Legal

Privacy Policy

Version 1.1 · Effective July 7, 2026

This Privacy Policy explains how Scrub to Scale LLC (“we,” “our,” “us”) collects, uses, and protects information when you use our subscription platform (the “Service”). By using the Service, you agree to the practices described here.

1. Information We Collect

We collect the following categories of information:

  • Account information — your email, password (hashed), business name, and any details you provide during signup or in your dashboard.
  • Billing information — handled by Stripe; we receive and store only customer and subscription identifiers, not full payment card numbers.
  • Configuration data — pricing rules, services, branding, custom questions, and other content you create in the Service.
  • Lead data — contact information and form responses submitted by your customers via your embedded widget. You are the controller of this data; we process it on your behalf.
  • Usage data — IP addresses, device/browser information, log timestamps, and feature interactions, used to operate, secure, and improve the Service.
  • Communications — emails or messages you send to our support address.

2. How We Use Information

  • To provide, maintain, and improve the Service;
  • To process subscriptions and deliver receipts;
  • To send transactional notifications (e.g., trial-ending reminders, password resets);
  • To respond to support requests;
  • To detect, prevent, or address fraud, abuse, or security issues;
  • To comply with legal obligations.

3. Subprocessors

We use third-party service providers (subprocessors) to operate the Service. Each is contractually obligated to protect your data:

  • Supabase — database, authentication, and storage.
  • Stripe — payment processing, subscription billing, and tax calculation.
  • Resend — transactional email delivery.
  • Twilio — SMS notifications (only if enabled).
  • Vercel — application hosting and content delivery.
  • Upstash — caching and rate limiting.

4. Sharing & Disclosure

We do not sell your information. We share it only as necessary with the subprocessors listed above, with your customers via the integrations you configure (e.g., webhook payloads sent to your CRM), and as required by law (subpoenas, court orders, regulatory requests). The above excludes mobile information, phone numbers, SMS opt-in data, and text messaging consent, which will not be sold, rented, shared, or transferred to third parties or affiliates for marketing or promotional purposes.

5. SMS Communications and Consent

When you provide your mobile phone number and opt in to receive text messages from Scrub to Scale, we may collect your name, phone number, email address, SMS consent status, opt-in source, opt-in date and time, and messaging history.

We use this information to send text messages you have consented to receive, including account notifications, onboarding reminders, customer care messages, support updates, billing or subscription notices, service updates, and marketing or promotional messages if you have separately opted in to receive them.

Message frequency varies. Message and data rates may apply. You may opt out of SMS messages at any time by replying STOP. You may reply HELP for assistance.

Mobile information, phone numbers, SMS opt-in data, and text messaging consent will not be sold, rented, shared, or transferred to third parties or affiliates for marketing or promotional purposes.

We may share limited information with service providers who help us deliver SMS messages, operate our systems, maintain security, or comply with legal obligations. These service providers are only permitted to use the information as necessary to provide services to Scrub to Scale and are not permitted to use it for their own marketing or promotional purposes.

Your SMS consent is not a condition of purchase.

6. Cookies & Tracking

Inside this dashboard: we use essential cookies for authentication and session management, and Vercel Speed Insights for first-party performance monitoring (no personal data, no cross-site tracking). The dashboard itself does not load Meta Pixel, Google Analytics, or other third-party advertising or analytics scripts.

On our marketing and community properties: our marketing website (scrubtoscale.com), GoHighLevel automation account, and Skool community use Meta (Facebook) Pixel and similar marketing tools. These are operated on third-party platforms separate from this application.

We honor the Global Privacy Control (GPC) browser signal across all of our properties as a binding opt-out under CCPA. Manage your in-app preferences and find platform-specific opt-out instructions on our Privacy Preferences page. Subprocessors such as Stripe may set their own cookies during checkout; their practices are governed by their policies.

7. Data Retention

We retain data for the following general periods, subject to longer retention where required by law (taxation, accounting, legal hold):

  • Account & configuration data — for the life of your account, plus 90 days after deletion
  • Lead data — for the life of your account; deleted with the account or at your written request
  • Billing records — 7 years (federal tax recordkeeping)
  • Security & access logs — 90 days
  • Terms-acceptance audit log — for the life of the account plus 7 years

You may request deletion of your account and associated data by emailing the address in Section 15.

8. Your Rights (General)

Subject to applicable law, you may:

  • Access the personal information we hold about you;
  • Request correction of inaccurate information;
  • Request deletion of your account and personal information;
  • Export your data in a portable format;
  • Restrict or object to certain processing;
  • Withdraw consent at any time, where processing is based on consent.

California (CCPA) and EU/UK (GDPR) residents have additional rights described in Sections 9 and 10 below. To exercise any of these rights, submit a request through the privacy request form on our Privacy Preferences page (no account required) — or email ebooth@scrubtoscale.com as a fallback. We verify the requester's identity before acting and respond within the timelines in Sections 9 and 10.

9. California Residents (CCPA / CPRA)

If you are a California resident, you have the right to:

  • Know what personal information we collect, use, disclose, or sell;
  • Delete personal information we have collected about you;
  • Correct inaccurate personal information;
  • Opt out of the sale or sharing of your personal information for cross-context behavioral advertising;
  • Limit the use and disclosure of sensitive personal information;
  • Non-discrimination for exercising any of these rights.

We do not knowingly sell personal information for monetary consideration. To the extent that our use of Meta Pixel and similar tools on our marketing and community properties constitutes “sharing” for cross-context behavioral advertising under the CCPA, you may opt out via the “Do Not Sell or Share My Info” link in the footer of every page, on the Privacy Preferences page, or by enabling Global Privacy Control in your browser. We will respond to verifiable CCPA requests within 45 days, with a one-time 45-day extension if reasonably necessary.

To submit a CCPA request, email ebooth@scrubtoscale.com with the subject line “CCPA Request”.

10. EU/UK Residents (GDPR / UK GDPR)

If you are in the European Economic Area, the United Kingdom, or Switzerland, the General Data Protection Regulation (or UK GDPR) applies to your personal data and we act as a data controller for the information we collect directly from you (account data, billing, support communications). For lead data submitted through widgets you operate, the cleaning business is the controller and we act as a processor.

Legal bases. We process personal data on the following bases:

  • Contract — to provide the Service you subscribed to (account, billing, support);
  • Legitimate interest — to secure the Service, prevent abuse, and improve product quality (subject to balancing test);
  • Legal obligation — to comply with tax, accounting, and other laws;
  • Consent — for any optional analytics or advertising tracking, where applicable; you may withdraw consent at any time.

International transfers. The Service is operated in the United States. Where we transfer personal data of EU/UK residents to the United States, we rely on the EU–US Data Privacy Framework or Standard Contractual Clauses approved by the European Commission, as applicable.

Your rights. You may exercise any of the rights listed in Section 8 above, plus the right to lodge a complaint with your local supervisory authority. We will respond to verifiable GDPR requests within 30 days.

Data breach notification. In the event of a personal data breach likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware and inform affected users without undue delay where required.

To submit a GDPR request, email ebooth@scrubtoscale.com with the subject line “GDPR Request”.

11. Children, Health & Other Regulated Data

The Service is not directed to individuals under 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us so we can delete it.

Not for protected health information (PHI). The Service is not a HIPAA-covered platform and we do not sign Business Associate Agreements unless we have explicitly agreed to do so in writing. Do not use the Service to collect, store, or transmit PHI or other health information regulated by HIPAA.

Customer-configured forms. You are the controller of data collected through your embedded widget and forms. You must not configure forms to collect children's data (subject to COPPA/GDPR-K), PHI, government IDs, financial account numbers, or other regulated sensitive categories without your own lawful basis and any required authorization. We provide the Service on the basis that you do not collect such data through it.

12. Security

We use industry-standard safeguards — including encryption in transit (HTTPS) and at rest, access controls, and regular security review — to protect your information. No system is perfectly secure; we cannot guarantee absolute security.

13. International Users

The Service is operated in the United States. If you access it from outside the U.S., you consent to the transfer and processing of your information in the U.S. and other jurisdictions where our subprocessors operate. EU/UK residents — see Section 10 for the specific transfer mechanisms we rely on.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated to active customers via email or in-app notice. The “Effective” date at the top of this page reflects the most recent version.

15. Contact

Questions or requests? Email ebooth@scrubtoscale.com.