Privacy Policy

Last updated: 23 September 2026

This policy explains what ScalePath collects when you use the website at scalepath.in and the platform at scalepath.in/app, why we hold it, and what you can ask us to do with it. It is written to be read, not to be survived.

ScalePath ("we", "us") is operated by Rootwave Labs Pvt Ltd. If you use it, this policy applies to you. The terms of service cover the rest of the relationship.

What we collect

Account details. You sign in with a Google account or with a phone number verified by a one-time password. From that we hold your name, email address and phone number, and a record of when you signed in.

Your site or investment details. If you list land, we hold the site's address and coordinates, its venue, the chargers it could take, anything you write about it, and the documents you upload for it, such as the project report. If you invest, we hold how much you would invest, where, and in which kind of site. This is the substance of the service, and you decide what goes in it.

Messages. What you write to a landowner or an investor in a conversation on the platform.

Identity documents, where a stage requires them. Some activities — acting on a listing as an investor, or signing for a site as a landowner — need identity verification. Where you provide a PAN or Aadhaar number, it is encrypted before it is stored and shown back to you only in masked form.

Payment records. Paid plans are processed by Razorpay. Card and bank details are handled by Razorpay and never reach our servers; we keep the subscription status, the payment identifiers and the invoices.

Technical data. Server logs containing IP address, browser type and the pages requested, and a session cookie that keeps you signed in. The public EV application form at scalepath.in/app/ev also loads Meta's advertising pixel, which tells Meta that the page was visited so we can measure which ads bring people in. No other page on the website or the platform carries an advertising tracker, and we do not sell profiles of your browsing.

Why we hold it

To run the platform and keep you signed in.
To produce what you asked for — a site estimate, a listing, an answer from the copilot.
To list your site and make introductions. A listed site is shown to investors who hold ScalePath Pro; the owner's phone number is shared with an investor only after that investor has registered interest and the conversation between them has opened.
To verify identity where investing in or signing for a site requires it, and to meet legal and accounting obligations.
To notify you about your own account, by email, SMS or WhatsApp.
To keep the service secure and to debug it when it breaks.

Automated processing

Parts of the platform use an AI model to read what you have written and produce drafts, summaries, answers and reports. What you have written is sent to that model provider to generate those outputs. It is not used to train models for anyone else, and the model does not make decisions about you on its own — every output is a draft you can accept, edit or throw away.

Google account data

When you choose "Continue with Google", we sign you in through Google Sign-In (using Firebase Authentication). This section spells out exactly what that involves, because "sign in with Google" is otherwise a vague promise.

What Google gives us. Your name, your email address, your profile picture, and your Google account identifier. That is the whole list.

What we ask Google for. Nothing beyond basic profile and email. ScalePath requests no access to Gmail, Drive, Calendar, Contacts, Photos or any other Google service, and it cannot read, write or delete anything in your Google account. If a consent screen ever asks you for more than identity, something is wrong — do not approve it, and please tell us.

Why we hold it. To create your account, to recognise you when you come back, to show you your own name in the interface, and to contact you about your account. Nothing else.

Limited Use. ScalePath's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell this data, we do not use it for advertising, and we do not transfer it to anyone except as described in "Who else sees it" below.

Taking it back. You can disconnect ScalePath from your Google account at any time at myaccount.google.com/permissions. That stops the sign-in; to remove the data we already hold, ask us to delete your account and we will.

Who else sees it

We share data only with the services that make the platform work:

Google Firebase — sign-in and phone verification, as described under "Google account data" above.
Razorpay — payments and subscriptions.
Our AI model provider — the automated processing described above.
Cloud hosting and object storage — where the application and your uploaded documents run and rest.
Email, SMS and WhatsApp providers — to deliver notifications you have opted into.
Meta — the advertising pixel on the public EV application form, as described under "Technical data" above.
Investors and landowners on the platform — a listed site is shown to investors who hold ScalePath Pro, and an owner's phone number only once a conversation has opened, as described above.

We do not sell your data, and we do not pass it to advertisers.

How long we keep it

Account and profile data is kept while your account exists. If you delete your account, we remove your details and uploaded documents, except where we are required to retain records — payment and tax records, for example — for a statutory period. Server logs are kept for a short operational window.

Security

Access to production data is restricted. Sensitive identity values are encrypted at rest with AES-256-GCM, traffic to the site is served over TLS, and uploaded documents are held in private storage reachable only through short-lived signed links. No system is perfectly secure, and we will not pretend otherwise — if a breach affects you, we will tell you.

Your rights

You can ask us to show you the data we hold about you, correct it, delete it, or send it to you in a portable form. You can withdraw consent for notifications at any time. To make any of these requests, write to the address below and we will respond within a reasonable period.

Children

The platform is not intended for anyone under 18, and we do not knowingly collect their data.

Changes to this policy

If this policy changes materially, we will post the new version here and update the date at the top. Continuing to use the platform after that means the new version applies.

Contact

Questions about this policy, or a request about your data:

By email: hello@scalepath.in

ScalePath lists sites and makes introductions. It does not guarantee returns, and no one on the platform will promise you any.