We do not sell personal information. We do not use private company content to advertise to you. We collect only what is needed to operate and secure Scaloryn One.
Who controls your information
Scaloryn One, operated by Scaloryn Labs (“Scaloryn,” “we,” “us”), is responsible for the personal information described in this policy. Privacy questions and rights requests may be sent to privacy@scaloryn.com.
Information we collect
- Account data: email address, authentication identifiers, display name, and account timestamps.
- Company workspace data: company name, founder profile, expertise, business assumptions, opportunities, experiments, notes, decisions, delivery plans, and product recommendations you enter or generate.
- Service and security data: session cookies, device and browser information, IP-derived security signals, request logs, error records, and audit events.
- Communications: messages and support requests you send to us.
Please do not enter passwords, payment-card data, government identifiers, health information, or other sensitive personal information into free-text fields.
Why we use it
- Provide, personalize, maintain, and secure the service and your private workspace.
- Authenticate your account, save progress, produce requested outputs, and provide support.
- Detect fraud, abuse, security incidents, and technical failures.
- Comply with law, enforce our Terms, and establish or defend legal claims.
- Improve reliability and features using aggregated or de-identified information where reasonably possible.
Where applicable, our legal bases include performance of our contract with you, legitimate interests in operating and securing the service, compliance with legal obligations, and consent where the law requires it.
How information is shared
We share information only with service providers that help operate the service—such as hosting, database, authentication, security, and support providers—under appropriate contractual restrictions; with professional advisers where necessary; during a corporate transaction subject to confidentiality safeguards; or when required by law or necessary to protect rights and safety. We do not sell personal information or share it for cross-context behavioral advertising.
AI and automated outputs
The service may transform your inputs into structured recommendations and drafts. These outputs assist your judgment; they do not make legally significant decisions about you, and they should be reviewed before use. Do not submit third-party confidential or personal information unless you have authority and a lawful basis to do so.
Retention and deletion
We keep account and workspace information while your account is active and for a limited period afterward as reasonably necessary to provide the service, meet legal obligations, resolve disputes, prevent abuse, and maintain backups. Backup copies are deleted or overwritten on a controlled schedule. You may request deletion; limited records may be retained when legally required or necessary for security and legal claims.
Your privacy rights
Depending on where you live, you may request access, correction, deletion, restriction, objection, or a portable copy of personal information, and may withdraw consent where processing relies on consent. You may also appeal a denied request or complain to your local data-protection authority. Send requests to privacy@scaloryn.com. We may verify your identity and will not discriminate against you for exercising a privacy right.
International transfers
Our providers may process information in countries other than yours. Where required, we use recognized safeguards for international transfers, such as adequacy decisions or standard contractual clauses.
Security
We use access controls, row-level data isolation, encrypted transport, authentication controls, monitoring, backups, and testing designed to protect information. No system is completely secure; you are responsible for safeguarding access to your email account and promptly reporting suspected misuse.
Children and changes
The service is intended for adults and not for anyone under 18. We do not knowingly collect children’s personal information. We may update this policy as the service or law changes. Material changes will be identified by an updated date and, where required, additional notice.