What we collect, and what we don't

Identity and profile information. When you create or use an account, submit a form, request an audit, schedule a call, or contact us, we collect the details you choose to give — such as your name, business name, email address, phone number (if you provide it), profile details, consent records, and the contents of your message.

Information collected automatically. When you visit our website, we and our analytics tools may collect limited technical data such as your IP address, browser type, device type, pages viewed, and referring source, through cookies and similar technologies. See our Cookie Policy for details.

Organization and access information. In the app, we process organization membership, workspace or estate association, role, object assignments, and billing-access authority so the service can return only the information and actions permitted for that account. Invoice and commercial information is visible only to a role explicitly authorized for billing access.

Reality, intent, and Ari content. We process the present reality, desired outcomes, needs, constraints, stakeholders, Intent Records and revisions, requests, decisions, delivery reviews, and conversations or clarifications you submit through Ari. Generated interpretations and user corrections may be retained separately so the record shows what was proposed and what the user confirmed.

User-selected attachments. When you choose to attach supporting material, we process the documents, photos, screenshots, or audio files you select or capture and upload, together with validation and file metadata needed to handle that material.

Product interaction and guidance state. We may retain app preferences, notification choices, guidance mode, completed mastery milestones, seen coaching prompts, next-action state, and consequential product activity needed to resume the experience, provide support, and preserve an audit history.

Client and project data. When you engage us, we may handle business information, account/platform access, and data within the systems we configure for you, only as needed to perform the services.

We use information to: authenticate accounts and enforce organization and role boundaries; structure and preserve the reality, intent, requests, decisions, and deliveries you submit; provide contextual guidance; respond to inquiries and provide requested audits and services; deliver, configure, support, and improve the services; communicate about your engagement, including service and account messages; keep records of agreements and payments; maintain the security and integrity of our systems; and comply with legal obligations.

We may send marketing or educational messages where permitted; you can opt out at any time using the unsubscribe link in those messages. Service and transactional messages are not marketing and cannot be opted out of while you have an active engagement.

We use cookies and similar technologies for essential site functionality and to understand how the site is used so we can improve it. You can control non-essential cookies through your browser settings. For a full description of the categories we use, see our Cookie Policy.

The current ScaleBridger mobile release candidate contains no advertising or cross-app tracking package. Website cookies and analytics are separate from the mobile candidate. The final mobile service-provider inventory and Apple and Google marketplace privacy declarations remain pending review.

We do not sell your personal information.

We share information with third-party service providers that help us operate — for example hosting, analytics, email/messaging, payment processing, and CRM tools — only to the extent needed to provide the services, and subject to their own terms. These providers are not owned or controlled by ScaleBridger.

The third-party provider inventory for the mobile app is reconciled against each app release, and the marketplace privacy declarations are finalized with that release. Until a release ships, this section describes the categories of providers we use rather than a final mobile inventory.

We may disclose information when required by law or valid legal process, to protect our rights, property, or safety, to prevent fraud or abuse, or in connection with a merger, acquisition, or transfer of operations. We may also use and share aggregated or de-identified information that does not identify you.

We use reasonable administrative, technical, and organizational measures intended to protect information against unauthorized access, loss, or misuse. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

You are responsible for protecting your own credentials and the security of accounts and systems under your control. If we become aware of a security incident affecting data under our control, we will take reasonable steps to investigate, contain, and notify affected parties as appropriate and as required by applicable law.

We retain information for as long as needed for the purposes described in this policy — to provide services, maintain records of agreements and payments, resolve disputes, and meet legal, accounting, and security obligations — after which we delete or de-identify it within a reasonable period, subject to backup and retention needs.

Category-specific periods for mobile content, uploads, product interaction and guidance state, backups, and service providers remain pending review. A legal, financial, security, fraud, dispute, or shared-workspace retention need may delay deletion or require a limited record to remain.

A public account-deletion submission remains pending identity confirmation. After signed-in confirmation, the request enters a provisional processing period and may be cancelled while its status permits. Account access remains active until terminal execution completes.

A completed account-deletion request means the documented ScaleBridger identity-and-access cleanup completed. It does not claim erasure from every workspace record, backup, connected service, processor, or third party.

You may request access to, correction of, or deletion of personal information we hold about you, and you may opt out of marketing communications at any time. For ScaleBridger account deletion, use the direct account deletion resource. For other privacy requests, use the contact method on our website. We will respond as required by applicable law.

The public account-deletion resource returns a stable request reference for support. That reference cannot reveal status. If the signed-in app issues a separate private status code, it may be pasted into the direct resource to retrieve only the request’s coarse lifecycle state. The site does not currently send automatic completion notifications.

The private status code is submitted in the lookup request body and is not designed for placement in a URL, browser storage, or support messages. Invalid, changed, and unknown status codes return the same unavailable response.

Depending on where you live, you may have additional rights under your local data-protection laws. Where ScaleBridger processes personal data on a client’s behalf, requests about that data are directed to the client as the party responsible for it.

We may use AI-assisted tools to help deliver and support the services. We do not submit sensitive, confidential, or regulated data into such tools except where authorized with appropriate safeguards, and outputs are reviewed before use in line with our Terms.

Our website and services are intended for businesses and are not directed to children. We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us so we can remove it.

We may update this Privacy Policy from time to time. The updated version is posted here with a revised “Last updated” date and takes effect when posted.

Questions about this Privacy Policy can be sent through the contact method on the ScaleBridger website. ScaleBridger, Austin, Texas, United States.