Privacy Policy
Last updated: 21 August 2026
This policy explains what ScalePath collects when you use the website at scalepath.in and the platform at scalepath.in/app, why we hold it, and what you can ask us to do with it. It is written to be read, not to be survived.
ScalePath ("we", "us") operates the platform. If you use it, this policy applies to you.
What we collect
Account details. You sign in with a Google account or with a phone number verified by a one-time password. From that we hold your name, email address and phone number, and a record of when you signed in.
Your startup profile. Everything you tell the platform about your venture — answers from the founder interview, market and competitor notes, business model, financial figures, documents and decks you upload, and the readiness score calculated from them. This is the substance of the service, and you decide what goes in it.
Identity documents, where a stage requires them. Some activities — taking part in a funding process or a ChargeX site agreement — need identity verification. Where you provide a PAN or Aadhaar number, it is encrypted before it is stored and shown back to you only in masked form.
Site and location details, for ChargeX. If you apply with a charging location, we collect the address and coordinates, the electrical connection details, and the site information needed to assess feasibility.
Payment records. Paid plans are processed by Razorpay. Card and bank details are handled by Razorpay and never reach our servers; we keep the subscription status, the payment identifiers and the invoices.
Technical data. Server logs containing IP address, browser type and the pages requested, and a session cookie that keeps you signed in. We do not run advertising trackers or sell profiles of your browsing.
Why we hold it
- To run the platform and keep you signed in.
- To produce what you asked for — a profile, a readiness score, a financial model, a deck, a site assessment.
- To make introductions you have asked for. Your profile is shown to an investor or partner when you choose to share it, not by default.
- To verify identity where a funding or infrastructure stage requires it, and to meet legal and accounting obligations.
- To notify you about your own account, by email, SMS or WhatsApp.
- To keep the service secure and to debug it when it breaks.
Automated processing
Parts of the platform use an AI model to read what you have written and produce drafts, summaries, suggestions and scores. Your profile content is sent to that model provider to generate those outputs. It is not used to train models for anyone else, and the model does not make decisions about you on its own — every output is a draft you can accept, edit or throw away.
Who else sees it
We share data only with the services that make the platform work:
- Google Firebase — sign-in and phone verification.
- Razorpay — payments and subscriptions.
- Our AI model provider — the automated processing described above.
- Cloud hosting and object storage — where the application and your uploaded documents run and rest.
- Email, SMS and WhatsApp providers — to deliver notifications you have opted into.
- Investors, partners or ChargeX counterparties — only what you have explicitly chosen to share with them.
We do not sell your data, and we do not pass it to advertisers.
How long we keep it
Account and profile data is kept while your account exists. If you delete your account, we remove your profile and uploaded documents, except where we are required to retain records — payment and tax records, for example — for a statutory period. Server logs are kept for a short operational window.
Security
Access to production data is restricted. Sensitive identity values are encrypted at rest with AES-256-GCM, traffic to the site is served over TLS, and uploaded documents are held in private storage reachable only through short-lived signed links. No system is perfectly secure, and we will not pretend otherwise — if a breach affects you, we will tell you.
Your rights
You can ask us to show you the data we hold about you, correct it, delete it, or send it to you in a portable form. You can withdraw consent for notifications at any time. To make any of these requests, write to the address below and we will respond within a reasonable period.
Children
The platform is not intended for anyone under 18, and we do not knowingly collect their data.
Changes to this policy
If this policy changes materially, we will post the new version here and update the date at the top. Continuing to use the platform after that means the new version applies.
Contact
Questions about this policy, or a request about your data:
- By email: hello@scalepath.in