Skip to content

Security

Security at ScoutHalo.

A clear account of how ScoutHalo approaches authentication, production data, AI-assisted research, privacy, and responsible disclosure.


Authentication

Signing in

Accounts are handled by Supabase Auth. You can sign in with Google (OAuth) or with an email and password. Sessions are managed by the authentication provider and kept on your device so your work follows you across sign-ins.

OAuth can reduce the need to create another password. Users remain responsible for protecting access to their identity-provider and ScoutHalo accounts.


Production data

Your projects and reports

ScoutHalo stores the work you create in the product: your projects, collections, Scout Reports, saved locations, and basic account information. This data is stored securely and synchronized so you can reach it from any device you sign in on.

ScoutHalo is a scouting and production-planning tool. Avoid entering highly sensitive or confidential information unless it is genuinely necessary for your production workflow.


AI-assisted research

Assistance, not authority

ScoutHalo uses AI to assist location discovery, evaluation, and production research. Its outputs are a starting point: they can be incomplete and should be verified against local conditions before you rely on them.

Production teams remain responsible for permits, access, safety, legal requirements, contracts, and every final production decision. ScoutHalo informs those decisions; it does not make them.


Privacy

Security and privacy are different questions

This page describes operational safeguards and practices. What information ScoutHalo collects and how it is used is covered separately in the Privacy Policy.


Responsible disclosure

Found a security issue?

If you believe you have found a security vulnerability, email hello@scouthalo.com with the subject “Security disclosure”. Please include:

  • A concise description of the issue
  • Steps to reproduce it
  • The affected route or feature
  • Any relevant screenshots or technical details

Please give us a reasonable opportunity to address an issue before disclosing it publicly.