S
ScaletoTop
Log in

Privacy Policy

Last updated: 2026-07-03

PRIVACY POLICY Last Updated: 2026-03-22 ScaletoTop ("we", "our", or "us") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, share, and protect information about you when you use our services.

1. Information We Collect

- Account Information: Name, email address, and login credentials provided at registration. - Business Input Content: Keywords, SEO research requirements, and other inputs you enter while using our AI tools, used solely to generate real-time outputs. - Payment Information: Collected and processed by our authorized third-party payment processor. We do not store complete card numbers on our servers. - Technical Information: Browser type, OS, IP address, and page interaction data collected automatically via cookies and similar technologies.

2. How We Use Your Information

- To provide, maintain, and improve ScaletoTop platform features and AI tools. - To process orders, manage credit balances, and record transactions. - To send necessary system notifications, account verification, and service updates. - To respond to your support requests. - To analyze platform usage trends in anonymized or aggregated form. - To detect, prevent, and investigate fraud or other prohibited activities.

3. Information Sharing and Third-Party Services

We do not sell your personal information. We share information only with: - Service Providers: Trusted partners operating under confidentiality agreements. These include: · Resend (Email Delivery): For transactional emails like OTPs and notifications. · Creem (Payment Processing): Acts as Merchant of Record for all purchases. · PostHog / Google Tag Manager (Analytics): For de-identified user behavior analysis to improve the product. · DataForSEO (SEO Data): To fetch search rankings, keywords, and competitor data. · OpenAI / Anthropic / Google (AI Content Generation): To execute real-time AI generation tasks. Your data is not used to train general-purpose models. - Payment Processor: Creem, our authorized Merchant of Record, handles all transactions under its own independent privacy policy. - Legal Requirements: When required by law, court order, or government authority. - Business Transfers: In the event of a merger or acquisition, under equivalent privacy commitments.

4. Google API Services User Data

ScaletoTop accesses and processes your Google Search Console (GSC) and Google Analytics (GA4) data through Google APIs. Here is how we handle this data: - Read-Only Access: With your explicit authorization, we access only your GSC search performance data (rankings, clicks, impressions) and GA4 traffic data in read-only mode. We do not modify, write to, or delete any data in your Google account. - Data Use: GSC/GA4 data is used solely to display your own website's search performance and traffic trends within the ScaletoTop platform, helping you evaluate SEO/GEO optimization results. Data is not used for any other purpose. - Data Storage: OAuth access tokens are stored in encrypted form in our database. GSC/GA4 raw data is requested in real-time only when generating your reports and is not cached long-term on our servers. - Data Retention and Deletion: When you revoke Google authorization or delete your account, we immediately delete the corresponding OAuth tokens from our database and can no longer access your Google data. - Google API Services Limited Use: ScaletoTop's use of information received from Google APIs strictly adheres to the Google API Services User Data Policy, including the Limited Use requirements: * Data is used only to provide or improve user-facing features; * Data is not used for advertising purposes; * Data is not sold; * Data is not transferred to third parties except as required by law; * Data is not used for purposes unrelated to improving user-facing functionality.

5. Cookies

- Essential Cookies: Used to manage your session and preserve your basic preferences. These cannot be disabled. - Analytics & Optimization Cookies: We use PostHog and Google Tag Manager (GTM) to collect de-identified usage and behavior metrics to optimize our platform. These tools are disabled by default and will only be activated after you explicitly consent via our cookie banner. You can withdraw your consent at any time by clearing your browser cookies. You may also disable non-essential cookies via your browser settings, though some features may be affected.

5. Data Storage, Retention, and Transfer

- Storage: Secure servers operated by our cloud infrastructure provider, primarily in the United States and Singapore. - Retention: Personal data is retained only as long as necessary. Upon account deletion, data is removed within 30 days, except financial records required by law (typically 7 years). - Cross-border Transfer: Data may be processed in countries outside your region under contractual safeguards meeting international privacy standards.

6. Data Security

- TLS/SSL encryption for all data in transit. - Passwords stored using strong one-way hashing; we cannot access your original password. - Payment data processed by a PCI-DSS compliant payment processor. - Access to personal data strictly limited to personnel who require it to perform their duties.

7. Your Rights

Under applicable data protection laws, you have the right to: access, correct, delete, and export your personal data, and to object to certain types of processing. To exercise these rights, contact us at [email protected]. We will respond within 30 calendar days.

8. Children's Privacy

Our services are intended for adults. We do not knowingly collect personal information from individuals under 16. If you believe we have done so inadvertently, contact us and we will promptly delete the relevant data.

9. Third-Party Links

We are not responsible for the privacy practices of linked third-party websites. We recommend reviewing their privacy policies before providing any personal information.

10. Changes to This Policy

We reserve the right to update this policy at any time. Material changes will be announced on our website. Continued use after changes constitutes acceptance of the revised policy. Contact: [email protected]