In short: Scale for You only collects what it needs to run the service. No advertising, no trackers, no selling of data. Your data is hosted in the European Union; some providers (payments, AI) are located outside the EU.
Who is responsible for your data?
The data controller is the publisher of Scale for You (“we”), identified in the legal notice.
Publisher details are being updated.
Scale for You is an AI tool that builds Shopify stores and ads (product page audit, creative Studio, Shopify theme, ad diagnostic). This policy applies to the Scale for You website and app.
The data we process
Your account
Your email address (passwordless magic-link sign-in), your language, an internal identifier, your role and account creation date, and the technical tokens of your session.
Audits
The address of the audited Shopify page, a mobile screenshot of that public page, speed measurements, the score and findings, the date and — if you are signed in — the link to your account. To prevent abuse, we store a fingerprint of your IP address (for IPv6, of its network prefix): it is hashed with a secret key (a “salt”) and your address is never stored in clear. The screenshot may include information publicly visible on the page (for example first names in customer reviews).
For an audit run without an account, your browser receives a random token that lets you attach that audit to your account later, only from that browser. We only keep the fingerprint (SHA-256) of this token, erased as soon as the audit is attached. We also record whether each audit is public or private.
The Studio
The product photos you upload, the product name, your settings (styles, formats, voice, angle, tone), video scripts, the address of your current page if you provide it, and the generated content: photos, ad visuals, UGC videos with an AI presenter and AI voice, subtitles, product pages and landing pages (with their screenshot). We also record the credits reserved and used.
Ad diagnostic
The Ads Manager screenshot if you send one, the figures read from it, the figures you enter or confirm, your product price and margin, the platform and the verdict. Tip: crop your screenshot so it only shows the metric columns.
Shopify theme
Your license key, the linked myshopify.com domains, their activation and last-check dates, and the license status. The theme installed in your store only sends the key and the store domain; Scale for You does not record any data about your store’s visitors.
Subscription
Your plan, its status and period, the Whop identifiers of your membership and payments, the technical notifications sent by Whop, and your credit history. We never receive your card details: they are processed directly by Whop.
Coaching requests and waitlist
If you request the optional personal coaching offered by Tina Ecom: your email, message, indicative budget and, where relevant, the related audit or diagnostic (a request can only concern a public audit or one of your own). If you join a waitlist: your email and language. Each form links to this policy before you submit it.
Technical data
Like any website, our host processes technical logs (IP address, date, requested page, browser) to route requests and keep the service secure.
Why we use it (purposes and legal bases)
| Purpose | Legal basis |
|---|---|
| Create and manage your account, sign you in | Performance of the contract (terms) |
| Run audits, Studio generations, ad diagnostics and the launch kit | Performance of the contract, including audits without an account |
| Manage your subscription, credits and theme license | Performance of the contract |
| Prevent abuse (audit quotas, IP fingerprint, form submission limits, de-duplication of coaching requests), secure the service, fix errors | Legitimate interest in protecting and operating the service |
| Make shareable by link an audit run without an account, or an audit you chose to make public | Legitimate interest (report sharing is a feature of the service); for your signed-in audits, your explicit choice |
| Let you attach an audit run without an account to your account, from the browser that ran it | Performance of the contract |
| Answer your coaching request | Pre-contractual steps taken at your request |
| Let you know when a waitlisted feature is available | Consent, which you can withdraw at any time |
| Comply with accounting and tax obligations and answer authorities | Legal obligation |
AI processing
Scale for You uses AI models from specialised providers: for the audit’s AI review, reading ad screenshots, writing scripts and pages, and generating images, videos and voices. Only the data needed for each task is sent to them (see the next section).
Scale for You does not train AI models on your data. No decision producing legal effects concerning you is made automatically: scores, verdicts and recommendations are decision aids — you decide.
Who receives your data
Your data is accessible to the Scale for You team on a need-to-know basis, and to our processors, who only process it to provide their service:
| Provider | Role | Data concerned | Location |
|---|---|---|---|
| Supabase, Inc. | Database, authentication (including sign-in emails), file storage | All the data described above | European Union (Ireland) |
| Vercel Inc. | Website hosting and execution | Data passing through the website, technical logs | Functions in Frankfurt (EU); US-based company |
| Whop | Subscription payments, as merchant of record | Your internal Scale for You identifier and chosen plan; Whop collects your payment and billing details itself | United States |
| fal.ai | Image, video and voice generation | Product photos, generation instructions (prompts), scripts | United States |
| Cheaper Inference | AI gateway (text and vision) | Screenshots of audited pages, product texts, ad screenshots, page content | Outside the EU where applicable |
For payments, Whop also acts on its own behalf: its terms and privacy policy apply. We may also disclose data to authorities where required by law. We never sell or rent your data.
Transfers outside the European Union
Some providers (Whop, fal.ai, Cheaper Inference, and Vercel as a US company) may process data outside the European Union, notably in the United States. Where applicable, these transfers rely on appropriate safeguards: an adequacy decision of the European Commission (including the EU–US Data Privacy Framework for certified companies) or the European Commission’s standard contractual clauses. You can ask us for more information about these safeguards.
How long we keep it
| Data | Period |
|---|---|
| Account | As long as your account exists; deleted when it is deleted |
| Audits run without an account (and their IP fingerprint) | Kept as long as the report is accessible; deleted on simple request |
| Attachment-token fingerprint of an audit run without an account | Erased as soon as the audit is attached to an account |
| Audits linked to your account, Studio content, pages, theme license | As long as your account exists, or until you ask us to delete them |
| Ad diagnostics | As long as your account exists; you can delete one at any time (screenshot and figures erased immediately) |
| Ad screenshots whose figures were not confirmed | Deleted no later than 30 days after upload |
| Coaching requests | As long as needed to handle your request and follow up; deleted on simple request |
| Waitlist | Until you unsubscribe or the feature launches |
| Subscription and credit history | As long as your account exists, then for the periods required by accounting and tax law |
| Queued technical jobs | Deleted 30 days after completion |
Audit reports and share links
- Audit run without an account: it is public so it can be shared. Anyone with its unique, unguessable link sees the report summary: the score, the top three issues and the page screenshot.
- Audit run while signed in: it is private by default, visible only to you. You can make it public from the audit page (“Make public and share”, after confirmation), and private again at any time.
- Attaching: an audit run without an account can only be attached to an account from the browser that ran it, using the token described above. Once attached, it stays public until you make it private.
The full report is only visible to the holder of the account the audit is linked to. Audits only cover public pages.
Likewise, Studio files and previews of generated pages are served through unguessable links and are not indexed by search engines. Only share these links with people you choose; you can ask us to delete a report or a file at any time.
Security
Encrypted connections (HTTPS), passwordless sign-in, per-account data isolation at database level, private storage of ad screenshots (readable only through temporary signed links), salted IP fingerprints and limited internal access: we take appropriate technical and organisational measures to protect your data. As no system is infallible, we will notify you and the French data protection authority (CNIL) of any data breach likely to present a risk, as required by law.
Your rights
You have the right to access, rectify and erase your data, to restrict its processing, to data portability and to object (in particular to processing based on our legitimate interest), as well as the right to withdraw your consent at any time. Under French law, you can also set instructions regarding your data after your death.
To exercise these rights, contact us by writing to the publisher using the contact details in the legal notice. We reply within one month (extendable by two months for complex requests). If we have reasonable doubts about your identity, we may ask for proof.
If you believe your rights are not respected, you can lodge a complaint with the CNIL (www.cnil.fr) or with the data protection authority of your country.
Minors
Scale for You is intended for adults who create or run an online business. The service is not intended for people under 18 and we do not knowingly collect their data.
Changes
We may update this policy, for example when a feature or a provider changes. The last-updated date is shown at the top of the page; for significant changes, we will let you know by email or in the app.
Contact
For any question about this policy or your data, contact us by writing to the publisher using the contact details in the legal notice.