Privacy Policy
Last updated: October 14, 2026
Effective date: October 14, 2026
This policy explains what information BrimScout collects, why, who else handles it, how long we keep it, and how to ask for a copy or a deletion.
BrimScout is operated by BRIMSCOUT LLC ("BrimScout", "we", "us"), a Florida company. You can reach us at support@brimscout.com or by mail at 4861 NE 12th Ave, Oakland Park, FL 33334.
The short version
- We do not sell personal information, and we do not share it for targeted advertising.
- This website uses no analytics tools, no advertising pixels and no third-party tracking cookies. The only cookies are ones that keep you signed in and remember choices you make. See our Cookie Policy.
- Data from a client's Amazon, TikTok Shop, Shopify or Meta accounts is used only to provide BrimScout to that client. We never use one client's data for another client.
- Our app database does not store Amazon or TikTok Shop buyer names, addresses, phone numbers or email addresses.
1. Who this policy covers
This policy covers:
- people who visit our website;
- people who request a free profit audit;
- people who sign in to the BrimScout client app (our clients and their team members);
- creators we contact or work with on behalf of a client; and
- anyone who emails us.
Our clients' business data, such as ad, sales and product data from their marketplace accounts, belongs to the client. We handle it on the client's behalf under our Terms of Service and our Data Processing page. This policy describes that data so you know what we hold, but the client decides how it is used.
2. Information we collect
If you request a free profit audit
The audit form asks for:
- your name;
- your work email;
- your store or Amazon storefront link; and
- your monthly ad spend (optional).
We also record the date and time you sent the form. If you then send us files for the audit, such as an Amazon Sponsored Products bulk file or a product cost sheet, we keep those files to prepare the audit.
If you sign in to the client app
- Your email address, and which client accounts you are allowed to see.
- Your password, stored only as a salted hash (PBKDF2 with SHA-256). We cannot read or recover your password.
- The date your login was created, and a counter that lets us sign out all of your sessions when your password is reset.
- Failed sign-in attempts. To slow down password guessing, we record failed attempts as one-way hashes of the IP address and of the email address used, not the raw values. Records older than one day are deleted when new failed attempts are recorded.
- What you type into the app: product costs, goals and limits, approvals and skips of proposed changes, creator records, briefs and notes.
- Questions you ask the AI chat ("Ask Scout") and its answers. These are saved with the client account so the conversation can continue.
Business data from connected accounts
When a client connects an account or sends us files, we receive business data such as:
- Amazon Ads: campaigns, ad groups, keywords and targets, bids, budgets, search term reports, spend, clicks, orders and ad sales.
- Amazon Seller Central: sales, units, sessions, inventory levels and Amazon fees by product.
- TikTok Shop: order totals, order dates and order status, which we add up into daily totals.
- Shopify: daily sales.
- Meta (Facebook and Instagram) ads: spend and results by ad.
- Costs the client enters: product cost, and other costs the client chooses to add.
We do not request Amazon or TikTok Shop buyer contact details, and our app database has no place to store them. If a data feed ever contains them, we do not keep them. See Data Processing.
Creator information
When we run a creator program for a client, we keep records about creators, such as name, social media handles, a business email address, follower counts, niche, rates or commission terms, the stage of each deal, sample shipments, links to videos, usage-rights end dates and payment status. This comes from the creator, from public profiles, or from creator platforms the client uses.
Emails and calls
If you email us or talk with us, we keep the messages and our notes so we can follow up.
Technical information
Our website and app run on Cloudflare. To deliver pages and protect the service against attacks, Cloudflare processes technical information such as IP addresses and request details under its own policies. We have turned off request logging for our app in our Cloudflare configuration, so we do not keep a log of page requests ourselves.
The website does not collect payment card numbers.
3. How we use information
We use the information above to:
- reply to audit requests and prepare and send the audit;
- provide the service to clients: show reports and profit figures, propose changes, apply changes the client approves, run creator programs, and answer questions in the AI chat;
- calculate fees under the client's agreement;
- keep accounts secure and prevent abuse;
- send service emails, such as reports and approval requests;
- send occasional emails about BrimScout to people who asked for an audit or are clients, with a way to unsubscribe in every message; and
- meet legal, tax and accounting obligations.
We do not use one client's data to provide the service to another client, and we do not combine data across clients to sell insights or build products for others.
4. Artificial intelligence
The AI chat in the client app uses Claude, a model provided by Anthropic through its commercial API. When you ask a question, we send Anthropic your question, recent messages from that account's chat, and the results of read-only lookups over that client's own data (for example, product names, sales, costs, ad results, goals and proposed changes). The chat can also save a new target ACOS for an account when you ask it to. It does not change bids or campaigns.
Under Anthropic's Commercial Terms, Anthropic may not train its models on content we send through its API. Anthropic states that it deletes API inputs and outputs within 30 days, with limited exceptions such as enforcing its usage policy or complying with the law.
AI answers can be wrong. Check any figure that matters before you act on it.
Today, the bid, keyword and budget changes we propose come from our own rules-based software working on your data, not from a generative AI model. If that changes, we will update this page.
5. Who else sees information
We share information only as described here.
Service providers. These companies process data for us to run BrimScout. They may use it only to provide their services to us.
| Provider | What it does for us |
|---|---|
| Cloudflare, Inc. | Hosts the website and app, and stores the app database. |
| Anthropic, PBC | Runs the AI model behind the AI chat. |
| Windsor Group AG (Windsor.ai) | Connects to some marketplace and ad platforms and passes their data to us. |
| Zoho Corporation (Zoho Mail) | Email for our company. |
The current list, with more detail, is on our Data Processing page.
Platforms a client connects. When a client approves a change, we send that instruction to the platform involved, such as Amazon Ads. Those platforms handle the data under their own terms and privacy policies.
Creators and partners, at a client's direction. When we run a creator program, we share briefs, product details and offer terms with the creators involved.
Legal reasons. We may disclose information if the law requires it, to respond to valid legal process, or to protect the rights, safety or property of our clients, our company or others.
Business transfers. If our company is sold or merged, information may transfer to the new owner, who must continue to protect it as this policy describes. We will tell clients before that happens.
With your permission. We may share information in other ways if you ask us to or agree to it.
We do not sell personal information, and we do not share it for cross-context behavioral advertising.
6. Cookies, Do Not Track and Global Privacy Control
We use only first-party cookies that keep you signed in and remember choices you make, such as the account and date range you picked. The full list is in our Cookie Policy.
We do not track you across other websites, and no third party collects information about your online activity across websites through our website. Because there is no cross-site tracking to switch off, we do not change how the site works when your browser sends a "Do Not Track" or Global Privacy Control signal. If we ever add tools that would count as selling or sharing personal information, we will treat a Global Privacy Control signal as a request to opt out, where the law requires it, and we will update this policy first.
7. How long we keep information
| Information | How long we keep it |
|---|---|
| Audit requests (your name, email, store link and ad spend) | Until you ask us to delete them, and no longer than 24 months after our last contact with you, unless you become a client. |
| Files you send for an audit, and the audit we prepare from them | 90 days after we deliver the audit, unless you become a client or ask us to keep them longer. |
| Client account and business data | For as long as the client uses BrimScout. After the engagement ends, we delete it as described on our Data Processing page. |
| Invoices, signed baselines and fee calculations | As long as tax and accounting rules require, generally up to 7 years. |
| AI chat history | With the client account, and deleted with it. Anthropic's own retention is described in section 4. |
| Failed sign-in records | About one day. |
| Creator records | For as long as the client's creator program runs, then deleted with the client's data, unless the creator asks us to delete them sooner. |
| Emails | As long as needed for the relationship, and for legal and accounting reasons. |
Our database provider keeps a restore history of the database for up to 30 days. A record we delete can remain in that history until it expires.
8. Your choices and requests
You can ask us to:
- tell you what personal information we hold about you and give you a copy;
- correct it; or
- delete it.
Email support@brimscout.com and tell us which email address or business name to look under. We may need to confirm your identity before we act. We aim to reply within 30 days.
If your information is in BrimScout because a client gave it to us, for example as a creator in that client's program, we may pass your request to the client and follow the client's instructions, unless the law requires us to act directly.
Several US states give residents rights over their personal data. Many of these laws do not apply to a company of our size, and most of them do not cover information about people acting in a business role. We answer every request regardless, and we will not treat you differently for making one.
Marketing emails. Every marketing email we send has an unsubscribe link. You can also reply "unsubscribe" or write to support@brimscout.com.
Changes in the app. Clients can update costs, goals and limits in the app at any time, or ask us to change them.
9. Security
We use reasonable measures to protect information. Our Security page says plainly what is in place today and what is not yet.
10. Visitors outside the United States
BrimScout is run from the United States and is offered to businesses in the United States. Our service providers may process information in the United States and other countries where they operate. If you are outside the United States and have a question about your information, write to support@brimscout.com.
11. Children
BrimScout is a business service for adults. It is not directed to children, and we do not knowingly collect information from anyone under 18.
12. Changes to this policy
When we change this policy, we update the "Last updated" date at the top. If a change is material, we will also email clients and app users at least 30 days before it takes effect, and we will show a notice on our website.
13. Contact
BRIMSCOUT LLC
4861 NE 12th Ave, Oakland Park, FL 33334
support@brimscout.com