Privacy Policy

Last Updated: January 2026

Your Privacy Matters: At ScoutVibe, we are committed to transparency about how we handle data. This Privacy Policy explains our practices for both our direct customers (SaaS owners) and the end users who interact with websites using our tracking technology.

1. Introduction and Scope

Welcome to ScoutVibe. This Privacy Policy describes how ScoutVibe ("we," "us," or "our"), collects, uses, discloses, and protects information when you use our website analytics and visitor tracking services (collectively, the "Service").

Important Notice: ScoutVibe provides analytics and tracking services that involve a three-party relationship. This policy covers our obligations to both our direct customers and the end users whose data may be collected through our customers' websites.

By accessing or using ScoutVibe, you agree to this Privacy Policy. If you do not agree with our practices, please do not use the Service.

1.1 Our Role in Data Processing

ScoutVibe operates in two distinct capacities:

As a Data Controller

For data collected directly from our customers (SaaS owners who use ScoutVibe), including account information, billing details, and platform usage data.

As a Data Processor

For end user data collected through our customers' websites via the ScoutVibe tracking script. Our customers are the Data Controllers for this data, and we process it on their behalf according to their instructions.

2. Information We Collect

2.1 Information from ScoutVibe Customers (SaaS Owners)

We collect the following information directly from our customers:

2.2 End User Data Collected via Tracking Script

When our customers implement the ScoutVibe tracking script on their websites, we collect the following data about their website visitors (end users) on behalf of our customers:

Data Type Description Purpose
Device Fingerprint A unique identifier generated from browser characteristics (screen resolution, timezone, language, user agent, etc.) Cross-session visitor identification without cookies
Browser/Device Info Browser type, version, operating system, device type, user agent string Analytics, compatibility tracking
Page Activity Pages visited, time on page, scroll depth, click events, referrer URL Behavioral analytics, conversion tracking
Session Data Session identifiers, visit timestamps, session duration Session tracking, visitor journey analysis
Tracking Token Data Custom link identifiers, campaign parameters, prospect IDs Attribution, lead tracking, campaign analytics
Email Address When voluntarily provided by the end user through forms on customer websites Cross-device tracking, lead identification
Geolocation (City-Level) Country, region/state, and city derived from IP address. We do NOT store latitude, longitude, or precise coordinates. Geographic analytics, regional traffic analysis

IP Address Handling: ScoutVibe collects IP addresses solely to derive city-level geographic location (country, region, city). The IP address is immediately hashed using SHA-256 with a secure salt before storage. We do NOT store raw IP addresses. The hash is one-way and cannot be reversed to reveal the original IP. We explicitly do NOT collect or store latitude, longitude, or precise geographic coordinates - only city-level location data.

2.3 localStorage and Client-Side Storage

Our tracking script uses browser localStorage to store:

Note to End Users: If you are visiting a website that uses ScoutVibe tracking, your data is being collected by the website owner (our customer) who is the Data Controller. Please refer to that website's privacy policy for information about how they use your data. You may contact them directly to exercise your data protection rights.

Important Notice on Device Fingerprinting: Device fingerprinting is a tracking technique that may require user consent under the ePrivacy Directive (EU) and similar regulations. ScoutVibe provides tools for customers to implement consent-based tracking:

Customer Responsibility: Website owners using ScoutVibe are responsible for obtaining appropriate consent from their visitors where required by law. We provide the technical tools; legal compliance is the customer's obligation.

3. How We Use Information

3.1 Customer Data Usage

We use customer information for the following purposes:

3.2 End User Data Usage (On Behalf of Customers)

End user data collected through the tracking script is processed on behalf of our customers to:

4. Legal Basis for Processing (GDPR)

For processing activities under our control, we rely on the following legal bases:

For end user data, our customers (as Data Controllers) are responsible for establishing the appropriate legal basis. We recommend our customers obtain consent or rely on legitimate interests with clear disclosure in their privacy policies.

5. Data Sharing and Disclosure

We never sell personal information to third parties.

5.1 Service Providers

We share data with trusted third-party service providers who assist in operating our Service:

5.2 Customer Access

Our customers have full access to the end user data collected through their implementations of our tracking script. This access is necessary for them to utilize our analytics services.

5.3 Legal Requirements

We may disclose information if required by law or in response to:

5.4 Business Transfers

In the event of a merger, acquisition, bankruptcy, or sale of assets, your information may be transferred. We will notify affected parties of any such change in ownership.

6. International Data Transfers

Important: ScoutVibe is operated by a company founded in the Kingdom of Morocco. Our services are hosted on Amazon Web Services (AWS) infrastructure located in the United States.

Your data may be transferred to and processed in:

For transfers from the EEA, UK, or other jurisdictions with data transfer restrictions, we implement appropriate safeguards including:

By using our Service, you acknowledge and consent to the transfer of your information to countries that may have different data protection laws than your country of residence.

7. Data Security

We implement comprehensive security measures to protect data:

However, no method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security against all threats.

8. Data Retention

8.1 Customer Data

8.2 End User Tracking Data

Customers may request earlier deletion of their data and associated end user data by contacting us.

9. Your Rights

9.1 ScoutVibe Customer Rights

As a customer, you have the right to:

9.2 End User Rights

If you are a website visitor whose data has been collected through ScoutVibe:

To exercise your rights:

Submit a Data Subject Request Form

This form allows you to use our online form to submit requests for data access, deletion, rectification, or portability. You'll receive a verification email and we'll respond within 30 days as required by GDPR.

Or contact us at: contact@ialae.com

Subject Line: ScoutVibe Privacy Rights Request

10. Customer Obligations

If you are a ScoutVibe customer implementing our tracking technology, you agree to:

Disclaimer: ScoutVibe is not responsible for our customers' compliance with privacy laws. Each customer is responsible for ensuring their implementation and use of our services is lawful in their jurisdiction.

11. Cookies and Tracking Technologies

11.1 ScoutVibe Platform (Dashboard)

Our platform uses essential cookies only:

Type Purpose Duration
Essential Authentication (auth_token cookie for login sessions) Session/7 days

11.2 ScoutVibe Tracking Script (On Your Websites)

Our tracking script does not use cookies. Instead, it uses browser storage for visitor identification:

End users can clear localStorage data through their browser settings. Note that this may reset their visitor profile for analytics purposes.

12. Children's Privacy

ScoutVibe is a business-to-business service intended for use by businesses and professionals. We do not knowingly collect personal information directly from children.

12.1 Age Thresholds by Jurisdiction

Our customers must not use ScoutVibe to knowingly collect data from children without appropriate parental consent as required by applicable law:

If we become aware of data collected from a child without proper consent, we will delete it promptly. Contact us at contact@ialae.com to report any concerns.

13. California Privacy Rights (CCPA/CPRA)

California residents have additional rights:

California customers using ScoutVibe may be considered "businesses" under CCPA and should ensure compliance with California law regarding their own users.

14. European Privacy Rights (GDPR)

For individuals in the European Economic Area (EEA), UK, or Switzerland:

15. Do Not Track & Global Privacy Control

15.1 Global Privacy Control (GPC)

Our tracking script fully respects the Global Privacy Control (GPC) signal. When a browser sends the GPC signal (navigator.globalPrivacyControl = true), ScoutVibe tracking is automatically disabled. This is in compliance with regulations including the California Consumer Privacy Act (CCPA) and other privacy laws that recognize GPC as a valid opt-out mechanism.

15.2 Do Not Track (DNT)

The legacy "Do Not Track" browser signal is not uniformly supported across the industry. However, we encourage users concerned about tracking to enable Global Privacy Control (GPC), which our script honors.

15.3 Additional Opt-Out Options

End users can also:

16. Third-Party Links

Our Service may contain links to third-party websites or services. We are not responsible for their privacy practices. We encourage you to review their privacy policies before providing any information.

17. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by:

Continued use of the Service after changes constitutes acceptance of the updated Privacy Policy.

18. Contact Information

For privacy inquiries or to exercise your rights:

Email: contact@ialae.com

Subject Line: ScoutVibe Privacy Inquiry

Response Time: We will respond to privacy requests within 30 days. Complex requests may require an additional 30 days, with notice provided.

19. Data Processing Agreement

For customers who require a formal Data Processing Agreement (DPA) for GDPR or other regulatory compliance, please contact us at contact@ialae.com with the subject line "ScoutVibe DPA Request."

Our standard DPA includes:

20. Limitation of Liability

To the maximum extent permitted by applicable law:

Thank you for trusting ScoutVibe. We are committed to protecting privacy and maintaining transparency about our data practices.