Privacy
What this covers
This page describes what data we, Scutum the company, collect about you when you visit our public website, request a demo, or contact us. It does not govern the data your team puts through a self-hosted Scutum deployment — that data lives entirely in your infrastructure and we don't see it.
What scutum.dev collects
When you visit the public website:
- Server access logs from Cloudflare and our origin host — IP address, user-agent, requested URL, response code. Retained ≤ 30 days for operational diagnostics.
- Form submissions when you book a demo or write to us — your name, work email, company, role, team size, and the use-case description you typed. Persisted indefinitely so we can follow up; deletable on request.
- Calendar booking metadata via Cal.com (a sub-processor) when you pick a slot — start time, your email, the meeting URL. Retained for the duration of the scheduled meeting plus 90 days.
We do not use third-party analytics with cross-site tracking. We do not sell or rent personal data to anyone.
What self-hosted Scutum collects (about your end-users)
When your team runs Scutum on your infrastructure, the platform processes data your applications send through it — prompts, completions, costs, audit events, etc. That data stays on your infrastructure. The platform never sends it to Scutum the company. License validation is offline (Ed25519 signature against a bundled public key); no telemetry is sent home by default.
Sub-processors we use for the public site / sales process
- Cloudflare — TLS termination, DNS, edge caching for scutum.dev.
- Google Workspace — email and calendar at scutum.dev addresses.
- Cal.com — demo-booking widget on the landing page.
- Resend — transactional email (demo confirmations).
- Oracle Cloud Infrastructure — the host serving scutum.dev.
- GitHub — source repository and image registry.
Your rights
You can request a copy of any data we hold about you, ask us to correct it, or ask us to delete it. Email [email protected]. We respond within 30 days; usually faster.
Cookies
The public website sets one essential session cookie via Cloudflare for security. No advertising cookies, no third-party trackers.
Children
Scutum is a B2B product and is not intended for users under 18.
Changes
If this policy materially changes we'll update the "Last updated" date at the top and email anyone in our demo-request database whose data is materially affected.
Contact
Questions or requests: [email protected] · General contact: [email protected]