Privacy Policy

Website visitors and applicants. When you fill out our application or book a call, we collect your name, email address, phone number, business name, service type, city, revenue range, ad spend readiness, investment level, and anything you write in free-text fields. Booking details (time, timezone, meeting link) are collected through Calendly.

Clients. When you sign in to the platform we receive your name, email address, and profile picture from Google or from the email link you use. You may add business details, team members, uploaded videos, photos, files, text, and links to your library, and notes on leads.

Meta connection. If you connect your Meta account we receive, with your permission: your Facebook user ID and name; a list of your ad accounts and Facebook Pages; ad account performance data (spend, impressions, clicks, leads, and similar metrics); campaign, ad set, and ad names, statuses, and creative previews; lead form submissions from your Pages; and, where enabled, messages and comments sent to your Page or Instagram account so you can respond to them. We store an access token to read this data on your behalf.

Leads generated by client ads. When someone submits a Meta lead form for one of our clients, we receive the information they entered, typically name, phone number, email address, and answers to the form questions, plus which ad and campaign it came from.

Automatically collected. IP address, browser type, device information, pages viewed, referring URL, and cookie identifiers. We use the Meta Pixel to measure advertising and may use the Meta Conversions API to send booking events to Meta.

• To review applications, schedule and hold discovery calls, and follow up.
• To provide the client platform: dashboards, campaign reporting, lead management, the asset library, and products.
• To create, run, and optimize Meta advertising on behalf of clients using the assets and information they provide.
• To deliver client leads into the client's dashboard so the client can contact them.
• To measure and improve our own advertising and website.
• To send service messages such as booking confirmations and account notices. Marketing messages only with consent, and you can opt out any time.
• To detect abuse, secure our systems, and comply with law.

We do not sell personal information. We do not use Meta platform data for anything other than providing the service to the client who connected the account.

Our use of information received from Meta APIs follows the Meta Platform Terms and Developer Policies. Data obtained through a client's Meta connection is used solely to provide reporting, lead delivery, and messaging features to that client. It is never shared with other clients, sold, or used to build advertising profiles. Clients can disconnect Meta at any time from Settings, which deletes the stored access token. Removing Scale Pad from your Facebook account settings triggers the same deletion. You may also request deletion of all Meta-sourced data by emailing deep@tryscalepad.co or through the data deletion request flow at https://tryscalepad.co/data-deletion.

• Clients. Leads generated by a client's ads are shared with that client. The client is responsible for how they contact and store those leads.
• Service providers. Supabase (database, authentication, file storage), Vercel (hosting), Calendly (scheduling), Google (sign-in), Stripe (payments), Meta (advertising and the Meta Pixel), and messaging providers we use to send texts on clients' behalf. Each processes data only to provide their service to us.
• Legal. When required by law, subpoena, or to protect rights, safety, or property.
• Business transfers. If Scale Pad is acquired or merges, information may transfer to the successor under this policy.

We use essential cookies for sign-in and security, and the Meta Pixel and related cookies (_fbp, _fbc) for advertising measurement. You can control cookies in your browser settings and adjust ad preferences at facebook.com/adpreferences. Disabling essential cookies will prevent the platform from working.

Application and booking data is kept while we have a business relationship or a reasonable prospect of one, and then deleted or anonymized. Client platform data is kept for the life of the client account and deleted within 90 days of account closure, except where we must retain it for legal, tax, or accounting reasons. Meta access tokens are deleted immediately on disconnect. Library uploads are deleted when a client removes them or closes their account.

Data is encrypted in transit and at rest. Access tokens and secrets are stored server-side and never exposed to browsers. Uploaded files live in a private storage bucket and are served only through short-lived signed links. Platform access is limited to authenticated users of the relevant client account and Scale Pad staff. No system is perfectly secure, so please contact us right away if you believe your account has been compromised.

Depending on where you live you may have the right to access, correct, delete, or export your personal information, to object to or restrict certain processing, and to withdraw consent. To exercise any of these, email deep@tryscalepad.co. We will respond within 30 days. If you are a lead who submitted a form through one of our clients' ads, we will help route your request to that client as well. California residents: we do not sell or share personal information as defined by the CCPA. You may opt out of marketing texts by replying STOP.

Our services are for businesses and adults. We do not knowingly collect information from anyone under 18. If you believe we have, contact us and we will delete it.

We are based in the United States and process data there. If you access our services from elsewhere, your information will be transferred to and processed in the United States.

We may update this policy. The date at the top shows the latest revision. Material changes will be announced on the website or by email to clients.

Scale Pad · deep@tryscalepad.co · https://tryscalepad.co