What we do with what you tell us

The privacy policy is the version that counts, and it is written to be read rather than survived. This is the shorter answer to the four questions people actually ask.

"Who sees my profile?"

By default: us, and nobody else.

Your startup profile is not listed, browsable or discoverable. An investor, partner or ChargeX counterparty sees it when you choose to share it with them — that is a decision you make, not a setting that ships switched on. An introduction is an act, not a state.

This is worth being blunt about because the opposite arrangement is common. A lot of platforms are, underneath, a database of founders being sold to people who want to look at founders. Ours is not, and the way you can tell is that there is nothing to browse.

"Does the AI train on my business?"

Parts of the platform send what you have written to a model provider so it can produce drafts, summaries, suggestions and scores. That is how the builder and the copilot work; there is no version of it that keeps your text on your own machine.

What that content is not used for is training models for anyone else. And the model does not decide anything about you on its own — every output is a draft you can accept, edit or throw away. If a readiness score looks wrong to you, it is wrong, and it is not a gate that has quietly locked.

"What about my PAN and my bank details?"

Different answers, on purpose.

Identity numbers — PAN, Aadhaar — are collected only where a stage genuinely requires them, which in practice means a funding process or a ChargeX site agreement. They are encrypted before storage with AES-256-GCM and displayed back to you masked. You will not find them in plaintext, and neither will we.

Card and bank details are simpler: they never reach us at all. Payments run through Razorpay, which holds them. What we keep is the subscription status, the payment identifiers and the invoices — enough to know what you have paid for and to give you a receipt for it.

Uploaded documents sit in private storage and are reachable only through short-lived signed links. There is no public URL for your pitch deck.

"Can I get out?"

Yes, and it is not an ordeal.

Ask us to delete your account and we remove your profile and your uploaded documents. The exception is records we are legally required to retain — payment and tax records, mainly — for their statutory period. We are not going to pretend we can delete an invoice we are obliged to keep.

You can also ask to see what we hold, correct it, or have it sent to you in a portable form. If you signed in with Google, you can disconnect ScalePath at myaccount.google.com/permissions at any time — though note that this stops the sign-in and does not by itself delete anything, so if deletion is what you want, ask for deletion.

The things we do not do

We do not sell your data. We do not pass it to advertisers. We do not run advertising trackers on the site. There is no profile of your browsing being built here, and there is no plan for one.

Requests, or anything this did not answer: hello@scalepath.in.