Privacy Policy

Who we are

Scout is an AI recruiting platform made by BlueRose Technologies Pvt Ltd, MS Square, 34 Langford Rd, Langford Town, Bangalore 560027, India ("BlueRose", "we", "us"). This policy explains what personal data Scout handles, why, who we share it with and the choices you have.

It covers three groups of people: visitors to this website, the recruiting teams who use Scout (our customers and their users), and the job candidates our customers use Scout to contact.

Our role

For candidate data, the employer using Scout decides why and how it is used; they are the controller (or "data fiduciary"), and we process that data on their behalf and on their instructions. For our customers’ account data and for this website, BlueRose is the controller.

If you are a candidate, the employer that contacted you is usually the best first contact for questions about your application. You can also contact us and we will help.

This website

This website does not use cookies, analytics or advertising trackers, and its fonts are served from our own site rather than a third party. If you contact us, we use the details you send us, such as your name, email address, company and message, only to reply and to follow up on your enquiry.

Recruiting teams using Scout

What we collect

• Account details: your name, work email address and password. We store only a secure hash of your password, never the password itself.
• Optional two-factor authentication settings.
• Workspace details: company name, team members and their roles, and workspace settings.
• Security records: sign-in sessions, IP address and browser type, and a log of important account actions.
• What you create in Scout: agents, workflows, jobs, and your conversations with Agent Studio, including the audio and transcript of those sessions.
• Connections you set up, such as your applicant tracking system (ATS) and phone numbers. Credentials for these are stored encrypted.

Voice cloning

If a workspace admin clones a voice, they record a short passage and a consent statement in the browser, and confirm that they are the speaker or have the speaker’s permission. The recordings are sent to Google, which checks the consent statement and creates the synthetic voice. Scout does not keep the recordings. Google stores the cloned voice for up to about a year. A workspace can hold up to five cloned voices, and removing one in Scout deletes it at Google.

In your browser

The Scout console does not set cookies. It keeps your sign-in token in your browser’s session storage, which is cleared when you close the tab, and remembers interface preferences such as panel sizes in local storage. The console loads its fonts from Google Fonts, which means your browser connects to Google when the console opens.

Candidates

What we receive from employers

• Details from the employer’s ATS: your name, email address, phone number, the job you applied for, your application stage and other information the ATS holds for your application.
• Your CV or resume, and the text we extract from it.
• CVs an employer uploads directly to Scout, and the name and contact details we extract from them.

Screening calls

An employer can have a Scout agent phone you about a role, either when they choose to or automatically when your application reaches a stage they have set up. Every call begins with the agent saying it is an AI. When the employer records calls, the agent then asks whether it may record the call.

• If you say no, or your answer is unclear, the audio recording is deleted when the call ends. A written transcript of the call is still kept.
• After the call, an AI model reads the transcript to confirm your answer to the recording question; the recording is kept only if you clearly agreed.
• For each call we keep the number called, the time and length of the call, the transcript, the recording if you agreed, and the answers extracted from it.

Scores and decisions

Scout can produce automated notes and scores from 1 to 5 for how well your answers fit the role, how clearly you communicated and, for technical roles, your technical answers. Scores are based on the transcript, not on your voice, accent or tone. Employers use them to sort and review applications, and some answers may be flagged for a person to check.

Scout never rejects or advances a candidate on its own. Decisions about your application are made by people at the employer.

How we use personal data

• To provide Scout: running calls, syncing jobs and applications, producing transcripts, notes and scores, and operating our customers’ accounts.
• To keep Scout secure, prevent misuse and investigate problems.
• To support our customers and answer enquiries.
• To meet our legal obligations.

We do not sell personal data, and we do not use it for advertising.

Who we share it with

We use the following service providers to run Scout. They receive only the data needed for their part of the service.

• Amazon Web Services: hosting, databases, file storage (including CVs and call recordings) and account emails.
• LiveKit: connecting calls and producing call recordings.
• Vobiz: phone numbers and routing calls to the phone network.
• Google (Gemini and Vertex AI): the agent’s conversation, speech recognition, synthetic speech and voice cloning.
• Microsoft Azure OpenAI: reading transcripts to extract answers, produce scores and confirm recording consent, and reading uploaded CVs.
• ElevenLabs: speech recognition and synthetic speech on calls.
• Sarvam AI: speech recognition and synthetic speech in Indian languages, and Agent Studio sessions.
• The ATS a customer connects (such as Greenhouse, Workable, BambooHR, Breezy HR, Recruitee or Zoho Recruit): we read jobs and applications from it.

We may also disclose data if the law requires it, to protect our rights or users’ safety, or as part of a merger or acquisition, in which case this policy would continue to apply.

Where data is processed

Scout’s databases and file storage are hosted by Amazon Web Services in the United States. Call audio is processed in India. Our AI and voice providers may process data in other countries. Where the law requires it, we put appropriate safeguards in place for these transfers.

How long we keep it

• CVs and the text extracted from them are deleted automatically 365 days after they are stored.
• Call recordings are deleted when the call ends unless the candidate clearly agreed to recording.
• Other candidate and call data is kept for as long as the employer uses Scout, or until they ask us to delete it.
• When a user deletes their Scout account, we remove their name, password and two-factor settings, anonymise their email address and end their sessions.

How we protect it

• Data is encrypted in transit between your browser, our servers and our providers.
• CVs are encrypted in storage, and ATS and phone-provider credentials are encrypted in our database.
• Each customer’s data is kept separate at the database level, and team roles control who can change what.
• Recordings and CVs are stored privately and opened only through links that expire within minutes.

Your rights

Depending on where you live, laws such as India’s Digital Personal Data Protection Act 2023 and the EU General Data Protection Regulation may give you the right to access, correct or delete your personal data, to withdraw consent, to object to or restrict some processing, and to complain to a data protection authority.

Scout users can export their account data and delete their account from the console. For anything else, email hello@bluerise.io. If your request concerns data we hold for an employer, we will pass it to them and help them respond.

Children

Scout is a tool for businesses and is not intended for children. We do not knowingly process data about anyone under 18 except as part of an employer’s recruitment for roles they are legally allowed to fill.

Changes to this policy

We update this policy when Scout changes. The date at the top shows when it last changed, and we will tell customers directly about significant changes.

Contact us

For privacy questions, requests or complaints, email hello@bluerise.io or write to BlueRose Technologies Pvt Ltd, MS Square, 34 Langford Rd, Langford Town, Bangalore 560027, India.