Privacy Policy
Last updated: August 18, 2026
This policy explains what data Cobalt Scout collects, why, and how you can control it.
Who we are
Cobalt Scout is operated by CvRex, based in Bulgaria ("we", "us"). For any privacy question or request, contact us at info@cvrex.com.
What data we process
Two kinds of personal data flow through Cobalt Scout:
- Professional profile data — name, job title, employer, skills, coarse city, and (where publicly listed) a contact email, sourced from publicly available LinkedIn profiles of professionals in the HVAC/MEP and adjacent trades. We keep only business-relevant fields.
- Account data — the email address and name you provide when you sign up, plus records of the credits you purchase and the profiles you unlock, needed to run the service.
Legal basis
For professional profile data, we rely on legitimate interest (GDPR Art. 6(1)(f)): Cobalt Scout is a B2B recruiting and prospecting tool, and the data is limited to what's relevant for that purpose. For account and billing data, the basis is performance of a contract with you.
How search results are shown
Search results are shown masked by default — job title, skills, and a coarse location, with no name or contact details. Revealing a person's identity or contact information spends a credit, which we log for billing and abuse-prevention purposes.
Who else processes data on our behalf
We use the following processors, each under their own data protection terms:
- Clerk — authentication and session management.
- Stripe — payment processing for credit purchases. We never see or store your card details.
- PostHog (EU) — product analytics, running in production only. Anonymous visitors are not assigned a person profile until they sign in.
- Qdrant Cloud and Google (Gemini API) — power semantic search and query understanding.
- Vercel — application hosting.
Some of these providers may process data outside the EU/EEA under appropriate safeguards (such as Standard Contractual Clauses).
Your rights
If you're a professional whose profile appears in Cobalt Scout — or a customer with an account — you can ask us to:
- tell you what data we hold about you,
- correct inaccurate data,
- delete your data ("remove me"), or
- object to further processing.
To exercise any of these, email info@cvrex.com with your name and, if applicable, your LinkedIn profile URL. We'll act on removal requests promptly.
How long we keep data
Profile data is kept until you ask us to remove it or until it's superseded by a newer scrape. Account and billing records are kept for as long as your account is active and as required by Bulgarian tax and accounting law afterward.
Cookies
See our Cookie Policy for details on the cookies we use.
Changes to this policy
We may update this policy as the product evolves. Material changes will be reflected here with an updated date.