Privacy Policy

At a Glance

Application: ScaleX (AI Business Growth OS)
Developer/company: Intelixa Intelligence Private Limited
Website: https://scalex.intelixa.app

1. Introduction

This Privacy Policy explains how Intelixa Intelligence Private Limited, having its registered office at H/No- 13, Bouripara, Ambikapur, Surguja- 497001, Chhattisgarh, India ("ScaleX", "we", "us", "our"), collects, uses, stores, and shares information when a business owner or their staff ("you", "your business") uses the ScaleX platform (AI Business Growth OS). It also explains the choices available to you regarding that information.

ScaleX is a business growth platform used by a business to manage its own customer communications, bookings, reviews, and related operations. Where ScaleX processes information about your customers on your behalf, you (the business) act as the data controller for that information and ScaleX acts as a data processor/service provider — see Section 8.

2. Information We Collect

We collect the following categories of information, only as needed to operate the product you have signed up for:

Account information — business name, owner name, email address, and password (stored as a salted hash, never in plain text).
Business profile information — the details you enter during onboarding and in Settings (business category, locations, service catalog, staff).
Customer and conversation data — customer contact details, bookings, and message threads that pass through the channels you connect (for example WhatsApp).
Connector credentials — access tokens for third-party services you choose to connect (see Section 5), encrypted at rest.
Billing information — subscription plan and payment status. Card and payment-instrument details are collected and processed directly by our payment processor (Razorpay), never stored by ScaleX itself.
Usage and log data — standard technical logs (timestamps, request metadata, error events) generated by using the product, used for security and reliability.

3. How We Use Information

To provide, operate, and maintain the ScaleX platform and the features you have enabled.
To authenticate your account and keep your business's data isolated from every other business on the platform.
To send transactional communications you request or that are necessary for the service (for example password-reset emails).
To detect, prevent, and investigate fraud, abuse, and security incidents.
To comply with applicable law.

We do not sell personal information to third parties.

We share information only in the following circumstances:

With the third-party services you explicitly connect to your ScaleX account (Section 5), solely to perform the action you requested (for example sending a WhatsApp message or processing a payment).
With service providers who host or process data on our behalf under contractual confidentiality obligations (for example our database and hosting infrastructure providers).
Where required by law, regulation, legal process, or a valid governmental request.
In connection with a merger, acquisition, or sale of assets, subject to this Policy continuing to apply to your information.

5. Third-Party Integrations You Control

ScaleX integrates with a number of external services, each activated only when you choose to connect it from your own Activation Center — nothing below is connected on your behalf without your action. Each service is governed by its own provider's terms and privacy policy in addition to this one. For every connection described below, ScaleX requests only the specific permissions ("scopes") that connection's feature needs, stores the resulting access token encrypted at rest (see Section 6), and stops using it the moment you disconnect.

5.1 Meta-Connected Services (WhatsApp, Facebook, Instagram)

WhatsApp Business Platform — used to send and receive your business's customer messages through the number you connect. ScaleX stores the resulting message threads and contact details as your own conversation data (Section 2) so you can view and reply to them; ScaleX never asks for your WhatsApp password.
Facebook Pages — used to identify the real Facebook Page(s) you manage and, where you use the publishing feature, to publish posts to a Page on your instruction.
Instagram business accounts — a Professional (Business or Creator) Instagram account linked to a Facebook Page you connect; used the same way as Facebook Pages, to publish content on your instruction. ScaleX never asks for your Instagram password.

These connections are requested under Meta's Facebook Login for Business / WhatsApp Embedded Signup, using only the permissions each feature above needs. Disconnecting from your Activation Center immediately stops ScaleX from sending, receiving, or publishing anything further through that account.

5.2 Google-Connected Services (Business Profile, Gmail, Calendar)

ScaleX accesses only the Google data required for the specific Google feature you choose to enable — never more than that:

Google Business Profile — your business account and location details you select during connection, and, where the reviews feature is used, your business's real Google reviews and the replies you send to them.
Gmail — used only to identify the connected mailbox and confirm it is reachable (its address and message count), using Google's restricted gmail.metadata scope. That scope cannot return the body or attachments of any email — ScaleX cannot read the content of your email through this connection.
Google Calendar — used only to confirm the connection is working and to list which calendars are visible to it (read-only access). ScaleX does not create, modify, or delete calendar events.

Google user data is never sold, and it is never used for advertising — Google data is used solely to provide the feature you connected it for. ScaleX's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Disconnecting a Google integration from your Activation Center immediately revokes the access token ScaleX stored for it; ScaleX cannot access that account further. You can separately review and revoke ScaleX's access at any time from your own Google Account, at myaccount.google.com/permissions.

5.3 Other Connected Services

Razorpay — to process your subscription payment.
Telephony and voice providers (e.g. Twilio, Sarvam AI) — where the AI voice receptionist feature is enabled for your business.

Disconnecting any integration from your Activation Center revokes ScaleX's local record of that connection; you can separately review and revoke ScaleX's access from that provider's own account-permissions page at any time.

6. Data Storage and Security

Your business's data is stored in a PostgreSQL database with tenant-scoped access controls, so one business's data is not visible to another.
Passwords are never stored in plain text — only as a salted cryptographic hash.
Connector credentials (third-party access tokens) are encrypted at rest.
Sessions are transmitted only over HTTPS in production, using secure, HTTP-only session cookies.

No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. We have not obtained, and do not claim, any specific third-party security certification.

7. Data Retention

We retain your business's information for as long as your account is active, and for a reasonable period afterward to comply with legal, accounting, or reporting obligations, resolve disputes, and enforce our agreements. You may request deletion of your account and associated data as described in our Data Deletion Instructions.

Third-party access tokens (WhatsApp, Facebook, Instagram, Google Business Profile, Gmail, Google Calendar, and any other connector you enable) are retained, encrypted, only for as long as that specific integration is active. When you disconnect an integration from your Activation Center, ScaleX revokes the stored token immediately, and it can no longer be used to access your account on that service.

8. Your Role as a Business (Controller/Processor)

When you use ScaleX to communicate with, book, or otherwise manage your own customers, you are responsible for having the appropriate legal basis and notices in place with those customers. ScaleX processes that customer data on your instructions, to provide the features you have enabled.

9. Your Rights and Choices

Subject to applicable law, including the Digital Personal Data Protection Act, 2023 (India) where it applies, you may have the right to access, correct, or request deletion of your personal information, and to withdraw consent for a specific processing activity. To exercise these rights, contact us at support@intelixa.app.

10. Cookies

ScaleX uses a single, essential session cookie to keep you signed in. It does not use third-party advertising or tracking cookies.

11. Children's Privacy

ScaleX is a business tool intended for use by business owners and staff who are at least 18 years old. It is not directed at, and we do not knowingly collect information from, children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above. Continued use of ScaleX after a change constitutes acceptance of the revised Policy.

13. Grievance Officer and Contact

In accordance with applicable Indian information-technology rules, questions, complaints, or grievances relating to this Policy may be directed to:

Vishnu Jaiswal, Grievance Officer
Intelixa Intelligence Private Limited
H/No- 13, Bouripara, Ambikapur, Surguja- 497001, Chhattisgarh, India
Email: support@intelixa.app