeguards

When we transfer data internationally, we ensure appropriate safeguards through:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions where applicable
• Privacy Shield certification (where valid)
• Binding corporate rules for intra-group transfers

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes through:

• Email notification to your registered address
• Prominent notice on our platform
• Update to the "Last Updated" date

Continued use of our platform after changes indicates acceptance of the updated policy.

11. Contact Information

For privacy-related questions or concerns, please contact us:

11.1 Supervisory Authority

EU residents may also contact their local data protection authority with complaints or concerns.