Security
Security at ScoutHalo.
A clear account of how ScoutHalo approaches authentication, production data, AI-assisted research, privacy, and responsible disclosure.
Authentication
Signing in
Accounts are handled by Supabase Auth. You can sign in with Google (OAuth) or with an email and password. Sessions are managed by the authentication provider and kept on your device so your work follows you across sign-ins.
OAuth can reduce the need to create another password. Users remain responsible for protecting access to their identity-provider and ScoutHalo accounts.
Production data
Your projects and reports
ScoutHalo stores the work you create in the product: your projects, collections, Scout Reports, saved locations, and basic account information. This data is stored securely and synchronized so you can reach it from any device you sign in on.
ScoutHalo is a scouting and production-planning tool. Avoid entering highly sensitive or confidential information unless it is genuinely necessary for your production workflow.
AI-assisted research
Assistance, not authority
ScoutHalo uses AI to assist location discovery, evaluation, and production research. Its outputs are a starting point: they can be incomplete and should be verified against local conditions before you rely on them.
Production teams remain responsible for permits, access, safety, legal requirements, contracts, and every final production decision. ScoutHalo informs those decisions; it does not make them.
Privacy
Security and privacy are different questions
This page describes operational safeguards and practices. What information ScoutHalo collects and how it is used is covered separately in the Privacy Policy.
Responsible disclosure
Found a security issue?
If you believe you have found a security vulnerability, email hello@scouthalo.com with the subject “Security disclosure”. Please include:
- A concise description of the issue
- Steps to reproduce it
- The affected route or feature
- Any relevant screenshots or technical details
Please give us a reasonable opportunity to address an issue before disclosing it publicly.