Privacy Policy
Last updated: April 25, 2026
Effective date: April 25, 2026
Scaledux ("we", "us", "our") operates the platform available at https://scaledux.com and https://staging.scaledux.com (the "Service"). This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using Scaledux, you agree to this Policy.
1. Who We Are
Scaledux is a platform that connects startup founders with freelancers, mentors, and investors. We help users post projects, schedule mentorship sessions, manage bookings, and run video meetings.
Contact: [email protected]
2. Information We Collect
Information you provide directly:
- Account information: name, email address, phone number, profile photo, professional details
- Profile content: bios, portfolios, expertise areas, hourly rates
- Communications: messages exchanged through the platform
- Payment information: processed by third-party payment processors; we do not store full card numbers
- Identity verification documents: when required (e.g., DigiLocker / Aadhaar verification)
Information we collect automatically:
- Usage data: pages visited, features used, session duration
- Device data: IP address, browser type, operating system
- Cookies and similar technologies (see Section 8)
Information from Google services (if you connect your Google account):
See Section 4 for details on Google user data.
3. How We Use Your Information
We use your information to:
- Provide and operate the Service (account creation, matchmaking, bookings)
- Schedule and manage mentorship sessions and meetings
- Process payments and payouts
- Send transactional emails (booking confirmations, reminders, password resets)
- Improve and secure the platform
- Comply with legal obligations
4. Google User Data
If you choose to connect your Google account to Scaledux, we request access to specific Google services to provide scheduling features.
Scopes we request and why:
- Google Calendar (calendar.events) — to create, read, and update calendar events for mentorship sessions and meetings booked through Scaledux, so the events appear on your Google Calendar with the correct attendees and meeting links.
- Profile and email (userinfo.profile, userinfo.email) — to identify your account and pre-fill your profile.
How we use Google user data:
- Calendar event data is used solely to create, update, or cancel events that correspond to bookings made through Scaledux.
- We do not use Google user data for advertising.
- We do not sell, rent, or transfer Google user data to any third party except as required to provide the user-facing feature (e.g., displaying your event on your own calendar).
- We do not use Google user data to train generalized or large-language AI/ML models.
How we store Google user data:
- OAuth tokens are stored encrypted on our servers.
- Calendar event metadata that we sync (event ID, time, attendees) is stored on our servers to keep Scaledux bookings in sync with your Google Calendar.
- You can disconnect your Google account at any time from your account settings, which deletes all stored Google tokens.
Limited Use disclosure:
Scaledux's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
5. How We Share Information
We share information only in these circumstances:
- With other users: profile information you choose to make public is visible to other users on the platform (e.g., founders see freelancer profiles).
- With service providers: payment processors, cloud hosting (Hetzner), email delivery, identity verification (idto.ai), and video infrastructure (LiveKit). These providers process data on our behalf under contractual obligations.
- For legal reasons: if required by law, court order, or to protect rights, property, or safety.
- With your consent: for any other purpose disclosed at the time of collection.
We do not sell personal information.
6. Data Retention
- Account data is retained while your account is active and for up to 90 days after account deletion, except where longer retention is required by law (e.g., financial records).
- Google OAuth tokens are deleted immediately when you disconnect your Google account or delete your Scaledux account.
- Backups are retained for up to 30 days.
7. Your Rights
You can:
- Access, correct, or delete your personal information from account settings, or by emailing [email protected]
- Revoke Google access at any time from your Scaledux settings or from https://myaccount.google.com/permissions
- Export your data by contacting us
- Object to or restrict processing in certain circumstances
- Withdraw consent where processing is based on consent
Depending on your jurisdiction (e.g., GDPR for EU/UK, DPDP Act for India, etc.), you may have additional rights.
8. Cookies
We use cookies for authentication, session management, and analytics. You can control cookies through your browser settings. Disabling cookies may affect functionality.
9. Data Security
We use industry-standard measures including TLS encryption in transit, encrypted storage of OAuth tokens and credentials, role-based access controls, and regular security audits. No system is 100% secure, but we work hard to protect your data.
10. International Transfers
Scaledux operates from Nepal and uses cloud infrastructure located in Europe (Hetzner). If you access the Service from another country, your data will be transferred to and processed in these locations.
11. Children's Privacy
Scaledux is not intended for users under 18. We do not knowingly collect personal information from children. If we learn we have collected information from a child, we will delete it.
12. Changes to This Policy
We may update this Policy from time to time. Material changes will be notified by email or through the Service. The "Last updated" date at the top reflects the most recent revision.
13. Contact Us
For privacy questions or to exercise your rights:
Email: [email protected]
Scaledux