Privacy Notice
Privacy Policy
Who we are and what this notice covers
SCOUTFAST is operated by ScoutFast Pte. Ltd., Singapore. This notice explains how we handle personal data when you create an account, submit startup materials, receive reports or contact us.
Information and purposes
We process account and business contact details, company information, uploaded pitch decks and related materials, support communications, report outputs, and relevant technical and security records. Uploaded business documents may contain personal data about founders, staff or other people. We use the information to administer accounts and engagements, assess capabilities and funding fit, generate and deliver requested reports, answer questions, verify material facts from public sources, and maintain quality and security records. We rely on consent or other grounds permitted by applicable law for the relevant activity.
Please submit only information needed for the service. Do not upload patient records, identity documents, payment-card details, passwords, or unnecessary sensitive personal data. You must have authority to provide information about other people. Voluntary founder eligibility information is used only for the funding eligibility purpose disclosed when it is requested; you may decline to provide it.
AI and service providers
SCOUTFAST uses AI-assisted tools to analyse submitted materials and produce report content. Relevant information may be processed by contracted hosting, AI, document-generation, support and storage providers under access restrictions and appropriate contractual safeguards. These providers and authorised personnel may access the information only as needed for their assigned services. AI outputs may be inaccurate; you may request correction of underlying personal data and raise concerns about an assessment.
Proposed policy commitment, to validate before publication: we do not use your confidential uploads or identifiable report content to train shared AI models, and we do not permit our providers to do so. Any additional identifiable-data use for product research or model training requires a separately disclosed basis and, where required, a separate choice. Service consent does not constitute permission to publish your materials or market them to funders.
Report delivery and sharing
Reports may be stored in a restricted Google Drive location used for delivery. Access is limited to authorised SCOUTFAST personnel, contracted providers where necessary, and people you authorise to receive your reports. We do not send your pitch deck or reports to prospective funders simply because they appear in a ranking. Any such outreach requires your separate instruction or permission. Copies you download or share are subject to the access arrangements you choose.
Storage retention and international processing
Your information may be stored or processed outside your country of residence by our approved service providers. Where international transfers occur, we apply the safeguards required by applicable law. You may contact us for information about our providers and their processing locations.
We retain information only for as long as reasonably necessary for the purposes described in this notice, including providing the service, supporting report updates, maintaining security and meeting legal obligations. Our standard retention periods are:
- Account information and uploaded materials: retained while your subscription is active and for up to 90 days after it expires.
- Generated reports: retained while your subscription is active and for up to 12 months after it expires, allowing time to retrieve your reports or resume the service.
- Account closure and deletion requests: ordinary service data is deleted from our live systems within 30 days of a valid request, subject to applicable legal requirements and any separately authorised retention described below.
- Security logs: retained for up to 12 months from the recorded event, unless particular records are needed for an ongoing security investigation or legal matter.
- Terms-acceptance and consent records: retained for as long as relevant to our relationship or authorised processing, and for up to six years after the relationship ends or our last reliance on the relevant consent, whichever is later.
- Backup copies: affected information is removed through our backup expiry cycle within 90 days after deletion from live systems. During that period, backup copies are restricted to recovery and security purposes and are not used for research or model training. If a backup is restored, applicable deletion requests are reapplied.
Where you have separately authorised continued retention for startup research, funding-outcome analysis or model improvement, the information covered by that permission follows the specific purposes and retention periods explained when you opt in. You may withdraw that permission through the privacy contact stated in this notice.
We may retain limited records for longer where required by law or reasonably necessary to establish, exercise or defend legal claims. Such records remain protected, access-restricted and limited to that purpose.
Optional retention and use beyond service delivery and use beyond service delivery
With your separate permission, we may retain your company name, approved public-facing business description, funding received and funding sources to maintain our startup knowledge base, study funding outcomes, improve capability and funder matching, and develop insights that help us support startups. We retain this information for up to five years after your latest company-supplied update, review its continuing relevance annually, and remove it earlier if you withdraw permission, unless another lawful basis requires retention.
You may separately authorize us to retain and use specified submitted materials, feedback, generated reports and derived capability assessments to evaluate, test and improve SCOUTFAST’s analytical methods and models, including training or fine-tuning models used to provide SCOUTFAST services. This permission applies only to the materials and purposes identified when you opt in, for up to three years unless renewed.
Access is restricted to authorized personnel and contracted providers acting on our instructions. These permissions do not authorize publication of confidential materials, disclosure to prospective funders, or use by third-party AI providers to train their own general-purpose models.
You may decline these additional uses or withdraw permission through the privacy contact stated in this notice. Following withdrawal, we stop new use for the withdrawn purpose and remove the affected information from active research and training datasets within 30 days, unless continued retention is otherwise legally permitted or required. Backup copies expire within a further 90 days.
We may retain statistical findings that were lawfully created and genuinely anonymized so that individuals cannot reasonably be identified. Confidential company information remains subject to the applicable contractual restrictions.
Your choices and contact
Contact the privacy contact below to request access or correction, ask about retention, or withdraw consent where processing relies on consent. We will explain any legal exceptions and any effect withdrawal may have on our ability to provide the service. Other rights apply where required by applicable law. Optional marketing and any optional data reuse are separate choices and are not conditions of receiving reports.
Privacy contact: susan@scoutfast.co, Attention Data Privacy Officer.
Changes and acknowledgement
We will date and version updates and make the current notice available in the application. We will notify you of material changes and obtain fresh consent where required for new purposes. Acknowledging the notice is separate from accepting contractual terms.