Privacy Policy

1. Introduction

ScaleDesk360 ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our marketing automation platform. Please read this policy carefully. If you disagree with its terms, please discontinue use of the Service.

2. Information We Collect

2.1 Information You Provide

• Account registration information (name, email address, business name)
• Client information you enter into the platform (business details, contact information)
• Payment information (processed securely through Square; we do not store card numbers)
• Communications you send to us (support requests, demo bookings)
• Content you create or upload through the Service

2.2 Information Collected Automatically

• Log data (IP address, browser type, pages visited, time spent)
• Device information (hardware model, operating system, unique device identifiers)
• Usage analytics (features used, actions taken, performance metrics)
• Cookies and similar tracking technologies (see our Cookie Policy)

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Process transactions and send related information (receipts, invoices)
• Generate AI-powered content on your behalf
• Send administrative communications (service updates, security alerts)
• Respond to support requests and inquiries
• Monitor and analyze usage patterns to improve the Service
• Detect and prevent fraudulent or unauthorized activity
• Comply with legal obligations

4. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Service Providers: Trusted third-party vendors who assist in operating the Service (payment processing via Square, cloud hosting, email delivery)
• Legal Requirements: When required by law, court order, or governmental authority
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• Safety: To protect the rights, property, or safety of ScaleDesk360, our users, or the public

5. Data Security

We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Strict data isolation between client accounts (multi-tenant architecture)
• Regular security audits and vulnerability assessments
• Access controls limiting employee access to user data
• Secure authentication with JWT tokens and httpOnly cookies

No method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. Upon account termination, we will delete or anonymize your data within 90 days, unless we are required to retain it for legal purposes. You may request deletion of your data at any time by contacting us.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data ("right to be forgotten")
• Portability: Request your data in a machine-readable format
• Objection: Object to certain types of data processing
• Restriction: Request restriction of processing in certain circumstances

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

8. GDPR Compliance (EU Users)

For users in the European Economic Area (EEA), we process your data under the following legal bases:

• Contract Performance: Processing necessary to provide the Service you subscribed to
• Legitimate Interests: Improving our Service, fraud prevention, security
• Consent: Marketing communications (you may withdraw consent at any time)
• Legal Obligation: Compliance with applicable laws

9. CCPA Compliance (California Users)

California residents have additional rights under the California Consumer Privacy Act (CCPA). We do not sell personal information. California residents may request to know what personal information we collect, request deletion, and opt out of any future sale of personal information (though we do not currently sell data).

10. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us immediately.

11. Third-Party Links

The Service may contain links to third-party websites. We are not responsible for the privacy practices of those websites and encourage you to review their privacy policies.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a prominent notice on the Service. Your continued use of the Service after such notification constitutes acceptance of the updated policy.

13. Contact Us