Privacy Policy

OmniScout ("we", "us", "our") is operated by Kaada Nordic MarTech, Oslo, Norway. This policy explains what data we collect, why we collect it, and what rights you have over it.

1. Data We Collect

• Account data: Name, email address, and password (hashed) when you create an account.
• Usage data: Searches you run, reports you generate, and pipeline activity — stored to provide the service to you.
• Lead data: Business information returned from Google Places API and public website data fetched during audits. This is publicly available information.
• Branding data: Logo, brand colors, and custom domain settings you upload for branded reports.
• Cookies: Essential session cookies for authentication. See our Cookie Policy for details.

2. How We Use Your Data

• To provide and maintain the OmniScout service.
• To authenticate you and manage your account.
• To generate audit reports and outreach emails from data you search for.
• To send you viewing alerts when prospects open your reports.
• To provide customer support and improve the platform.

3. Legal Basis (GDPR)

• Contract: Processing necessary to provide the service you signed up for.
• Legitimate interest: Platform improvement and security.
• Consent: Non-essential cookies and marketing communications.

4. Data Retention

We retain your account data for as long as your account is active. Lead data and audit results are retained until you delete them or close your account. Upon account closure, all data is deleted within 30 days.

5. Data Sharing

We do not sell your data. We share data only with sub-processors required to operate the platform (hosting, email delivery, AI processing). A full list of sub-processors is available in our Data Processing Agreement.

6. Your Rights

• Access: Request a copy of your data.
• Rectification: Request correction of inaccurate data.
• Erasure: Request deletion of your data ("right to be forgotten").
• Portability: Receive your data in a machine-readable format.
• Objection: Object to processing based on legitimate interest.
• Withdrawal: Withdraw consent for non-essential processing at any time.

To exercise any of these rights, contact us at privacy@omniscout.ai.

7. Security

We use industry-standard encryption (TLS in transit, AES-256 at rest). Passwords are hashed with bcrypt. Access to production data is restricted to authorized personnel under confidentiality agreements.

8. Changes to This Policy

We may update this policy as the platform evolves. Material changes will be communicated by email at least 30 days before taking effect.

9. Contact

For privacy questions or requests, contact us at privacy@omniscout.ai or see our imprint for postal address.