Privacy policy

Who we are

Scoutly, 3 rue Kawakibi, 1002 Tunis, Tunisia. For anything related to your personal data, email contact@scoutly.be.

Scoutly is a Tunisian company, subject to Tunisia's Organic Law No. 2004-63 on the protection of personal data. We work mainly with organisations in Africa and the Middle East, and we also welcome organisations and candidates from Europe. When we handle the data of people in the European Union, we apply the EU General Data Protection Regulation (GDPR), and this policy is written to meet it. Where another local data protection law applies to you, we respect the rights it gives you.

Part of our team is based in the Netherlands. People in Europe can reach us at the same address, contact@scoutly.be.

Part 1: This website

Early-access requests

When you request early access, we collect your name, work email and company. We use them to reply to you, arrange a call and set up your first assessment.

Legal basis: taking steps at your request before a possible contract (GDPR Art. 6(1)(b)). Giving these details is voluntary, but we can't respond to your request without them.

How long we keep them: up to 24 months after our last contact with you, unless you become a customer or ask us to delete them sooner.

Security and server logs

Like any website, our server records technical information such as your IP address, browser and the pages requested. We use it to keep the site secure and working, and to limit repeated form submissions. Server logs are deleted after 14 days. Legal basis: our legitimate interest in keeping the service secure (GDPR Art. 6(1)(f)).

Cookies and tracking

This website does not use cookies, analytics or advertising trackers, and it loads no third-party scripts. Its fonts, images and videos are served from our own server.

Part 2: The Scoutly platform

Organisations use Scoutly to interview and assess candidates. For that data, the organisation running the interview is the controller: it decides why and how candidates' data is used. Scoutly acts as its processor and handles the data only on its instructions (GDPR Art. 28). If you took an interview through Scoutly, the organisation that invited you is your first point of contact for your rights, and we will help it respond.

What the platform processes

• Your name and email, and any resume the organisation imports
• Your interview answers: spoken answers are transcribed; written answers, code and whiteboard drawings are stored
• If the organisation turns on integrity controls: an identity photo taken before the interview, and a log of events such as leaving the interview tab or pasting text from outside it
• The evaluation of the interview: a summary, a score for each answer and a report for the organisation

How AI is used

Scoutly uses AI to run the interview, ask follow-up questions and prepare the report. Communication-style insights describe how answers are worded and are based on the transcript only, not on your face or the sound of your voice. Scoutly does not make hiring decisions: people at the organisation decide who moves forward. Read more in our AI transparency statement.

Connected apps, such as Claude

A Scoutly user can connect an AI assistant, such as Claude by Anthropic, to their Scoutly workspace (see Scoutly for Claude). The user signs in to Scoutly and chooses one workspace; the app then acts with that user's permissions.

• What the app receives: only what a tool returns for the user's request, such as job details, candidate names and email addresses, scores and report content. The organisation decides to connect the app, and the app's own terms and privacy policy govern what it does with that data.
• What the app can change: it can create jobs, create public links and add candidates. It can email interview invitations only after the user confirms the list of recipients.
• What Scoutly keeps: a record of the connection (which app, which user and workspace, when it was connected and last used), its access tokens stored only as hashes, and a log of each tool call (the tool's name, whether it worked and when). The log never contains candidate content.
• How long: access tokens expire after an hour. A connection that goes unused for 30 days stops working. The user can revoke a connection at any time in Settings, then Connected apps, and it stops working immediately.

Who we share data with

We use these service providers, each bound by data processing terms:

We do not sell personal data, and we do not use it for advertising.

International transfers

Some of these providers are based outside the European Economic Area. Where data is transferred outside it, we rely on safeguards recognised by the GDPR, such as the European Commission's standard contractual clauses or, where a provider is certified, the EU-US Data Privacy Framework (GDPR Arts. 45 and 46).

How we protect data

Data travels over encrypted connections (HTTPS). The platform and its database run on our own server in Frankfurt, access is limited to the people who need it, and each organisation's data is kept separate from others'.

Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you (Art. 15)
• have inaccurate data corrected (Art. 16)
• have your data deleted in certain circumstances (Art. 17)
• restrict how we use it in certain circumstances (Art. 18)
• receive your data in a portable format (Art. 20)
• object to processing based on our legitimate interests (Art. 21)
• not be subject to a decision based solely on automated processing that significantly affects you (Art. 22)

To use these rights, email contact@scoutly.be. We reply within one month. For interview data, we may pass your request to the organisation that invited you, as it controls that data.

Complaints

If you're unhappy with how we handle your data, please contact us first. You can also complain to the data protection authority in Tunisia, the Instance Nationale de Protection des Données Personnelles (INPDP), or to the data protection authority where you live (in the European Union, your national supervisory authority).

Changes to this policy

We'll update this page when our practices change, and change the date at the top. For significant changes affecting customers, we'll also tell them directly.