Privacy policy

• Account: your email address, your password (stored only as a secure hash by our authentication provider), and, if you sign in with Google, your name and profile picture from Google. A fingerprint (hash) of your recovery code, never the code itself.
• Questionnaire: your answers (age range, time, budget, preferences), used to suggest a business and to brief your agent.
• Your agent: your conversations with it, its memory of you and your business, the work it prepares, and your approvals and feedback.
• Subscription: your Stripe customer and subscription references, your market, the plan's status, the creator code you used if any, and the payments made. Card details are handled by Stripe only.
• Technical: your language choice, and the technical data any website needs to work (IP address, browser), kept in our hosting provider's logs for a short time.

We don't collect sensitive data on purpose. Don't share health, financial account numbers, passwords or seed phrases with your agent.

• To provide Scaleasy (your account, the questionnaire, your agent, your subscription): necessary for our contract with you.
• To secure and improve Scaleasy (preventing abuse, fixing bugs, understanding what works, in aggregate): our legitimate interest in running a safe, working service.
• To improve the shared playbooks (see section 3): our legitimate interest in making every member's agent better. You can object at any time.
• To credit the creator who referred you: your consent, given when you accept the creator's link (see the cookie policy).
• To keep accounting and tax records: our legal obligations.

We don't sell your personal data, we don't share it for advertising, and we don't use it to train AI models. We don't send you marketing emails.

Your agent runs on AI models from Anthropic. What you tell your agent, and what it reads and writes for you, is sent to Anthropic to produce its answers and work. Anthropic processes it on our behalf, under contract, and doesn't use it to train its models. Your agent's memory of you is stored so it can pick up where it left off; it is deleted with your account.

Shared playbooks. Each business has a shared playbook that every member's agent reads: methods, benchmarks and pitfalls that work across members. Once a week, the lessons and methods agents noted with their users (not your profile, your conversations or your business details) are read with contact details and links removed, and an AI proposes general rules backed by at least two members, only for businesses with at least three members. Nothing that could identify you or your business goes in the playbook, and we review every update before it is published. To keep your agent's notes out of it, write to contact@scaleasyai.com: your notes are then never read for the playbooks.

We use a few providers, bound by contract to protect your data and to use it only on our instructions:

• Supabase: database and sign-in.
• Vercel: website hosting.
• Anthropic: the AI that powers your agent.
• Stripe: payments and subscriptions (Stripe is also responsible for some payment data in its own right, under its own privacy policy).
• Google: only if you choose to sign in with Google.

Some of these providers are in the United States. Transfers are protected by the EU-US Data Privacy Framework or by the European Commission's standard contractual clauses.

We keep your account data, questionnaire and agent data as long as your account exists, and delete them within 30 days after you close it. Payment and invoice records are kept for the period required by accounting and tax law (up to 10 years). Hosting logs are kept for a short time, usually under 30 days.

You can ask to access, correct, delete or receive a copy of your data, to restrict or object to its use, and withdraw your consent at any time. Write to contact@scaleasyai.com from the email address of your account. We answer within one month.

If you think we haven't respected your rights, you can complain to a data protection authority: the CNIL in France (cnil.fr), the AEPD in Spain (aepd.es), or the authority where you live.

United States residents: depending on your state, you may have similar rights to know, correct and delete your personal information. We don't sell or share personal information as those laws define it.

Data is encrypted in transit, access is restricted to what each part of Scaleasy needs, and passwords and recovery codes are never stored in readable form. No system is perfectly secure: if a breach affecting you happens, we tell you and the authorities as the law requires.

Scaleasy is for adults (18+). We don't knowingly collect data from minors; the questionnaire stops if you say you are under 18.

If we change this policy in a way that matters, we tell you in your account before it applies.