Privacy Policy

1. Who we are

Scalyo (“we”, “us”) provides AI-assisted marketing and business analytics. We operate from India and work with business clients in India and the United States. This policy covers our website at scalyo.co and our web application at app.scalyo.co (the “app”), and explains how we handle personal data when you visit our website, contact us, use the app, or are a client or a client’s customer whose data we process.

Questions or requests about this policy can be sent to sunayna@scalyo.co.

2. Information we collect

• Contact details and messages: your name, email address and the message you send us through the contact form or by email.
• App account details: the name, work email and login details of the people our clients authorise to use the app, plus basic usage and security logs.
• Website usage data: pages viewed, approximate location, device and browser type, IP address, referring page and how you interact with our ads and site. This is collected through cookies and similar technologies, including Google’s tag.
• Client Data: marketing, advertising, website and business data that our clients choose to connect or share with us, such as campaign performance, website analytics, orders and customer-level or aggregated records. This can include personal data about our clients’ own customers and visitors.
• Company Information: details about a client’s business that they add to the app, such as product launches, campaigns, promotions and positioning, which we store for that client’s own use.

3. How we use information

• To respond to your enquiries and manage our relationship with you.
• To provide, secure, support and improve our services for our clients.
• To measure and improve the performance of our website and advertising.
• To meet our legal obligations and to protect our rights.

4. Our role: website visitors and client data

For information about website visitors and people who contact us, Scalyo decides how and why the data is used (in India’s terms, a “data fiduciary”, and in US terms a “business” or “controller”).

For Client Data, Scalyo acts as a service provider (a “data processor”) on behalf of our client. We process it only on the client’s instructions and for the purpose of delivering the services, and we do not use it for our own marketing. If you are a customer of one of our clients and want to exercise your rights over that data, please contact that client directly.

5. AI and data science models

Our app at app.scalyo.co uses AI language models, including models operated by third-party providers, and small statistical and machine-learning models that we train on a client’s Client Data to produce analyses and forecasts for that client.

We do not send complete datasets to AI model providers. We send only what is needed for a task, such as a small sample of rows, summaries or aggregated statistics, together with relevant Company Information. A sample can occasionally include personal data. The providers act as our service providers for this purpose.

Company Information is stored in the app and retrieved only to give relevant context to that client’s own questions. It is not made available to other clients. Models trained on a client’s Client Data are used to deliver the services to that client and are kept separate from other clients’ data.

6. Cookies and advertising

Our website uses cookies and similar technologies, including the Google tag, to understand how the site is used and to measure the results of our Google Ads campaigns. Third-party vendors, including Google, may use cookies to show our ads on other sites based on your previous visits to this website.

You can control cookies in your browser settings and opt out of personalised advertising using the controls below. Some US state laws describe certain advertising cookies as “targeted advertising” or “sharing”; the same controls let you opt out of that.

• How Google uses information from sites that use its services
• Google Ads Settings (opt out of personalised ads)
• Google Analytics opt-out browser add-on

7. Who we share information with

We do not sell personal information. We share it only with:

• Service providers that help us run our business, such as cloud hosting, AI model providers, email delivery for the contact form, analytics and advertising providers. They may use it only to provide their services to us.
• The advertising and analytics platforms our clients connect (for example Google, Meta and TikTok), as directed by those clients.
• Authorities or other parties where required by law, or to protect rights and safety.
• A buyer or successor, if we are involved in a merger, acquisition or sale of our business.

8. Where data is stored

We are based in India, and data may be stored and processed on cloud infrastructure and with service providers in India, the United States and other countries. Where required, we use appropriate safeguards for international transfers.

9. How long we keep information

We keep personal data for as long as needed for the purposes in this policy, or as required by law. Contact enquiries are kept while they remain relevant to our business relationship with you. Client Data and Company Information are kept for the duration of the engagement and, after it ends, deleted or returned on the client’s written request within a reasonable period, unless we must keep them by law.

10. Security

We use reasonable technical and organisational measures to protect personal data, and we limit access to people who need it. No system is completely secure, so we cannot guarantee absolute security.

11. Your rights

Depending on where you live, you may have the right to access the personal data we hold about you, to correct or delete it, to withdraw consent, to opt out of targeted advertising, and to complain to a regulator. This includes rights under India’s Digital Personal Data Protection Act, 2023 and US state privacy laws such as those in California. We will not discriminate against you for exercising these rights.

To make a request, or to raise a concern or grievance, email sunayna@scalyo.co. We may need to verify your identity first, and we will respond within the time required by law.

12. Children

Our website and services are for businesses and are not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe we have, please contact us and we will delete it.

13. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated shown above.