Privacy Policy Effective Date: Nov 6, 2026

‍

This privacy policy (“Policy”) explains how ScaleKit Inc., or any of its affiliates or subsidiaries (“ScaleKit”, “We”, “Us”, “Our”) processes data collected from natural person as specified in Clause 2 below (“You”, “Your”), as a Data Controller.

‍

1. DEFINITIONS

Capitalised terms not specifically defined herein shall have the meaning ascribed thereto in the Customer Agreement.

1.1 “Customer” means the person that has subscribed to the Platform by accepting the Customer Agreement.

1.2 “Personal Data” means data relating to a living individual who is or can be identified either from the data or from the data in conjunction with other information that is in, or is likely to come into, the possession of the Data Controller.

1.3 “Processor” means a natural or legal person, public authority, agency, or other body which processes Personal Data on behalf of the Data Controller.

1.4 “Website(s)” means the websites that ScaleKit owns and operates.

‍

2. PERSONAL DATA WE COLLECT

2.1 Personal Data that You provide directly

When You are a(n)

What Personal Data We Collect

How We use Your Personal Data

Whom We share Your Personal Data with

a. Individual who subscribes to the Platform and/or is provided with login credentials to sign into Platform on behalf of the Customer.

Your contact information, such as Your full name, email address, phone number.

Creation of a User account, verification of a User’s identity and help a User log into the Platform.
To communicate with a User regarding existing services availed by the Customer including notifications of any alerts or updates.
To send a User information about Our other products or services, events, webinars, or programs that may be of interest to such User.
To customise the Platform.

Third-party applications that assist Us in creating Your Account, sending You notifications and information about our products, services, Platform, webinars, etc.

b. User who provides certain information through the Platform, while a) filling out a survey about their user experience or feedback, b) contacting Us or speaking to Our representatives.

Information You have provided as part of it.

To improve the Platform.
To send information about Our products, services, Platform, and any other marketing messages which may be of interest to You.
To respond to Your comments, queries, or questions, if any.

Third parties who assist Us in providing these services.

Individual who requests a demo.

Your contact information includes Your full name, email address, and phone number.

To give You the demo;
To inform, promote, and market the Platform to You.

Third parties who assist Us in providing these Platforms.

Individual who a) provides information by filling out forms on Our Website, or b) contacts Us or speaks to our sales representatives

Information You have filled in or have submitted via the web forms or information You have provided in Your interaction with Us.

To respond to Your queries, questions or requests.
To send information about Our products, services, Platform, and any other marketing messages which may be of interest to You.

Third parties who assist Us in providing these services.

User who requests customer support services.

Your contact information such as Your name, email, and phone number

To respond to Your comments and questions and provide customer support services.

Third parties who assist Us in providing these services.

Individual who applies for an employment opportunity with Us

Your contact information, such as full name, email address, mobile number, details of Your education and previous employment, and any other information You volunteer, including during any interview or Your interactions with Us and contained in the resume that You submit to Us.

To evaluate You for any position that You have applied for or that We may consider You at the time that You submitted Your resume or at a later date.

Third parties whose products we use in maintaining a record of and evaluating You for the position applied.
With external recruiters and organizations like those that do reference or background checks on Our behalf.

Individuals who are Customers who subscribe to Our Platform.

The last four digits of Your payment card (such as debit or credit card) or Your bank account number, and billing address.

To process the payment made by You and provide You the subscription to the Platform.

Third-parties who process the payments on behalf of Us.

‍

2.2 PERSONAL DATA THAT WE COLLECT NOT PROVIDED DIRECTLY BY YOU

When You are a(n)

What Personal Data We Collect

How We use Your Personal Data

Whom We share Your Personal Data with

a. Website visitor

Internet Protocol (IP) addresses, operating system and browser information, and Your session activity including page views, time spent on each page, scrolling activity, and event data through first-party cookies.

For market analysis and market research
To protect Our data from threats, violations, and breaches if any.
To inform, promote and offer Our Platform to You.

Third parties who provide Us with services in connection with such processing.

b. Individual whose

information

(a) third-party sources share with Us through a valid agreement without breach of any confidentiality

clause and with all necessary approvals and authorizations, in accordance with applicable law; or

(b) is available on public platforms.

Your contact information: such as Your full name, email address, phone number, age, gender, company-level information; and other unique identifiers which may be considered as Personal Data.

Create more tailored advertising to provide Our Platform that may be of interest to You.

Third-party partners who assist Us in such processing.

c. End-Users who interact with the Application through the Customer’s product

Information relating to the End-Users’ use of or interaction with the Application.

To develop, improve, and support the Application.

Third-party partners who assist Us in such processing.

d. Individual who subscribes to the Platform using the third-party sign-on service or a User added by the Customer. 

In case You register using any third-party sign-on services, such information as available on those third-party platforms that You have made public. 

Creation of a User account, verification of a User’s identity and help a User log into the Platform. 
To communicate with a User regarding existing products and services availed by the Customer including notifications of any alerts or updates. 
To send an User information about Our other products or services, events, webinars, or programs that may be of interest to such User.

Third-party applications that assist Us in creating Your Account, sending You notifications and information about our products, services, Platform, webinars, etc.

2.3 If You provide Us with any Personal Data relating to other individuals, You represent that You have the authority to do so, and where required, have obtained the necessary consent, and acknowledge that it may be used in accordance with this Policy. If You believe that Your Personal Data has been provided to Us improperly, please contact Us by using the information in Clause 13 below.

‍

2.4 In addition to the details provided in the table above, We may also share Your Personal Data with

an entity to which we divest all or a portion of Our business, or otherwise in connection with a merger, consolidation, change in control, reorganisation or liquidation of all or a portion of Our business.
Law enforcement authorities, government authorities, courts, dispute resolution bodies, regulators, auditors, and any party appointed or requested by applicable regulators to carry out investigations or audits of Our activities.
Professional advisors who advise and assist Us in enforcing Our contracts and policies, handling Our claims, effective management of Our company and in relation to any disputes We may become involved in.

‍

3. LEGAL BASIS FOR PROCESSING

3.1 EEA REGION

3.1.1 If You are a data subject from the European Economic Area, Our legal basis for collecting and using the Personal Data described above will depend on the Personal Data concerned and the specific context in which We collect it.

3.1.2 We will normally collect Personal Data from You only where it is needed to perform a contract with You, where the processing is in Our legitimate interests and not overridden by Your data protection interests or fundamental rights and freedoms, or where We have Your consent. In some cases, We may also have a legal obligation to collect Personal Data from You. If We process Personal Data with reliance on Your consent, You may withdraw Your consent at any time.

‍

3.2 INDIA

3.2.1 If You are a data principal from India, Our legal basis for collecting and using the Personal Data described above will depend on the Personal Data concerned and the specific context in which We collect it.

3.2.2 We will normally collect Personal Data from You only where We have Your consent, except in the scenarios described in Clause 2.1, in which case we will rely on legitimate use for processing of such Personal Data. If We process Personal Data with reliance on Your consent, You may withdraw Your consent at any time.

3.3 If You have questions or need further information concerning the legal basis on which We collect and use Your Personal Data, please contact Us using the contact details provided under Clause 13.

‍

4. INTERNATIONAL TRANSFER

4.1 Production data is hosted in our Google Cloud US region (GCP us-west2) and EU region (GCP europe-west3). Our affiliate in India may access it remotely for engineering and support purposes. Our service providers, listed in Our Data Processing Agreement, may process limited Personal Data in other locations. However, We may transfer Personal Data outside these regions only for the purposes referred to in Clause 2. We will ensure that the recipient of Your Personal Data offers an adequate level of protection that is at least comparable to that which is provided under applicable data protection laws.

4.2 If You are a resident of the European Economic Area and when Your Personal Data is processed outside EEA, We will ensure that the recipient of Your Personal Data offers an adequate level of protection, for instance by entering into standard contractual clauses for the transfer of Personal Data as approved by the European Commission (Article 46 General Data Privacy Regulation, 2016), or We will ask You for Your prior consent to such international data transfers.

4.3 If You are a resident of India, and where We intend to process Your Personal Data outside India, We will ensure that We do not transfer the Personal Data to any country that is notified as restricted by any applicable regulations or the Government of India from time to time.

‍

5. DATA PROTECTION MECHANISMS

We protect the data we process, including data from the third-party services You connect through ScaleKit and the credentials used to access them, with the following safeguards.

5.1 Technical safeguards

Encryption in transit: all traffic to ScaleKit is served over HTTPS with TLS 1.2 or higher, using a restricted set of modern cipher suites; unencrypted HTTP requests are redirected to HTTPS. Connections from ScaleKit to connected third-party services and to our data stores are also encrypted.
Encryption at rest: OAuth access and refresh tokens, API keys and other credentials are encrypted with AES-256 before they are stored, using data encryption keys scoped to each customer environment. These keys are protected by a master key held in Google Cloud Key Management Service and rotated periodically (envelope encryption). Storage disks of our compute infrastructure are encrypted.
Third-party content: by default, data returned by the third-party services You connect through ScaleKit (such as Google, Microsoft, Slack, Salesforce and other integrations) is passed directly to the authorized application to complete the requested action and is not stored. For each request we keep only operational metadata (such as the tool called, the connected service, status, error code and duration) to operate and troubleshoot the Service. Only if You enable the optional “Store connector error details” setting (off by default) do we also store the error responses returned by the connected service, exactly as received.
Tenant isolation: each customer's data is logically isolated by environment, and application access to stored data is scoped to the environment that owns it.
Network security: our services run in private Google Cloud networks with no public access to application nodes or databases. Administrative access is restricted to authorized internal networks through Google's Identity-Aware Proxy, and our edge is protected by Google Cloud Armor, including DDoS protection and rate limiting.
Data residency: production data is hosted on Google Cloud in the United States (GCP us-west2) and the European Union (GCP europe-west3), in separate regional environments with their own encryption keys.

5.2 Organizational safeguards

Access controls: access to production systems is limited to authorized personnel on a least-privilege basis and requires multi-factor authentication.
Monitoring and incident response: we monitor our infrastructure, including encryption and key-management operations, with automated alerts routed to an on-call team. We maintain an incident response process and will notify affected users and relevant authorities of any security incident as required by law.
Deletion: credentials for a connected service are deleted promptly when You disconnect the integration or Your account is deleted.

5.3 Contact

Security questions or reports can be sent to security@scalekit.com.

‍

6. SECURITY OF PERSONAL DATA

The safeguards described in Section 5 also apply to the Personal Data We collect and process under this Policy. We use appropriate technical and organizational measures to protect the Personal Data that We collect and process. The measures We use are designed to provide a level of security appropriate to the risk of processing Your Personal Data. If You have questions about the security of Your Personal Data, please contact Us using the contact details provided under Clause 13.

‍

7. RETENTION OF PERSONAL DATA

7.1 We retain Personal Data collected where an ongoing legitimate business requires retention of such Personal Data.

7.2 In the absence of a need to retain Personal Data under Clause 7.1 above, We will either delete it or aggregate it or, if this is not possible then We will securely store Your Personal Data and isolate it from any further processing until deletion is possible.

‍

8. YOUR RIGHTS

You are entitled to the following rights:

8.1 You can request Us for access and correction of Your Personal Data.

8.2 If We have collected and processed Your Personal Data with Your consent, then You can withdraw Your consent at any time. Withdrawing Your consent will not affect the lawfulness of any processing We have conducted prior to Your withdrawal, nor will it affect processing of Your Personal Data conducted in reliance on lawful processing grounds other than consent.

8.3 You have the right to complain to a data protection authority about Our collection and use of Your Personal Data. For more information, please contact Your local data protection authority as specified by the applicable data protection laws.

8.4 You have the right to opt out of marketing communications We send You at any time. You can exercise this right by clicking on the “unsubscribe” or “opt-out” link in the marketing e-mails We send You.

8.5 If You are a resident of the EEA, UK, or Switzerland, You are also entitled to the following rights:

8.5.1 You can request Us for deletion and erasure of Your Personal Data.

8.5.2 You can object to the processing of Your Personal Data, ask Us to restrict the processing of Your Personal Data, or request portability of Your Personal Data.

‍

8.6 If You are a resident of India, You are also entitled to the following rights:

8.6.1 You can request Us for deletion and erasure of Your Personal Data.

8.6.2 You can nominate any other individual, who shall, in the event of Your death or incapacity, be allowed to exercise Your rights as prescribed under the Digital Personal Data Protection Act, 2023.

8.6.3 You are entitled to provide, manage, review or withdraw Your consent through a consent manager.

8.6.4 You can contact Us at the details provided in Clause 13 to register any grievance that You may have in respect of Our collection and use of Your Personal Data.

‍

8.7 If You seek to exercise Your rights under this clause, please contact Us at the details provided in Clause 13. We will verify any requests before acting on the request and respond to all requests We receive from individuals wishing to exercise their data protection rights within a reasonable timeframe in accordance with applicable data protection laws.

‍

9. COOKIE POLICY

9.1 Cookies are text files that are placed on Your computer to collect standard internet log information and visitor behaviour information by Us. When You visit the Website(s), We may collect Personal Data automatically from You through cookies or similar technology. We set cookies to collect information that is used either in aggregate form to help Us understand how Our Website is being used or how effective Our marketing campaigns are, to help customize the Website for You or to make advertising messages more relevant to You.

9.2 Necessary Cookies: We set essential cookies that enable core functionality such as security, network management, and accessibility. You may not opt-out of these cookies. However, You may disable these by changing Your browser settings, but this may affect how the Website(s) functions.

9.3 Statistics, Preference, and Marketing Cookies: We set these cookies to help Us improve Our Website by collecting and reporting information on how You use the Website. The cookies collect information in a way that does not directly identify anyone.

9.4 When You visit the Website, a cookie banner will be displayed providing additional information about cookies and options to opt out of non-essential cookies as required by applicable laws.

ScaleKit

Session cookie for the application

scalekit.com

_ga

Google Analytics / Google AdWords

For Website Analytics and Ad Retargetting

_ga_9G1XGSX7PP

_gcl_au

ar_debug

fs-cc

Finsweet

Cookie Consent for website

_cfuvid

Cloudflare (via HubSpot forms)

Waitlist Form for Leads

__cf_bm

JSESSIONID

Linked In Analytics and Integration

bscookie

li_at

li_rm

li_theme

li_theme_set

timezone

s_cc

s_ips

s_plt

s_pltp

s_ppv

s_sq

s_tp

s_tslv

AnalyticsSyncHistory

UserMatchHistory

_uetvid

aam_uuid

bcookie

dfpfpt

fptctx2

gpv_pn

lang

‍

10. GOOGLE USER DATA

ScaleKit operates as an integration Platform as a Service (iPaaS). When You connect a Google Workspace account (e.g. Calendar, Gmail, Drive) to a third-party application through ScaleKit, We act as an integration platform between You and that application.

10.0 Scope

This section applies regardless of whether You interact with ScaleKit directly or through a third-party application built by one of Our customers using ScaleKit's platform ("Developer"). Where You are an end user of a Developer's application, the Developer is responsible for obtaining Your consent to connect Your Google account and for its own use of any data it receives through that application. ScaleKit's role is limited to the data handling described in this Section 10, regardless of which layer of the integration chain You sit in.

10.1 Data We Access

We request only the Google API scopes the connecting application needs to function. This may include calendar events, email metadata, or file metadata, depending on the application and scopes You authorize.

10.2 How We Use Google User Data

Google user data obtained through these scopes is used solely to fulfill the specific action requested by the authorized application on Your behalf. We proxy this data; by default, We do not log it (see Section 10.3), and We do not run analytics on it. We do not use Google user data for any other purpose.

10.3 Storage and Retention

We store OAuth access and refresh tokens in encrypted form, using the safeguards described in Section 5. By default, We do not log or retain the content of Google API responses. Only if You enable the optional “Store connector error details” setting do We store the error responses returned by the connected service. Tokens are deleted promptly when You disconnect the integration or when Your account is deleted from the platform.

10.4 Sharing and Disclosure

We share Google user data only:

(a) with the application You authorized, to perform the action You requested;

(b) with service providers who host Our infrastructure, under a data processing agreement, and only as needed to operate the Service;

We do not sell Google user data. We do not use it for advertising. We do not use it to train or improve generalized AI/ML models.

10.5 Compliance

ScaleKit's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements.

‍

11. PRIVACY OF CHILDREN

We recognize the importance of children's safety and privacy. We do not request, or knowingly collect, any Personal Data from children under the age of 18. If a parent or guardian becomes aware that his or her child has provided Us with Personal Data, they should write to Us at the email address provided in Clause 13.

‍

12. NOTICE TO END-USER AND OTHER EXCLUSIONS

12.1 Our Platform is intended for use by businesses. This Policy is not applicable to Our processing of any Personal Data forming a part of the Customer Data, except that Sections 5 and 10 describe the safeguards We apply to all data We process, including Customer Data. We may receive End-Users’ Personal Data as a part of the Customer Data for which We will only act as a Processor and such processing will be governed by the Customer Agreement. In such a case, the End-User’s data privacy questions and requests should be submitted to the Customer in its capacity as a Data Controller. We are not responsible for Customers’ privacy or security practices which may be different from this notice. Customers of the Platform are solely responsible for establishing policies for and ensuring compliance with all applicable laws and regulations, as well as any and all privacy policies, agreements, or other obligations, relating to the collection of Personal Data in connection with the use of Platform by the Customer or the interaction with the Application by the End-Users.

12.2 Our Website(s) contain links to other Websites. Our Policy applies only to Our Website(s), so if You click on a link to another Website, You should read their privacy policy. We encourage You to review the privacy statements of any such other Websites to understand their Personal Data practices.

‍

13. CONTACT INFORMATION

You may contact Us if You have any inquiries or feedback on Our data protection policies and procedures in the following manner:

Kind Attention: Satya Devarakonda

Email Address: support@scalekit.com

‍

14. CHANGES TO THE POLICY

We keep this Policy under regular review and may update this webpage at any time. This Policy may be amended at any time and You shall be notified only if there are material changes to this Policy.

‍

Legal

Privacy Policy Effective Date: Nov 6, 2026

1. DEFINITIONS

2. PERSONAL DATA WE COLLECT

3. LEGAL BASIS FOR PROCESSING

4. INTERNATIONAL TRANSFER

5. DATA PROTECTION MECHANISMS

6. SECURITY OF PERSONAL DATA

7. RETENTION OF PERSONAL DATA

8. YOUR RIGHTS

9. COOKIE POLICY

10. GOOGLE USER DATA

11. PRIVACY OF CHILDREN

12. NOTICE TO END-USER AND OTHER EXCLUSIONS

13. CONTACT INFORMATION

14. CHANGES TO THE POLICY