Privacy Policy

This policy explains what UCC Scout collects, why, and what you can ask us to do with it. Questions go to support@uccscout.com.

Account information

When you sign up we store your email address and, if you sign in with Google, your name. We record which team you belong to, your settings, the lists and alerts you create, and product events such as searches, exports and sign-ins, so we can run and improve the Service and enforce plan limits. If you add a mobile number, we use it only to text you the alerts you turn texts on for, through Twilio; we never share it for marketing. Reply STOP to any text to stop them.

Payments

Paddle processes payments as merchant of record. We never see or store your card number; we keep your subscription status, plan and billing dates.

Public records

The data in UCC Scout comes from UCC financing statements that state filing offices publish. Some filings name individuals. We flag those, hide them by default, and exclude them from exports and the API. Business phone numbers, emails and officer names come from the Federal Motor Carrier Safety Administration's public carrier registry and are matched to businesses only, never to people or sole proprietors. We do not buy data about people. If you are named in a filing or a contact record and want it suppressed from UCC Scout, email us and we will do it.

Who we share data with

Only the services that run UCC Scout for us, under agreements that limit their use of it: Supabase (database and sign-in), Vercel (hosting), Resend (email) and Paddle (payments). We don't sell personal information or share it for advertising.

Cookies

We use cookies to keep you signed in and to remember your theme. There are no advertising or cross-site tracking cookies.

Retention and your choices

We keep account data while your account is open and delete it within 30 days of a deletion request, except records we must keep for tax or legal reasons. You can ask for a copy of your data, a correction, or deletion at any time. California and other state residents can use these rights as their laws provide; we won't treat you differently for using them.

Security

Data is encrypted in transit and at rest, access is limited per team with row-level security, and API keys are stored only as hashes.

See also our Terms of Service.