Privacy Policy
Written from what the app actually does, in plain English. The short version: the free scan saves nothing, an account stores your email and your scan history, there are no ad trackers, and we never sell your data.
Who we are
S.C.A.L.E. (scale.siamakconsulting.com) is operated by Siamak Kalhor, doing business as Siamak Kalhor Consulting (“we”, “us”). This policy covers the S.C.A.L.E. app only. The consulting website at siamakconsulting.com has its own privacy policy.
Contact for anything in this policy: Siamak Kalhor Consulting, 530 E 8th St, Los Angeles, CA 90014 · siamakk2@gmail.com · (323) 657-7752.
The free scan (no account)
When you run a scan without an account, you give us one thing: a website address. Our server fetches that public page once, checks it, and sends the result back to your browser.
- We do not save the address or the result to our database.
- Like every website, the request passes through our hosting provider (Vercel), whose logs record your IP address and request details for operation and security.
- Your browser may remember the last address you typed (in its local storage) so the form is pre-filled next time. It stays on your device.
If you create an account
An account lets the app remember your scans so it can measure change month to month. We store:
| What | Why |
|---|---|
| Your email address | To send your sign-in links and identify your account |
| Business name, website address and, if you give it, your industry | To know which site to scan |
| Scan history: scores, findings, the date, and the signals read from your public web page (title, headings, structured data, links) | So the next scan can show what changed |
| Your action list, what you mark done or dismissed, and your stage progress | So your plan carries over between visits |
| Positioning statements you write in the app, if any | So you can refine them over time |
We don't ask for a password, your phone number or your address.
If you buy a plan
Payment is handled entirely by Stripe. We receive and store your Stripe customer and subscription IDs, your plan, its status and renewal date. We never see or store your card number. Stripe processes your payment details under its own privacy policy.
Sign-in, cookies and tracking
Sign-in is passwordless: we email you a single-use link. When you use it, a session token is saved in your browser's local storage so you stay signed in. That's the only thing the app stores on your device besides the pre-filled website address.
No advertising cookies, no analytics trackers, no ad pixels run in the S.C.A.L.E. app.
AI and your data
Scans are scored by our own rules-based engine: twenty-two named checks. Your data is not sent to any third-party AI service (such as OpenAI, Anthropic or Google) to produce your score, and we do not use your data to train AI models.
How we use information
- To run scans, show your results and keep your history.
- To send sign-in emails. We'll only send anything else, such as product news, if you opt in.
- To keep the service secure and prevent abuse.
- To answer you when you contact us.
- To improve the checks using aggregated, de-identified statistics (for example, how often a check fails across all sites), never in a way that identifies you or your business.
We do not sell or share your personal information, as those terms are defined in California law, and we don't use it for cross-site advertising.
Service providers
These companies process data on our behalf, only to run the service:
| Provider | Role | Location |
|---|---|---|
| Supabase | Database and sign-in | United States (Ohio) |
| Vercel | Hosting the app | United States and global edge network |
| Resend | Sending sign-in emails | United States |
| Stripe | Payments and subscriptions, for paid plans | United States |
How long we keep it
- Account data, including scan history, is kept while your account is open. The history is the product, so we don't delete it on our own.
- When you ask us to delete your account, we delete it and everything attached to it within 30 days. Copies in routine backups expire on the backup schedule after that.
- Hosting logs are kept for the period set by our hosting provider.
Your choices and rights
You can ask us to show you, correct, export or delete the information we hold about you. Email siamakk2@gmail.com from the address on your account; we confirm it's you by replying to that address.
California residents have these rights under the California Consumer Privacy Act, including the right to know what we collect, to delete and correct it, and to opt out of its sale or sharing (we don't sell or share it). We won't treat you differently for using any of these rights.
Security
All traffic is encrypted (HTTPS). In the database, each account can read only its own records; this is enforced by the database itself, not just the app. Scores can only be written by our server, so no one can alter a score. No system is perfectly secure, and if we ever learn of a breach affecting you, we'll tell you.
Children
S.C.A.L.E. is a business tool for adults. It isn't directed to anyone under 18, and we don't knowingly collect information from children. If you think a child has given us information, contact us and we'll delete it.
If your website was scanned
The scanner reads only public web pages, one page per scan, the way a browser or search engine would. It identifies itself as ScaleScan/1.0. If you own a site and want it excluded, email us and we'll block it.
Changes to this policy
If we change what we collect or how we use it, we'll update this page and the date at the top. If the change is significant, we'll email account holders before it takes effect.