Privacy Policy

Effective Date: March 2026

1. Information We Collect

When you use ScalePulse, we collect information you provide directly, including your name, email address, business name, and business data such as social media account connections, scheduled posts, campaign configurations, and analytics data. We also automatically collect usage data such as pages visited, features used, and device information.

2. How We Use Your Information

We use your information to:

• Provide and maintain the Service, including social media posting and scheduling
• Generate AI-powered content suggestions
• Process transactions and send billing notifications
• Send service-related communications (updates, security alerts)
• Improve the Service through aggregated, anonymized usage analytics
• Respond to support requests

3. Data Storage and Security

Your data is stored on servers hosted by Amazon Web Services (AWS) in the United States. We use industry-standard encryption (TLS in transit, AES-256 at rest) and access controls to protect your data. Social media access tokens are encrypted at rest using AES-256-GCM. Our web application is hosted on Vercel.

4. Third-Party Services

We use the following third-party services to operate ScalePulse:

• Stripe — Payment processing. Stripe's privacy policy applies to payment data.
• AWS Cognito — Authentication and identity management.
• Vercel — Application hosting and edge delivery.
• PostHog — Product analytics (anonymized usage data).
• Social Media Platforms — We connect to platforms you authorize (Facebook, Instagram, Twitter, LinkedIn, TikTok, YouTube) using their official APIs.

5. Cookies

We use essential cookies to maintain your session and authentication state. We use analytics cookies (PostHog) to understand how the Service is used. You can disable non-essential cookies in your browser settings.

6. Data Retention

We retain your data for as long as your account is active. After account cancellation, we retain your data for 30 days to allow for reactivation, then permanently delete it. Social media access tokens are revoked upon account deletion. We may retain anonymized, aggregated data indefinitely for analytics purposes.

7. Your Rights

You have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of your data
• Export your data in a machine-readable format
• Revoke social media platform connections at any time
• Opt out of non-essential communications

To exercise these rights, contact us at support@scalepulse.app.

8. GDPR and CCPA

If you are a resident of the European Economic Area (EEA), you have rights under the GDPR including access, rectification, erasure, and data portability. If you are a California resident, you have rights under the CCPA including the right to know, delete, and opt out of the sale of personal information. We do not sell your personal information.

9. Children's Privacy

The Service is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. Continued use after changes constitutes acceptance.

11. Contact

For privacy-related questions, contact us at support@scalepulse.app.