Privacy Policy

Needs legal review: This policy describes how Scaleify actually operates today, but it has not been reviewed by a qualified UK solicitor or data protection professional. Registered company details, the ICO registration position and the final retention periods must be confirmed before launch.

1. Who we are

Scaleify is an opportunity-discovery and outreach-assistance platform operated by NextRank Marketing, founded by Damon Dylan Stang. The controller responsible for personal data described in this policy is Scaleify LTD, registered at 124 City Road, London EC1V 2NX, United Kingdom, company number 05045773. Data protection enquiries: legal@thisisscaleify.com.

Scaleify is provided from the United Kingdom. This policy is written for the UK GDPR and the Data Protection Act 2018.

2. Scope and roles

• Scaleify as controller. For your account, your business profile, your subscription and credit records, your support messages and your use of the platform, we decide why and how the data is processed, so we are the controller.
• Scaleify as processor. Where you upload or enter information about your own contacts, prospects, pipeline records, team messages, attachments and outreach drafts, you decide why and how that data is used. You are the controller and we process it on your instructions. See our Data Processing & UK GDPR page.

3. Data we process

Account and authentication

Email address, a securely hashed password held by our authentication provider (we never see it in plain text), email-confirmation and password-reset state, sign-in timestamps, and — if you use Sign in with Google — the email and basic profile Google returns. We do not receive your Google password.

Business and onboarding information

Business name, what you sell, the customers you target, industry, location, keywords, selected services (including whether you use Revenue Recovery), and the answers given during onboarding. This is used to generate relevant searches and to score opportunities against your business.

Product usage

Search queries you run in Find Opportunity, Scout configurations, Scout run records and results, saved and dismissed opportunities, pipeline contacts and stages, tasks, automations and their run logs, message drafts, Scaleify AI conversations and any files you attach, team messages and attachments, ad-campaign briefs and uploaded creative, notifications and notification preferences, and API keys you generate.

Credits and billing

Your credit balance, every credit transaction (what was charged, for which operation, and any refund), subscription plan and status, renewal dates, credit-pack purchases, promotional codes applied, and payment records returned by our payment processor. Card numbers are handled entirely by the payment processor and never reach Scaleify's systems.

Technical and diagnostic data

IP address, browser and device information contained in the request, pages and features used, error reports, and first-party in-product usage events we record in our own database for reliability, abuse prevention and product improvement. These usage events are stored in our database rather than collected by a third-party analytics tracker.

Support and communications

Support tickets, contact-form submissions and any correspondence you send us.

4. Lawful bases

• Contract — creating and maintaining your account, running searches and Scouts you ask for, metering credits, providing the pipeline, AI and team features, and taking payment.
• Legitimate interests — securing the platform, preventing fraud and abuse, diagnosing faults, understanding aggregate feature usage, improving accuracy of results, and sending service and administrative messages. We balance these interests against your rights and you may object (section 11).
• Legal obligation — keeping accounting and tax records, and responding to lawful requests.
• Consent — only where it is genuinely required, such as optional marketing emails you have opted into. You can withdraw consent at any time without affecting the service. We do not rely on consent for the cookies described in our Cookie Policy because they are strictly necessary or set by you.

5. Public signals and prospects

Scout and Find Opportunity search permitted public indexes and official APIs for posts, listings and pages that suggest someone may be looking for a service. We do not access private messages, private groups, closed inboxes or authenticated areas of any platform, and we do not bypass technical restrictions.

Where a result contains personal data (for example a public username, a business contact page, or a phone number a person has published), we process it on the legitimate interest of helping a business identify potentially relevant prospects, and on your instructions once it is saved into your workspace. You are responsible for how you use it. If you are a prospect and want your data removed from a customer workspace, contact us and we will pass the request to the relevant customer and assist as processor.

6. AI and automated processing

Scaleify sends the text of a discovered public item, your business context and your prompts to AI models via an AI gateway in order to score intent, extract evidence, extract contact details published on a page, and draft messages. Automated scoring assists your judgement; it does not produce legal effects or similarly significant effects on you, and every result is presented for you to review. AI output can be wrong or out of date and is not professional, legal or financial advice.

7. Sharing and processors

We do not sell personal data. We share it only with providers that help us run Scaleify:

• Lovable Cloud (managed Supabase infrastructure) — Application hosting, PostgreSQL database, authentication, file storage. Data: Account, business, opportunity, pipeline, messaging and billing records; uploaded files.
• Cloudflare Workers (edge runtime used by the hosting platform) — Serving the application and running server-side functions. Data: Request metadata including IP address and browser user agent.
• Lovable AI Gateway (routing to Google Gemini and OpenAI models) — Opportunity analysis, message drafting, Scaleify AI chat. Data: The content of the public post or listing being analysed, your business profile context, and prompts you send.
• Stripe — Payment processing, subscriptions, checkout, invoices. Data: Billing email, subscription and payment records. Scaleify never receives or stores full card numbers.. Used only when this integration is configured for your environment.
• Tavily, Brave Search, Serper (Google Search API) and the official Reddit API — Searching permitted public indexes for buying-intent signals. Data: Search queries derived from your business profile and Scout configuration. Used only when this integration is configured for your environment.
• Google (Sign in with Google) — Optional third-party sign-in. Data: Your Google account email and basic profile, only if you choose that sign-in method. Used only when this integration is configured for your environment.
• Transactional email provider — Account, security and service notification emails. Data: Email address and message contents. Used only when this integration is configured for your environment.

We may also disclose data to professional advisers, or where required by law or to establish, exercise or defend legal claims. If the business is sold or reorganised, data may transfer to the acquiring entity under the same protections.

8. International transfers

Some providers listed above operate outside the UK, including in the United States. Where personal data is transferred outside the UK we rely on UK adequacy regulations or the International Data Transfer Addendum to the EU Standard Contractual Clauses, together with appropriate technical measures.

Needs legal review: The precise hosting regions and transfer mechanism for each provider must be confirmed and recorded before launch, along with a transfer risk assessment where required.

9. Retention

• Account, business profile and workspace content: for as long as your account is active.
• After account closure: deleted or anonymised within a reasonable period, except where we must keep records for legal reasons.
• Billing, credit-transaction and tax records: retained for the period required by UK accounting and tax law.
• Security, audit and abuse-prevention logs: retained for a limited period proportionate to the risk.

Needs legal review: Exact retention periods per data category require sign-off before launch.

10. Security

Data is stored in a managed PostgreSQL database with row-level security so a workspace can only read its own records. Authorisation is enforced server-side on every request, administrative functions require a verified admin role, uploaded files are served through short-lived signed URLs, payment webhooks are signature verified, and secrets are held server-side and never shipped to the browser. No system is perfectly secure, so you must also keep your login credentials and API keys safe.

11. Your rights

Under UK GDPR you can ask us to:

• give you access to the personal data we hold about you;
• correct inaccurate or incomplete data;
• delete data where there is no continuing lawful reason to keep it;
• restrict processing while a dispute is resolved;
• object to processing based on legitimate interests, including profiling;
• receive data you provided in a portable, machine-readable format;
• withdraw consent where consent is the basis (for example marketing email).

Contact legal@thisisscaleify.com or use our contact page. We respond within one month and may ask you to verify your identity. Requests about data held inside a customer's workspace are forwarded to that customer as controller.

12. Cookies

See the Cookie Policy for the small number of storage technologies used to keep you signed in and remember interface preferences.

13. Children

Scaleify is a business tool for adults aged 18 or over. We do not knowingly collect personal data from children. If you believe a child has created an account, contact us and we will delete it.

14. Changes

We update this policy as the product changes. The version number and dates at the top of this page always reflect the current text, and we notify account holders of material changes by email or in-product notice.

15. Contact and complaints

Write to legal@thisisscaleify.com or 124 City Road, London EC1V 2NX, United Kingdom. If you are unhappy with our response you can complain to the Information Commissioner's Office (ico.org.uk, helpline 0303 123 1113). Our ICO registration number is Z5347709.