Privacy Policy

Scaleezy Marketing Hub (“Scaleezy”, “we”, “us”) is operated by Doms Global LLP, registered at Gachibowli INOX Prism Mall, Hyderabad. For any privacy question, contact us at domsgloballlp@gmail.com.

We collect only what the product needs in order to work:

• Workspace details — workspace name, timezone, default language, and your customer reference in the wider Scaleezy system.
• Connected social account data — the account name, username, account type, profile URL and platform account ID returned by the platform after you authorise it, plus the role of the person who connected it.
• Authorisation tokens — the OAuth access and refresh tokens issued by each platform, together with their scopes and expiry.
• Marketing content — images, videos and other assets you upload or generate, plus the campaign briefs, captions and hashtags associated with them.
• Publishing records — what was published, to which account, when, whether it succeeded, and any error returned by the platform.
• Brand kit — your brand logo and any contact phone number you choose to add to generated posters.
• Audit and activity logs — connection, permission and token events, including the IP address and browser user agent used.

We never ask for, receive or store your social media passwords. Authorisation always happens on the platform’s own login page, and we only ever receive a revocable token.

• To publish the content you approve to the social accounts you select.
• To generate marketing copy and imagery from the briefs you provide.
• To show you performance metrics such as reach, engagement and conversions.
• To keep your connections healthy — refreshing tokens and telling you when reauthorisation is needed.
• To maintain a security and compliance audit trail of who changed what.

We do not sell your data, and we do not use your content or audience data to train our own models.

Operating the product means sharing some data with the providers below. Each handles data under its own privacy policy.

• Social platforms — Meta (Facebook, Instagram), LinkedIn, X, TikTok, YouTube and Google Business Profile receive the content you choose to publish, via their official APIs.
• Google Gemini — campaign briefs and any reference image you upload are sent to Google’s generative AI service to produce copy and imagery.
• Supabase — provides our database hosting and the storage bucket holding your uploaded and generated media.

• OAuth tokens are encrypted at rest using Fernet symmetric encryption and are never exposed to the browser or written to logs in readable form.
• Media files are stored in a Supabase storage bucket, separate from the application database.
• Access to production data is limited to personnel who need it to operate the service.

No system is perfectly secure. If we become aware of a breach affecting your data, we will notify you and the relevant authority as required by law.

We keep your workspace data for as long as your account is active. Disconnecting a social account revokes and stops using its tokens, while retaining the publishing and audit history tied to it so your records stay complete. When you close your account we delete or anonymise your data within 30 days, except where we must retain it to meet a legal obligation.

Depending on where you live, you may have the right to access, correct, export or delete your personal data, to object to or restrict processing, and to withdraw consent. You can disconnect any social account at any time from the Social Media Accounts page, which stops all future publishing to it immediately. To exercise any other right, contact us via domsgloballlp@gmail.com. We respond within 30 days.

We use cookies and browser local storage only to keep you signed in and to remember preferences such as your brand kit settings. We do not use advertising or cross-site tracking cookies.

Your data may be processed in countries other than your own, including by the third-party providers listed above. Where required, we rely on appropriate safeguards such as standard contractual clauses.

We may update this policy as the product changes. We will revise the “last updated” date above and, for material changes, notify you in the application.

Questions about this policy or your data: get in touch via domsgloballlp@gmail.com, or write to Doms Global LLP, Gachibowli INOX Prism Mall, Hyderabad.