Privacy Policy

1. Data Controller

Scale Data, LLC ("Scale Data," "we," "us," or "our") is the data controller for personal information collected through our website at scaledata.dev and related services. For personal data that we process on behalf of our clients through hosted services, we act as a data processor under the direction of the applicable client (the data controller).

2. Information We Collect

2.1 Contact Form Submissions

When you submit our contact form, we collect:

• Name -- to address you in our response
• Email address -- to reply to your inquiry
• Company name (optional) -- to understand your business context
• Message content -- the substance of your inquiry

This information is transmitted to our team via email and is not stored in a database. We retain contact form submissions in our email system for the duration of the business relationship and any follow-up period.

2.2 Analytics Data

We may collect anonymized usage data to understand how visitors interact with our website. This may include:

• Pages visited and time spent on pages
• Referring URLs and search terms
• Browser type, device type, and screen resolution
• Approximate geographic location (country/region level)
• IP address (anonymized where possible)

2.3 Hosted Client Data

When providing platform hosting services, we may process data on behalf of our clients. In these cases, Scale Data acts as a data processor. The types of data processed, the purposes, and the retention periods are determined by the client (data controller) and governed by the applicable service agreement and Data Processing Agreement.

3. Google OAuth

Certain Scale Data services may offer authentication through Google OAuth. When you sign in using Google, we may access:

• Basic profile information -- your name, email address, and profile photo
• Email address -- used as your account identifier

We access only the minimum information necessary to authenticate your identity and provide the Services. We do not access your Google contacts, calendar, drive files, or other Google services beyond what is explicitly listed during the authorization flow. You can revoke Scale Data's access to your Google account at any time through your Google Account permissions.

4. Subprocessors

We use the following third-party service providers to deliver our Services:

We will notify affected clients before engaging a new subprocessor that handles client data.

5. How We Use Your Information

We use the information we collect to:

• Respond to your inquiries and provide the Services you request
• Operate, maintain, and improve our website and Services
• Authenticate users and maintain account security
• Analyze website usage to improve user experience
• Comply with legal obligations and protect our rights
• Send service-related communications (not marketing)

We do not sell your personal information. We do not use your personal information for automated decision-making or profiling.

6. Data Retention

• Contact form submissions: Retained in our email system for the duration of the business relationship plus two (2) years, unless you request earlier deletion.
• Analytics data: Anonymized analytics data is retained for up to 26 months.
• Client hosted data: Retained for the duration of the service agreement plus thirty (30) days post-termination to allow for data export.
• Account information: Retained for the duration of the account plus thirty (30) days following account closure.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

7.1 Rights Under CCPA (California Residents)

• Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you
• Right to Delete: Request deletion of your personal information, subject to certain exceptions
• Right to Opt Out: We do not sell personal information, so this right does not apply
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights

7.2 Rights Under GDPR (EEA Residents)

• Right of Access: Obtain a copy of the personal data we hold about you
• Right to Rectification: Correct inaccurate personal data
• Right to Erasure: Request deletion of your personal data
• Right to Portability: Receive your personal data in a structured, machine-readable format
• Right to Restrict Processing: Limit how we process your data in certain circumstances
• Right to Object: Object to processing based on our legitimate interests

To exercise any of these rights, contact us at daniel.franks@scaledata.dev. We will respond to verified requests within 30 days.

8. Cookies and Tracking Technologies

Our website may use the following types of cookies and similar technologies:

• Essential cookies: Required for the website to function properly (e.g., session management). These cannot be disabled.
• Analytics cookies: Help us understand how visitors interact with our website. These are anonymized and can be disabled in your browser settings.

We do not use advertising cookies or cross-site tracking technologies. You can control cookie settings through your browser preferences.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption in transit (TLS/HTTPS) and at rest
• Access controls and authentication requirements
• Regular security assessments and monitoring
• Incident response procedures

While we strive to protect your personal information, no method of transmission or storage is completely secure. We cannot guarantee absolute security.

10. Children's Privacy

Our Services are not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected personal information from a child under 13, we will take steps to delete that information promptly. If you believe a child under 13 has provided us with personal information, please contact us at daniel.franks@scaledata.dev.

11. Third-Party Links

Our website may contain links to third-party websites and services. We are not responsible for the privacy practices of these third parties. We encourage you to read the privacy policies of any third-party websites you visit.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, or legal requirements. We will notify you of material changes by:

• Posting the updated policy on our website with a revised "Last Updated" date
• Sending an email notification for material changes that affect how we process your data

Your continued use of our Services after any changes constitutes acceptance of the updated Privacy Policy.

13. Contact Us

For questions, concerns, or requests related to this Privacy Policy or your personal data, please contact us: