Effective date: 11 June 2026
Operator: Scale Us Technologies LLP, 4th Floor Karyathal, Vishnu Puri Colony, Aditya Nagar, Indore 452014, India ("Scale Social", "we", "us").
1. What this policy covers
This Privacy Policy explains how we collect, use, store and delete personal data when you use Scale Social at post.scaleus.in, a social media management platform that lets you connect Facebook Pages, Instagram professional accounts and LinkedIn pages, and create, schedule and publish content to them.
2. Data we collect
Account data: name, email address, password (hashed), plan and billing records, and support correspondence.
Platform data received from Meta and LinkedIn: when you connect a social account through the official Facebook Login for Business, Instagram API or LinkedIn OAuth flows, we receive and store: your page/account ID and name, profile picture, the list of Pages you manage, access tokens authorised by you, and, where you use those features, post content, media, comments and aggregated engagement metrics for the connected accounts. We only request the permissions needed to provide the service you signed up for.
Content you create: drafts, captions, images and videos you upload or generate with our AI tools, schedules and publishing queues.
Technical data: IP address, browser type, device information, and usage logs collected for security and to operate the service.
3. How we use data
We use your data solely to provide and improve the service: authenticating you, connecting your social accounts, creating and publishing posts you schedule, showing you analytics for your own accounts, billing, customer support, and protecting the platform against fraud and abuse. We do not sell personal data. We do not use Platform Data received from Meta for advertising, profiling unrelated to the service, or any purpose other than providing the features you request, in accordance with Meta Platform Terms and Developer Policies.
4. Legal bases
We process data to perform our contract with you, with your consent (which you may withdraw by disconnecting an account or deleting your account), and for our legitimate interests in securing and improving the service, consistent with the Digital Personal Data Protection Act, 2023 (India) and, where applicable, the GDPR.
5. Sharing
We share data only with processors needed to run the service: our hosting provider (servers located in the EU), payment processors (e.g. Razorpay, Stripe), and AI providers (e.g. OpenAI, OpenRouter) that process the text prompts and captions you submit to generate content. Each processor is bound by contractual confidentiality and data-protection obligations. We may disclose data if required by law.
6. Storage, security and retention
Access tokens and personal data are stored encrypted at rest and in transit (TLS). Access is restricted to authorised personnel. We retain your data while your account is active. Disconnecting a social channel deletes its tokens and platform data; deleting your account deletes all associated personal data within 30 days, except records we must keep for tax or legal compliance.
7. Your rights and data deletion
You may access, correct, export or delete your data at any time. Full deletion instructions, including how to remove data we received from Facebook, Instagram or LinkedIn, are at post.scaleus.in/data-deletion. You can also email contact@scaleus.in and we will action requests within 30 days.
8. Cookies
We use strictly necessary cookies for login sessions and CSRF protection, and basic analytics cookies to understand product usage. We do not use third-party advertising cookies.
9. Children
Scale Social is a business tool and is not directed at children under 18. We do not knowingly collect data from minors.
10. Changes and contact
We will post any changes to this policy on this page with an updated effective date. Data protection contact: Jasminder Singh Chhabra, jasminder@scaleus.in, +91 94257 99077, Scale Us Technologies LLP, Indore, India.
Google Business Profile Data
When you connect a Google Business Profile, we access your Google account and location information and OAuth tokens solely to publish posts you have reviewed and approved to your own verified locations. We request only the business.manage scope. We do not sell or share this data. You can disconnect at any time from Channels, revoke access in your Google Account settings, or request deletion via our Data Deletion Instructions. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.