Privacy Policy

Last Updated: October 13, 2026

Scout Monitoring (Zimuth, Inc.) provides application observability services. This privacy policy covers information collected through our website (scoutapm.com) and Services.

Personal Information Collected

We collect standard B2B contact details including name, organization name, position, address, email address, and telephone number. Additional categories include:

• Contact & Account Info: Login credentials, billing addresses, customer files
• Marketing Data: Communication preferences, promotional material requests
• Usage Data: Device information, IP addresses, website interaction patterns
• Service-Derived Information: Data customers choose to share about their users

Automatic Data Collection

We use cookies, log files, web beacons, and analytics tools like Google Analytics. If cookies are disabled, you may not be able to enjoy certain features.

Data Usage

Personal information is used for service provision, customer support, account management, security, marketing communications, and service improvements.

Data Sharing

Information may be shared with service providers, marketing vendors, analytics partners, and in merger/acquisition scenarios. We also share data to comply with applicable laws and regulations, to respond to a subpoena, search warrant or other lawful request.

User Choices

Users can unsubscribe from promotional emails via provided links and manage communication preferences.

Data Protection

We use appropriate administrative, technical, and physical measures to protect information, though no data transmission over the Internet is 100% secure.

Data Retention

Monitoring data your applications send to Scout is kept for a limited time that depends on its type:

• Metrics: 30 days
• Transaction traces: 7 days. Traces linked to an insight, such as a detected N+1 query, may be kept longer.
• Errors: individual occurrences for 30 days. Aggregate error groups (counts, first and last seen, last message) are kept for the life of the account.
• Logs: 14 days, unless your plan includes a different retention period

To request deletion of your account or organization's data, contact support@scoutapm.com.

Where Data Is Stored

Scout runs on Amazon Web Services (AWS) in the United States. The data your applications send to Scout is stored and processed there.

AI Assistants and the Scout MCP Server

You can connect an AI assistant or coding agent, such as Claude, ChatGPT, or Cursor, to your Scout account through the Scout MCP server or the Scout API. When you do, you authorize that tool to read monitoring data from Scout on your behalf.

• What the assistant can access: data from the organizations your Scout user belongs to, and nothing else. The Scout MCP server is read-only. It can't change your settings, alerts, or data.
• What Scout receives: the requests the assistant makes, such as which app, endpoint, and time range it asked about. We log these requests to operate, secure, and troubleshoot the service. Scout does not receive your conversations with the assistant.
• Model training: Scout does not use your data to train AI models.
• What happens after Scout responds: the AI provider processes the data Scout returns under its own terms and privacy policy, not this one.
• Revoking access: connections made through OAuth use access tokens that expire after two hours and are renewed with a refresh token. You can revoke an assistant's access at any time in your Scout account settings under OAuth Integration. If you connected with an API key, deleting the key in Scout ends that access.

Special Provisions

EU/UK Residents

Scout acts as a "processor" under GDPR; customers are controllers.

California Residents

Scout acts as a "service provider" under CCPA/CPRA.

Children

This site is not directed at users under 16; we do not intentionally collect data from minors.

Contact

For privacy inquiries, contact us at support@scoutapm.com.