Privacy Policy
At Scalata (an ExR Company), your privacy is important to us. This Privacy Policy outlines how we collect, use, and protect your information when you interact with our website and services.
1. Information we collect
Information you provide
When you fill out a form, request a demo, or contact us, we collect personal information such as:
- Name
- Email address
- Phone number
- Any other information you choose to share
Information we collect automatically
We use Google Analytics to collect anonymized data including:
- Device type and browser
- Pages visited and time spent on site
- General location based on IP address
2. How we use your information
We use your information to:
- Respond to your inquiries
- Send automated or personalized email replies
- Analyze and improve our website performance
- Maintain internal records
3. Scalata app: connected accounts and Google user data
This section applies to the Scalata assistant at chat.scalata.ai, where you can connect your own third-party accounts (Google Workspace, Microsoft 365, Slack, Jira, HubSpot, GitHub and others) so the assistant can work with your data on your behalf.
What we access
We access third-party data only through per-user authorization, only for the connectors you choose to connect, and only the items you ask the assistant to act on. From Google, with your permission, this may include:
- Gmail — messages, attachments, labels and contacts
- Google Drive — file metadata and file content
- Google Calendar — calendars, events and availability
- Google Cloud Storage — bucket and object listings, and object content
- Your basic Google profile (name, email address) when you sign in with Google
How we use it
Solely to carry out the request you make in your session — for example summarising an email, finding a document, creating a calendar event, or uploading a file. We do not use it for advertising, profiling, credit or lending decisions, or resale.
What we share, and with whom
To fulfil your request, the relevant content may be processed by service providers acting on our behalf, under contract and solely on our instructions:
- AI model providers — to generate the assistant's response to your request
- Sandboxed code-execution providers — only when you ask the assistant to run code on your data
- Cloud hosting and storage providers — to store your chats, uploaded files and knowledge-base content
- Operational monitoring and diagnostics providers — to keep the service reliable and investigate faults
These providers are bound to use the data only to deliver their service to us, and do not use it to train their own models. This list reflects our current providers and may change as our services evolve; we will keep this page up to date. We do not sell your data, and we do not transfer it to data brokers, advertisers, or any party for advertising purposes.
How we protect it
- Authorization tokens for connected accounts are encrypted at rest using AES-256-GCM
- All traffic is served over HTTPS using TLS 1.2 or higher
- Access is scoped per user — the assistant can never exceed the permissions your own account already holds
- Each connector's individual operations can be reviewed, restricted or disabled from within the app
Retention and deletion
- Connector tokens are retained until you disconnect that connector, which deletes them immediately
- Chats, uploaded files and knowledge-base content are retained until you delete them, or delete your account
- Deleting your account removes your chats, messages, uploaded files, knowledge-base content and connected accounts
- You can revoke Scalata's access at any time from your Google Account permissions page
Limited Use and AI/ML
Scalata’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Google Workspace data is used only to provide the user-facing features you invoke, within your session. It is never used to develop, improve or train generalised AI or machine-learning models, and is never transferred to any service that would use it for such training.
4. Third-party services
Our website uses several third-party tools and services:
- Elementor and Elementor Pro
- Google Analytics
- HubSpot
- Yoast SEO
- LiteSpeed Cache
- UpdraftPlus
- Hostinger hosting tools
These services may collect limited data. We do not sell or rent your personal information.
5. Cookies
We use cookies to:
- Improve your browsing experience
- Track analytics
- Remember preferences
You can control cookie settings through your browser, or through the cookie preferences on our site. See our Cookie Policy for details.
6. Payments
Payments are processed through a third-party platform. Clicking “Pay Now” redirects you to an external, secure checkout page. We do not store or process any payment details directly on our site.
7. Data retention
We retain form submissions and analytics data as long as needed for business purposes. Backup data is stored securely and updated regularly.
8. Your rights
You have the right to:
- Request access to your data
- Ask us to correct or delete it
- Withdraw your consent
To exercise these rights, email us at info@scalata.ai.
9. Security
We use technical and organizational measures to protect your data and prevent unauthorized access.
10. Updates to this policy
We may update this policy occasionally. Any changes will be reflected on this page with an updated date.
11. Contact us
If you have any questions about this policy:
Scalata
295 Madison Avenue, New York, NY 10017
Email: info@scalata.ai
Website: scalata.ai