Privacy Policy

Scalehackerlab is a client-facing digital product by Scalehackerlab, a marketing agency operating from Miami, Florida, United States.

This policy applies to the portal, related workflows, and the information processed to support reporting, access, and operational coordination. Scalehackerlab is the controller of the personal information described here.

Visitors to our public website are covered by the website Privacy Policy at https://scalehackerlab.com/privacy. Both policies follow the same principles; where information submitted on the website reaches the portal (for example a Free Growth Assessment request), this policy governs its handling here.

• Registered account holders who access the client portal.
• Clients receiving managed services supported through the platform.
• People who submit contact information or service inquiries to the business, including through forms on our website.
• People who message a client's connected business channels (for example WhatsApp, Messenger, Instagram, or TikTok) when the client has enabled the shared inbox.

• Contact and account information such as name, business email, phone number, company name, role, and credentials.
• Usage and session data required to support secure access and product operations, such as login timestamps, IP address, browser type, and pages visited.
• Business and campaign-related information that clients provide during onboarding or service delivery, including briefs, brand materials, documents, and meeting transcripts.
• Authorized data from connected third-party marketing platforms when clients explicitly grant access (see the next section).
• Messages, support tickets, service requests, and feedback submitted through the portal.

Clients may connect accounts they administer on Google (Analytics, Search Console, Ads, and Business Profile), Meta (Facebook Pages, Instagram, Messenger, and WhatsApp), LinkedIn Pages, TikTok, Microsoft 365 (SharePoint and OneDrive), and WooCommerce. A connection is created only when an authorized administrator of that account completes the platform's own consent screen.

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We apply the same standard to every connected platform.

• What we access: read-only analytics, page and post statistics, follower and audience aggregates, search performance, advertising performance, and, where the client enables the inbox, incoming messages to the client's business channels. We request the minimum permissions each platform offers for these purposes.
• How we use it: to display reports and KPIs to the client that owns the account and to the agency team serving that client, and to prepare deliverables for that client. We never use one client's platform data for another client, for our own advertising, or to build profiles of individuals.
• How we store it: access and refresh tokens are stored on our servers with access restricted to the systems that need them, and are used only for the account that granted them. Analytics responses are cached for up to 15 days to limit repeated requests to the platforms.
• How to revoke: an administrator can disconnect a platform at any time from the client profile in the portal, or by removing our app from the platform's own settings (for example Google Account permissions, Meta Business integrations, or LinkedIn Page admin tools). On disconnection we delete the stored tokens and purge cached data for that connection within 30 days.
• We do not sell, transfer, or disclose platform data to third parties except to the service providers listed below, and we do not use it to train general-purpose artificial intelligence models.

Where you give us your mobile number and opt in, Scalehackerlab may send you text messages about your Free Growth Assessment, scheduling, account and service updates, and customer support. Messages may be sent by our team or by automated assistants acting on our behalf. The full program terms are in our SMS Terms.

• Opt-in is always explicit: the text-messaging box on our forms is unchecked by default and separate from any email consent. Consent is not a condition of purchase.
• We record the date, source, and wording of each opt-in, together with the technical details of the submission, so we can honor it and demonstrate it was given.
• Message frequency varies. Message and data rates may apply. Reply STOP at any time to opt out (you will receive one confirmation message) or HELP for help.
• We do not sell, rent, or share mobile phone numbers or SMS opt-in consent with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties.
• Phone numbers are disclosed only to the messaging providers that deliver our texts (carriers and the WhatsApp Business platform) and only for that purpose.

• Strictly necessary cookies that keep you signed in and protect your session.
• Short-lived cookies used during platform connections to prevent cross-site request forgery.
• A preference cookie that remembers your language.
• We do not use advertising or cross-site tracking cookies in the portal. Blocking necessary cookies will prevent you from signing in.

• To provide account access and manage Scalehackerlab functionality.
• To support marketing reporting, KPI tracking, and campaign analysis.
• To operate integrations, client delivery workflows, and support processes.
• To communicate about service updates, account activity, and operational issues.
• To maintain security, compliance, and platform reliability, including detecting misuse and unauthorized access.
• Where required, we rely on the performance of our contract with the client, our legitimate interest in operating and securing the service, your consent for platform connections, and our legal obligations.

The portal uses artificial intelligence models from third-party providers, currently OpenAI, to generate reports, summaries, marketing drafts, and assistant responses. To do this, business information a client provides and, where connected, aggregated platform metrics and message content may be sent to those providers.

• Our provider agreements prohibit the use of this content to train their models and require it to be retained only as long as needed to return a response.
• Content generated for a client is reviewed by agency staff before it is delivered or published on the client's behalf.
• Please do not enter health, financial account, government identification, or other sensitive personal data into the portal, the assistant, or uploaded documents.

We do not sell personal information. Data may be shared only with trusted service providers acting on our instructions, with other authorized users of the same client account, with the connected platforms as needed to operate a connection, or when required by law, to enforce our terms, or to protect rights and safety.

Our service providers include cloud hosting and database services, email delivery services, artificial intelligence providers, document storage, and workflow automation tools. Each is bound by contract to protect your information and use it only to provide services to us.

We retain account and business information for the duration of the client relationship and up to twelve months afterwards unless a longer period is required by law or to resolve disputes. Cached analytics are kept for up to 15 days. Platform tokens are kept until the connection is removed. Backups are rotated on a fixed schedule.

• Information is encrypted in transit using TLS, and databases and backups are encrypted at rest by our hosting providers.
• Access is restricted by role and by client account, so users see only the data of the organization they belong to.
• Platform credentials are never shown in the interface and are accessible only to the server processes that use them.
• We keep audit logs of sensitive actions and review access regularly. No method of transmission or storage is completely secure, but if we learn of a breach affecting your information we will notify you and the relevant authorities without undue delay as required by law.

Scalehackerlab operates in the United States, and our service providers process data primarily in the United States. If you access the portal from another country, your information will be transferred to and processed there. Where a legal framework such as the GDPR applies, we rely on standard contractual clauses or other approved safeguards with our providers.

• Request access to the personal information we hold about you.
• Request corrections to inaccurate or incomplete records.
• Request deletion of account-related information when legally permitted.
• Disconnect authorized third-party platform connections and request deletion of associated data.
• Object to or restrict certain processing, and request a portable copy of the information you provided, where the law of your location grants these rights.
• Opt out of non-essential email communications using the link in those emails. Operational messages about your account cannot be opted out of while the account is active.
• Opt out of text messages at any time by replying STOP to any message or by contacting us.
• To exercise any right, contact us using the details below. We will verify your identity and respond within 30 days. If you are in the European Economic Area, the United Kingdom, or California, you may also lodge a complaint with your local supervisory authority. We do not discriminate against anyone for exercising their rights.

The portal is a business service and is not directed to anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

We may update this policy as the service or the law changes. The date at the top shows the latest revision. For material changes we will notify account holders by email or through a notice in the portal before the change takes effect.

For privacy questions or requests, contact us at support@scalehackerlab.com.

Scalehackerlab, Miami, Florida, United States. Phone: +1 (575) 222-2644.