Privacy Policy

1. Who we are

Web Scout is operated by Rubicon Microproducts Inc. This policy explains what information we handle and how. Contact: info@rubiconmp.com.

2. Information we collect

• Account details: email address and authentication information.
• Team details: invited member emails, roles and access status.
• Project settings: recording status, capture configuration, billing mode.
• API keys: names, display prefixes, SHA-256 hashes and last-used times. Raw keys are never stored.
• Usage records: daily authorization checks, session counts and day credits.
• Session data your capture script sends, such as DOM changes, clicks, console messages and network metadata.

On sites where you install it, the recorder captures page content, clicks, typing (passwords and common sensitive fields are masked), console messages and network requests. You are responsible for telling your own visitors about this recording, for example in your own privacy notice.

3. How we use information

We use information to provide the platform, authorize recording, calculate active days and billing, manage team access, secure the service, and respond to support requests. We do not sell personal information or use session data for advertising.

4. Where data is stored

Recordings are stored in Canada (Azure Canada Central).

5. Service providers

We rely on hosting, authentication and infrastructure providers to operate Web Scout, including Google for optional Google sign-in and Google Fonts for typography. When you export an issue to GitHub, its content is sent to GitHub. Team events may be forwarded to the platform hooks your organization configures.

6. Your responsibilities as a customer

If you record sessions in your application, you are responsible for notifying your users, obtaining any required consent and excluding sensitive information from capture. People recorded in your application should contact you first about their data.

7. Security and retention

Access to project data is limited to the project owner and the team members they authorize. API keys are stored as hashes. We keep data for as long as your account is active or as needed to provide the service, and delete it on request subject to legal obligations.

8. Your rights and contact

Depending on where you live, you may have rights to access, correct, delete or restrict use of your personal information. To make a request or ask a question, email info@rubiconmp.com.