SCOR Automation LLC · Effective Date: September 18, 2026 · Version 1.1
This Privacy Policy explains how SCOR Automation LLC ("SCOR," "we," "us") collects, uses, and protects information when you use the SCOR Agent service (the "Service"). SCOR Agent is a business tool: we act primarily as a processor of the information you and your organization choose to run through your agent, and we designed the Service so that your data stays yours.
Account information: your name, business name, and email address, provided when your account is set up.
Conversations and files: the messages you exchange with your agent and the documents you provide to it.
Connected-account content: when you connect third-party applications (such as email or calendars), the agent accesses content in those accounts only as needed to carry out the work you direct. We do not import or copy your third-party accounts wholesale.
Usage and technical data: sign-in events, service logs, device and browser information, IP addresses, and diagnostic data used to operate and secure the Service.
We do not collect or store payment card details; payments are processed by Stripe, which maintains its own privacy policy. We receive only what is needed to manage your account (such as payment status and the last four digits of your card).
To provide the Service: running your agent, generating responses, and taking the actions you direct and approve.
To secure the Service: authentication, abuse prevention, monitoring, and incident response.
To support and improve the Service: troubleshooting, support requests, and service analytics.
To bill and communicate: invoicing, service notices, and messages about your account.
We do NOT: use your data to train artificial-intelligence models (and our AI providers are contractually prohibited from doing so with your data); sell your personal information; or use your content for advertising. We do not serve ads.
When your agent generates a response, the relevant conversation content is transmitted securely to our AI model providers (currently Anthropic, PBC and xAI Corp; which provider is used depends on the service tier you select) for processing, under commercial terms that prohibit the providers from training models on your data. If you send voice or video content to your agent, the audio is transcribed by a speech-to-text provider (currently OpenAI) under API terms that likewise prohibit training on your data. To let your agent search your conversations and documents, text is converted into numerical embeddings by an embeddings provider (currently Voyage AI). Each customer's agent runs in its own isolated computing environment; no other customer's agent can access your environment or your data.
We use a small set of vetted service providers to operate the Service. Each processes only what its function requires:
Anthropic and xAI — AI model processing (generating your agent's responses; which provider is used depends on the service tier you select). Both are bound by commercial terms that prohibit training on your data.
OpenAI — speech-to-text transcription of voice and video content you send to your agent (API terms; not used for training).
Voyage AI — text embeddings that let your agent search your conversations and documents.
Composio — secure connections between your agent and the third-party apps you choose to connect.
Apify — retrieval of publicly available web data when you ask your agent to gather it (your search terms and target pages are shared; results are returned to your agent).
Photon — delivery of text-message (iMessage/SMS) conversations with your agent, if you choose to pair a phone; your phone number and message content pass through this provider.
Stripe — payment processing; we never store card numbers.
Orgo — hosting of your agent's dedicated computing environment.
DigitalOcean — cloud infrastructure, database, and file storage.
Postmark (ActiveCampaign) — delivery of sign-in and service emails.
Tailscale — private, encrypted networking between service components.
We will update this list as our providers change; material changes will be reflected in an updated Policy.
You decide which accounts to connect, and you can disconnect any account at any time from the Connect Apps page in the SCOR Agent web app.
Higher-impact actions (such as sending communications or modifying records) can be routed to you for approval before your agent executes them.
Access to connected accounts uses industry-standard authorization (OAuth) where available; we do not ask you to share passwords for connected apps.
We take security seriously and designed the Service around isolation and least privilege:
Each customer's agent runs in a dedicated, isolated environment, separated from every other customer.
Agent environments hold no master credentials: platform keys and database access remain on hardened central infrastructure, never on customer agent machines.
Service components communicate over private, encrypted networking; data in transit is encrypted (TLS).
Sign-in uses single-use, time-limited links — there are no passwords to steal.
Access to production systems is restricted and key-based, and per-customer credentials are unique so that no credential is shared between customers.
No system is perfectly secure, but if we learn of a breach affecting your information, we will notify you without undue delay consistent with applicable law.
Account data and conversations are retained while your account is active so your agent can maintain context and continuity.
Upon termination of service, we will, on request made within 30 days, provide a reasonable export of your data. We then delete customer content from active systems within a reasonable period, subject to limited retention in backups (which age out on a schedule) and records we must keep for legal, billing, or security purposes.
Service logs are retained on a rolling basis for security and operations.
You may request access to, correction of, export of, or deletion of your personal information by contacting us at contact@scorautomation.com.
Depending on where you live, you may have additional rights under applicable privacy laws; we will honor valid requests as required by the law that applies to you.
Because the Service processes your organization's data at its direction, some requests may be fulfilled through your organization's administrator.
The Service is designed for business use. It is not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe a minor has provided information to us, contact us and we will delete it.
We may update this Policy from time to time. For material changes we will provide notice by email or within the Service at least 30 days before the changes take effect. The "Effective Date" above reflects the latest revision.
SCOR Automation LLC · Florida, USA
Privacy inquiries: contact@scorautomation.com
