Privacy Policy

The data controller responsible for this website and the personal data collected through it is:

We collect personal data only when you voluntarily submit the demo request form on this website. The data collected is:

• Full name — to address you personally
• Work email address — to respond to your request and schedule a demo
• Company name — to understand your context and tailor the demonstration
• Message (optional) — additional context you choose to provide

This website uses Plausible Analytics (self-hosted) for aggregate traffic statistics. Plausible does not use cookies and does not collect any personally identifiable information.

We process your personal data for the following purpose, on the following legal basis under GDPR Art. 6:

We retain your personal data for a maximum of 36 months from the date of your last interaction with us. After this period, your data is securely deleted. You may request deletion at any time (see Section 7).

Plausible Analytics aggregate statistics are retained indefinitely in anonymised, aggregate form — no personal data is retained by Plausible.

Your data is shared with the following third parties solely for the purpose of delivering our services:

• Resend Inc. — transactional email delivery of your demo request notification. Resend processes data under a Data Processing Agreement. Data is not retained beyond delivery. Resend Inc. is incorporated in the United States. Transfers to Resend are governed by Standard Contractual Clauses (2021 EU SCCs, Module 2, controller-to-processor). Data processed is limited to your name and email address for email delivery only and is not retained by Resend beyond delivery.
• Vercel Inc. — hosting of this marketing website. Vercel Inc. is incorporated in the United States. Transfers to Vercel are governed by Standard Contractual Clauses (2021 EU SCCs, Module 2, controller-to-processor). Only technical metadata (IP address, request headers for routing) passes through Vercel infrastructure. No form submission data is retained by Vercel. RedDotIndustries SRL is actively migrating this marketing website to EU-domiciled infrastructure.

We do not sell, rent, or otherwise disclose your personal data to third parties for marketing purposes.

Transfers of personal data to Resend Inc. and Vercel Inc. (both US-incorporated) are governed by 2021 Standard Contractual Clauses (Module 2, controller-to-processor) as the transfer mechanism under GDPR Art. 46(2)(c). Transfer Impact Assessments have been conducted for both providers confirming that the nature and volume of data transferred does not present an elevated risk. We do not transfer personal data to any other third country. The Scalple product itself is deployed on EU-domiciled infrastructure (Hetzner, OVHcloud, Exoscale) and your database credentials, audit logs, and production data never leave your own infrastructure.

You have the following rights regarding your personal data:

• Right of access (Art. 15) — request a copy of the personal data we hold about you
• Right to rectification (Art. 16) — correct inaccurate data
• Right to erasure (Art. 17) — request deletion of your data, subject to legal obligations
• Right to restriction (Art. 18) — restrict processing in certain circumstances
• Right to portability (Art. 20) — receive your data in a machine-readable format
• Right to object (Art. 21) — object to processing based on legitimate interests

When you object to processing carried out on the basis of legitimate interests (Art. 6(1)(f)), we will cease that processing unless we can demonstrate compelling legitimate grounds that override your interests, or the processing is for the establishment, exercise, or defence of legal claims.

To exercise any of these rights, contact us at alexandru-serban@scalple.com. We will respond within 30 days.

If you believe we have not handled your personal data in compliance with GDPR, you have the right to lodge a complaint with the Romanian data protection supervisory authority:

You may also lodge a complaint with the supervisory authority in your EU member state of habitual residence, place of work, or place of the alleged infringement.

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.

This website does not use tracking or analytics cookies. Plausible Analytics (used for aggregate page-view statistics) is cookie-free by design and does not identify individual visitors. No cookie consent is required.

Strictly necessary technical cookies (e.g. session state) may be set by the web framework. These do not require consent under GDPR ePrivacy rules.

Scalple does not collect personal data about individuals from third-party sources (Art. 14 scenario). All personal data processed under this policy is collected directly from the data subject (website visitors and demo requesters). No Art. 14 disclosure obligation arises from current processing activities.

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page will reflect any changes. For material changes, we will take reasonable steps to notify affected individuals.

Privacy queries and data subject requests: alexandru-serban@scalple.com