Privacy Policy
How ScaleAPIs collects, uses, stores, discloses, and protects personal data.
How ScaleAPIs collects, uses, stores, discloses, and protects personal data.
Table of Contents
Scope
This Privacy Policy explains how Scale APIs collects, uses, stores, discloses, and protects personal data and related information when people visit scaleapis.com, create accounts, contact Scale APIs, purchase services, or use the APIs and related platform features made available through the Scale APIs platform.
This Privacy Policy applies to:
the Scale APIs website and public marketing pages
account, login, workspace, and dashboard features
billing and subscription flows made available through the platform
product access to APIs sold through the Scale APIs platform, including ProdaPic and ProdaDoc
support, operational, security, and compliance handling connected to the platform
Additional service-specific disclosures may apply to ProdaPic and ProdaDoc where those services involve different processing, retention, delivery, or storage behavior.
Who We Are
For purposes of this Privacy Policy, the service provider is:
Provider name: Scale APIs
Provider location: Kisumu, Kenya
Privacy contact: privacy@scaleapis.com
Support contact: support@scaleapis.com
Information We Collect
Depending on how the platform is used, Scale APIs may collect and process the following categories of information.
1 Account And Identity Information
name
email address
workspace and account identifiers
authentication and session information
provider account identifiers from supported login providers
2 Billing And Commercial Information
subscription and plan information
billing status
invoices, transaction references, and related payment records
limited customer billing details made available through the billing provider
Payment card processing and related payment details may be handled by billing or payment providers, including Stripe, rather than stored directly by Scale APIs.
3 Support And Communications Information
emails and messages sent to support or privacy contacts
customer inquiries, troubleshooting details, and related follow-up records
4 Technical And Usage Information
IP address or similar network identifiers
user-agent and device or browser information
request timestamps
route, endpoint, and feature usage
status codes, latency, operational events, and related troubleshooting metadata
5 API Request And Output Information
When customers use APIs sold through Scale APIs, the platform and underlying services may process submitted inputs and generated outputs needed to operate those services.
These may include:
URLs
HTML content
template or document data
screenshot and PDF generation options
API request metadata
delivery and webhook configuration
generated outputs and related job or processing metadata
The exact categories vary by service. ProdaPic and ProdaDoc may each have additional service-specific handling details.
How We Collect Information
Scale APIs may collect information:
directly from customers and users when they create accounts, log in, subscribe, contact support, or submit API requests
automatically through browser and server interactions needed to operate the website and APIs
from authentication, billing, hosting, storage, email, and infrastructure providers involved in operating the platform
Scale APIs may rely on infrastructure and platform services including:
Railway for hosting
Supabase for account and auth-related platform functions
Stripe for billing
Resend for email delivery, where enabled
Upstash Redis where used for product or platform infrastructure
The platform may also rely on product-specific storage or infrastructure providers for ProdaPic and ProdaDoc.
Why We Use Information
Scale APIs may use collected information to:
operate the website and customer accounts
authenticate users and manage sessions
provide access to APIs, demos, and platform features
process subscriptions, billing events, renewals, and account changes
respond to support, privacy, and legal requests
operate, secure, monitor, troubleshoot, and improve the platform
prevent abuse, fraud, unauthorized access, and service misuse
enforce platform rules, limits, and commercial terms
comply with legal, tax, accounting, and regulatory obligations
Product-Specific Data Handling
The Scale APIs platform sells access to multiple services. Each service may involve different processing behavior.
1 ProdaPic
ProdaPic is a screenshot and related capture service. Depending on the workflow used, ProdaPic may process:
URLs and capture instructions
customer-supplied headers or cookies where supported
screenshot generation settings
generated outputs
async job and delivery metadata
Outputs and related delivery artifacts are handled according to the selected workflow, retention window, TTL, and delivery settings.
2 ProdaDoc
ProdaDoc is a PDF and document-generation service. Depending on the workflow used, ProdaDoc may process:
submitted HTML
template data
target URLs
generated document outputs
async job and delivery metadata
Direct synchronous flows may be processed transiently, while retained-output or hosted-delivery modes may involve bounded storage according to configured settings.
3 External Target Behavior
Some product workflows may interact with third-party websites or external assets at the customer's direction. Those workflows may be affected by:
target-site access controls
anti-bot systems
paywalls
login requirements
dynamic or unsupported site behavior
These conditions can affect how a request is processed or whether a request succeeds.
Retention
Scale APIs uses a retention approach that depends on the category of data and the service being used.
1 Platform-Level Retention
operational and security logs:
retained for up to 30 days unless a stricter operational reality or legal need applies
support communications:
retained for up to 24 months after the matter is closed, unless a longer retention period is reasonably necessary
billing, tax, accounting, anti-fraud, and related commercial records:
retained for as long as required by law, accounting practice, fraud prevention, or legitimate business recordkeeping needs
2 Product-Level Retention
Product retention may differ depending on the API, selected delivery mode, chosen storage configuration, TTL, and workflow settings.
ProdaPic:
outputs and related delivery artifacts may be retained only according to the configured workflow, delivery settings, and applicable TTLs
ProdaDoc:
direct request flows may be processed transiently, while retained-output or hosted-output modes may involve bounded retention according to configured settings
Where service-specific handling differs materially, additional service-specific disclosures may apply.
3 Deletion Requests
Scale APIs may delete data where legally and technically feasible, subject to contractual, legal, tax, fraud-prevention, security, backup, and recordkeeping obligations.
International Processing
Scale APIs is based in Kenya, and platform or product data may be processed in other countries depending on the hosting regions configured in Railway and other service providers used to operate the platform.
Because infrastructure and subprocessors may operate across multiple jurisdictions, personal data may be processed outside a user's home country. Scale APIs may use commercially reasonable contractual or operational safeguards where required.
Security
Scale APIs uses administrative, technical, and organizational measures intended to help protect platform and service information from unauthorized access, misuse, alteration, disclosure, or loss.
These measures may include:
access controls and account authentication measures
session and credential protection measures
infrastructure, hosting, and vendor security controls
rate limiting, abuse detection, and service monitoring
logging and operational safeguards used for security, troubleshooting, and incident handling
encryption or transport-security measures where appropriate for the services being used
Descriptions of security measures in this Privacy Policy reflect the service as operated at the relevant time.
Rights And Requests
Depending on applicable law, users and customers may have rights relating to their personal data, including rights to:
request access
request correction
request deletion
object to or restrict certain processing
request portability, where applicable
submit complaints to a competent regulator
Requests may be sent to:
privacy@scaleapis.com
Scale APIs aims to acknowledge requests promptly, such as within 5 business days, and to respond within the time required by applicable law.
Children
Scale APIs is not intended for children to use independently. If Scale APIs learns that personal data has been collected from a child in a manner that requires deletion or other action under applicable law, Scale APIs may take appropriate steps based on the circumstances.
Changes To This Policy
Scale APIs may update this Privacy Policy from time to time.
This Privacy Policy may be updated when material changes occur, including:
introduction of analytics or advertising tools
material changes in account, billing, or support tooling
changes to retention behavior
changes to product storage or hosted-output behavior
introduction of new services with materially different data handling
When required, updated terms will be published with a revised effective date.
Questions about this document?
If you have questions about this policy, contact us at legal@scaleapis.com.
Contact Us