This Privacy Policy explains how Scale CRM, LLC (“ScaleCRM”, “we”, “us”) collects, uses, discloses, and protects information when providing our SEO, website development, and Google review automation services (the “Services”).
By using the Services, you agree to the practices described in this Policy.
We are committed to protecting your privacy and complying with applicable data protection laws, including the Australian Privacy Act 1988 (Cth), the General Data Protection Regulation (GDPR), and the California Consumer Privacy Act (CCPA), where applicable.
2. Information We Collect
2.1 Client Information
When you sign up for or use our Services, we collect information such as:
Business and contact details (name, company, role, email, phone, address)
Billing information (billing name, address, payment method – processed by Stripe)
Account settings (branding, preferences, and service configuration details)
Website project information (site goals, design assets, copy, imagery, and integrations provided by you)
2.2 End-Customer Information
To deliver Services on your behalf, we may process:
Contact details (name, phone number, email)
Website form submissions or inquiries (when using our hosting or site setup services)
Visit/transaction details (e.g., service date, staff name, location, if applicable)
Campaign or website analytics data (traffic metrics, form conversions, performance insights)
Opt-out/suppression preferences
We do not collect sensitive categories of data (e.g., health, financial, or data about minors). If such data is uploaded accidentally, we will not process it beyond what is strictly necessary to provide the Services.
2.3 Website & Analytics Data
When you visit our website or hosted client websites, we may collect:
Browser/device information, IP address, referral URLs
Cookies or pixels for site analytics and functionality
Usage patterns (e.g., pages visited, time on page, click behavior)
We use standard tools such as Google Analytics, Meta Pixel, and similar technologies to measure site performance and engagement.
3. How We Use Information
We use information to:
Deliver and operate our SEO, website development, and review automation Services
Build, host, and maintain client websites
Send review requests and monitor performance
Provide support, updates, and ongoing maintenance for hosted websites
Generate analytics reports and website performance insights
Improve service quality, troubleshoot issues, and enhance user experience
Comply with legal obligations and prevent fraud or abuse
We do not use your data for targeted advertising, resale, or training AI/ML models outside your account.
4. Data Ownership & Roles
You (the client) own all Customer Data, including:
Website content, images, and branding assets you provide
SEO and analytics data tied to your website or campaigns
Customer and visitor information collected through your site’s forms
ScaleCRM acts solely as a service provider/processor, handling this data under your instructions. We will never contact your customers or website visitors directly for our own purposes.
5. Sharing & Disclosure
5.1 Sub-Processors
We use trusted service providers to host, develop, and analyze websites (e.g., cloud hosting, analytics, email gateways, Stripe for payments). They are bound by confidentiality and may process data only to perform services for ScaleCRM.
A current list of sub-processors is available upon request. You will be notified of material changes where required by law.
5.2 Legal Compliance
We may disclose information if required by law, valid legal process, or to protect rights, safety, or prevent fraud.
5.3 Sale of Data
We do not sell, rent, or trade Customer or End-Customer personal data.
6. Marketing & Client References
We may use your business name and logo for marketing purposes (e.g., listing you as a client, or describing work completed such as “website design” or “SEO services”).
We will never disclose End-Customer Data for marketing. You may opt out at any time by emailing [email protected], and we will stop new uses within 10 business days.
7. Security, Retention & International Transfers
We implement administrative, technical, and physical safeguards, including encryption in transit, access controls, and monitoring.
Data is retained while your account is active. Upon closure, we delete or return Customer Data within 30 days, subject to backups (up to 90 days) and legal obligations.
For hosted websites, we retain site files and data only for the duration of your hosting agreement.
Where international transfers occur, we rely on lawful transfer mechanisms (e.g., Standard Contractual Clauses under GDPR).
8. Your Rights
Depending on where you are located, you may have rights to:
Access, correct, or delete your personal data
Request data portability
Restrict or object to processing
Opt out of marketing communications
File a complaint with a data protection authority
To exercise your rights, contact us at [email protected]. We will respond within applicable legal timeframes.
9. Children’s Data
Our Services are not directed to individuals under 18. We do not knowingly collect data from children.
10. Updates to this Policy
We may update this Policy from time to time. If we make material changes, we will:
Post the revised version on our website, and
Notify clients by email (using the address linked to your account).
Your continued use of the Services after updates indicates your acceptance.
Questions, Complaints and Contacts
If you have any questions regarding this Privacy Policy, please contact us via email at [email protected].