Privacy Policy

1. Overview

easyscale ("we", "us") respects your privacy. This policy explains what data we collect, how we use it, and your choices when you use easyscale.store.

2. Data we collect

Account data

• Email address and authentication credentials (via Supabase Auth)
• Product URL and target audience descriptions you submit

Outreach data

• X handles, display names, and public profile signals you save to boards
• DM drafts, templates, notes, and outreach status
• Public contact details from X bios when available (e.g. email, website)

X connection data

• If you connect X: your X user ID, username, OAuth scopes, and encrypted access and refresh tokens
• DM send metadata (event IDs, success/failure status)

Technical data

• Server logs, IP address, browser type, and usage necessary to operate and secure the service

3. How we use data

• Provide audience discovery, outreach boards, and DM sending features
• Authenticate you and maintain your session
• Process payments for paid features
• Improve reliability, prevent abuse, and support users
• Comply with legal obligations

We do not sell your personal data. We do not use your data for third-party advertising.

4. X (Twitter) data

When you connect X, we access only the data and actions permitted by the OAuth scopes you approve. Direct Messages are sent from your own X account. We store encrypted OAuth tokens on our servers; tokens are not exposed to other users or in the browser.

Audience discovery may use public X data (posts, profiles, handles) via third-party search providers and, where applicable, the X API. We store handles and public signals needed for your outreach workflow, not a copy of X's full platform data.

5. Service providers

We use trusted processors to run the service, including:

• Supabase (authentication and database hosting)
• Vercel (application hosting)
• Groq (AI-generated audience briefs and DM drafts)
• X API (OAuth and DM delivery when you connect X)
• Third-party X data providers for public search and profile enrichment

These providers process data only as needed to deliver the service, under their own terms and privacy policies.

6. Retention

We keep your data while your account is active and as needed to provide the service. If you disconnect X, we delete your X connection record. You may request account deletion by contacting us; we will delete or anonymize data unless we must retain it for legal reasons.

7. Security

OAuth tokens are encrypted at rest. Database access is protected with row-level security so each user can access only their own data. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

8. Your rights

Depending on your location, you may have rights to access, correct, delete, or export your data, or to object to certain processing. To exercise these rights, contact us using the details below.

9. Children

easyscale is not intended for users under 18. We do not knowingly collect data from children.

10. Changes

We may update this policy. The "Last updated" date at the top will change when we do. Material changes may be communicated through the app or by email where appropriate.

11. Contact

Privacy questions: @denpoint1 on X or easyscale.store.