Last updated: May 2026
ScalarSignal (“ScalarSignal”, “we”, “us”) operates the ScalarSignal platform at scalarsignal.com. We are a data controller for the personal data of our users.
We collect: (a) account data you provide (name, email, password); (b) offer profile data you enter (your product description, give-first, social proof); (c) lead data you input about third parties; (d) scraped data about leads gathered from public sources; (e) usage data (pages visited, features used); (f) payment data processed by Stripe (we never see your card number).
We use your data to: provide and improve the ScalarSignal service; generate personalized emails on your behalf; process payments; send product updates (you can opt out); comply with legal obligations.
When you add a lead, ScalarSignal scrapes publicly available information about that person. This is processed under GDPR Article 6(1)(f) (Legitimate Interest) for B2B cold email. Source caches are retained between 7 and 90 days depending on the data category, and the full scraped record for each lead is automatically purged 90 days after collection. We never sell or share scraped lead data with third parties.
We process your personal data under: Contract (to provide the service you signed up for); Legitimate Interest (to improve the service, prevent fraud); Legal Obligation (tax, fraud prevention); Consent (marketing emails, you can withdraw at any time).
We share data with: Supabase (database infrastructure); Stripe (payment processing); OpenAI (email generation, your lead data is sent to OpenAI for processing; OpenAI does not train on API data); Resend (email delivery); Inngest (background job queue); PostHog (product analytics and session replay, EU instance, account and usage data only); Apify, Hunter.io, Firecrawl, and Google Custom Search (public-data scraping, where enabled). We do not sell your data.
Account data is retained until you delete your account. Scraped lead data is purged 90 days after collection, automatically. Source caches expire on shorter rolling windows (7 to 90 days by data type). Payment records are retained for 7 years as required by tax law.
Under GDPR, you have the right to: access your data; correct inaccurate data; request deletion; object to processing; data portability. Email privacy@scalarsignal.com to exercise any of these rights. We respond within 30 days.
We use essential session cookies for authentication. We use PostHog for product analytics, including session replay, to understand how the ScalarSignal app is used and to debug issues. PostHog is configured to mask sensitive form fields (passwords, lead data, generated email bodies). Our lawful basis is legitimate interest (improving the service). We do not use advertising cookies, retargeting, or any cross-site tracking. You can opt out of PostHog by emailing privacy@scalarsignal.com.
Questions? Email privacy@scalarsignal.com. For GDPR complaints, you may contact your local data protection authority.