Legal

Privacy Policy

Last updated: September 25, 2026

1. Introduction

Scalry is operated by Scalry Inc, a corporation registered in the State of Wyoming, United States, with its registered office at 30 N Gould St Ste N, Sheridan, WY 82801, United States. That entity is the data controller for the personal information described in this policy, and is who "we," "our," and "us" refer to below.

We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform. By using Scalry, you consent to the data practices described in this policy.

2. Information We Collect

Personal Information: We collect information you provide directly to us, including:

  • Account information (name, email address, password, company name)
  • Profile information (avatar, preferences, settings, business details)
  • Payment information (processed securely through third-party providers like Stripe and PayPal)
  • Communication data (support requests, feedback, customer service interactions)
  • Contact and lead information (when you import contacts or manage your CRM)
  • Financial account information, if you connect a bank, card, loan or investment account (see Section 10)

Usage Information: We automatically collect certain information when you use our service:

  • Device information (IP address, browser type, operating system)
  • Usage data (pages visited, features used, time spent on platform)
  • Marketing campaign data (email opens, clicks, SMS delivery status)
  • Analytics data (funnel performance, conversion rates, revenue metrics)
  • Integration data (third-party service connections and sync status)

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our marketing platform services
  • Process transactions and manage your subscription
  • Send you service-related communications, account updates, and support messages
  • Respond to your inquiries, support requests, and provide customer service
  • Monitor and analyze usage patterns to improve our platform
  • Detect, prevent, and address technical issues and security threats
  • Comply with legal obligations and enforce our terms of service
  • Personalize your experience and improve relevant product features

4. Information Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

  • Service Providers: We share information with third-party service providers who perform services on our behalf (payment processing, email delivery, analytics, hosting)
  • Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred
  • Legal Requirements: We may disclose information if required by law or to protect our rights and safety
  • With Your Consent: We may share information with your explicit consent
  • Integrated Services: When you connect third-party services (CRM, email providers, payment gateways), data may be shared according to those services' privacy policies

Your mobile phone number and SMS opt-in consent are never sold or shared with third parties for promotional or marketing purposes. This applies to every method of transfer, not only sale -- including sharing with affiliates or related businesses. We will not share your opt-in to an SMS campaign with any third party for purposes unrelated to providing you with the services of that campaign.

5. Data Security

We protect your information with measures including:

  • Encryption of all data in transit between your browser and our servers (TLS 1.2 or higher)
  • Encryption at rest of the access tokens for bank accounts you connect, and of our database backups
  • A database that is not reachable from the public internet, and access to production systems limited to authorized staff
  • Two-step verification available on every account, and required for administrators and before connecting a bank account
  • Access within a workspace limited by each member's role
  • Automatic operating-system security updates, and weekly automated checks of our software dependencies for known vulnerabilities
  • Hourly encrypted backups, with a restore tested every week

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Your Data Rights

Depending on your location, you may have the following rights regarding your personal information:

  • Access: Request access to your personal information
  • Correction: Request correction of inaccurate or incomplete information
  • Deletion: Request deletion of your personal information
  • Portability: Request a copy of your data in a portable format
  • Opt-Out: Opt-out of marketing communications and data processing
  • Objection: Object to certain types of data processing

To exercise these rights, please contact us at our contact page.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

  • Remember your preferences and settings
  • Improve product performance and user experience
  • Improve our services and user experience

You can control cookies through your browser settings, but disabling cookies may limit your ability to use certain features of our platform.

8. Third-Party Services and Integrations

We engage third parties to help run the platform. The current list, with what each one is used for, is published on our Sub-processors page. Scalry may also integrate with third-party services you connect yourself — your own mailbox, CRM, or calendar. When you connect these services:

  • Data may be shared according to the third-party service's privacy policy
  • We are not responsible for the privacy practices of third-party services
  • You should review the privacy policies of services you integrate with

9. Google User Data

When you connect a Google Calendar account to Scalry, we access your Google user data through Google APIs to provide the calendar features you request. Specifically, we use this access to:

  • Create, update, and delete calendar events on your connected calendar when a meeting is booked, rescheduled, or cancelled through Scalry
  • Generate a Google Meet video conferencing link for each scheduled meeting
  • Read your calendar's free/busy information to determine your availability for scheduling

When you connect a Gmail account to Scalry, we access your Google user data through Google APIs to send email on your behalf and detect replies. Specifically, we use this access to:

  • Send email messages that you compose or explicitly approve, from your connected Gmail address
  • Check your Gmail inbox for replies to those messages, so a lead's response is detected and routed into your Scalry inbox

We never label, archive, or delete anything in your Gmail account, and reading your inbox is limited to identifying replies related to Scalry-sent messages.

Scalry's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

  • We only use your Google user data to provide or improve the calendar, scheduling, and email features you have enabled, as described above
  • We do not use your Google user data for advertising, and we do not sell it or transfer it to third parties, except as necessary to provide the features you requested, to comply with applicable law, or as part of a merger, acquisition, or sale of assets as described in Section 4
  • We do not allow humans to read your Google user data unless: we have your affirmative consent for specific messages or data; it is necessary for security purposes such as investigating abuse; it is needed to comply with applicable law; or the data has been aggregated and anonymized

Your Google access and refresh tokens are stored securely and are used solely to make the authorized Calendar and Gmail API calls described above. You can revoke Scalry's access to your Google account at any time from your Google Account permissions page, or by disconnecting the integration from your Scalry workspace settings. Revoking access does not delete calendar events or sent emails already created before the disconnection.

10. Bank Account Data (Plaid)

If you connect a bank, credit card, loan or investment account to Scalry (for example in Financial Health), we use Plaid Inc. to make the connection. You sign in to your financial institution through Plaid, not through Scalry, and we never see or store your bank login. By connecting an account, you allow Plaid to collect data from your financial institution and share it with us, as described in the Plaid End User Privacy Policy.

Depending on the account and the features you use, we receive:

  • Account details: the institution, account name, type and the last digits of the account number
  • Balances and transactions (date, amount, merchant and category)
  • Loans and credit cards: balances, interest rates, minimum payments and due dates
  • Investment accounts: holdings and their values
  • Where you use bank payments, the account and routing numbers Plaid verifies so a payment can be sent or received

We use this data only to provide the features you have turned on, such as cash-flow, spending, debt and investment views, your financial health score and suggestions, and bank payments. We do not sell it, do not use it for advertising, and do not share it with third parties except our service providers who help us run Scalry, or as required by law. Accounts you connect as "Personal" are visible only to you; accounts you connect as "Business" are visible to your workspace's members.

You can disconnect an account at any time from Financial Health. Disconnecting revokes our access through Plaid, stops syncing, and deletes that account's data from Scalry. You can also manage the connections you have made through Plaid at my.plaid.com.

11. Children's Privacy

Scalry is not intended for users under the age required by applicable law to use business software services in their jurisdiction. We do not knowingly collect personal information from children in violation of applicable law. If we become aware that we have collected such information, we will take steps to delete it promptly.

12. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. We take appropriate measures to ensure your information is protected in accordance with this Privacy Policy.

13. Data Retention

We retain your information for as long as necessary to provide our services and comply with legal obligations:

  • Account data: Retained while your account is active and for a reasonable period after closure
  • Usage data: Retained for analytics and service improvement purposes
  • Marketing data: Retained according to your preferences and applicable laws
  • Financial account data: Retained only while the account is connected, and deleted when you disconnect it or your workspace is deleted
  • Backups: Encrypted database backups are kept for up to 35 days, then deleted automatically
  • Legal requirements: Retained as required by applicable law or for dispute resolution

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

  • Posting the updated policy on our website
  • Displaying a notice on our platform when appropriate

Your continued use of Scalry after changes constitutes acceptance of the updated policy.

15. Contact Information

If you have any questions about this Privacy Policy or our data practices, please contact us using the details below or through our contact page:

  • Data controller: Scalry Inc
  • Trading as: Scalry
  • Address: 30 N Gould St Ste N, Sheridan, WY 82801, United States
  • Website: https://scalry.com

For EU residents, you also have the right to lodge a complaint with your local data protection authority.