Privacy policy

Last updated: 13 November 2026

Scalerup (“Scalerup”, “we”, “us”) provides a marketing intelligence service for ecommerce brands. This policy explains what data we collect, why, how we protect it and the choices you have. It covers our website (scalerup.me) and the Scalerup app.

1. Who this applies to

• Brands that use Scalerup (“customers”) and their team members.
• Visitors to our website.
• End customers of the brands that use Scalerup, whose order data a brand connects. For that data, the brand is the controller and Scalerup processes it on the brand’s behalf and on its instructions.

2. Data we collect

• Account data: name, work email and role of team members who sign in.
• Store data (when a brand connects Shopify or another store): orders, products, discount codes and customer records such as name, phone number, email and shipping region.
• Advertising data (when a brand connects Meta or Google Ads): campaign structure, spend, impressions, clicks, conversions and creative previews. Access is read-only.
• Analytics and search data (when a brand connects Google Analytics, Google Search Console or Google Merchant Center): aggregated traffic, funnel, search-query and product-listing data. This data is aggregated and does not identify individual visitors.
• Messaging and review data (when a brand connects tools such as Klaviyo or a reviews app): campaign performance and review content.
• Website data: we use Google Analytics on scalerup.me to understand how visitors use the site. It uses cookies and collects device, browser and approximate location information.

3. How we use data

• To provide the service: build reports, customer segments and personas, and generate recommendations for the brand that connected the data.
• To measure the results of recommendations a brand chooses to run.
• To keep the service secure, fix problems and support customers.
• To understand and improve our website.

We do not sell personal data, we do not use one brand’s data to serve another brand, and we do not use connected data for advertising.

4. Google user data

When a brand connects a Google account, Scalerup requests access to Google Ads, Google Analytics, Google Search Console and/or Google Merchant Center data, only for the accounts the brand selects. We use this data only to show that brand its reports and recommendations inside Scalerup.

Scalerup’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we do not transfer Google user data to others except as needed to provide the service, for security, or to comply with law; we do not use it for advertising; and no person reads it unless the brand asks us to (for support), it is needed for security, or the law requires it.

5. Meta (Facebook and Instagram) data

When a brand connects Meta, Scalerup reads advertising performance data for the ad accounts the brand selects, with read-only permission. We use it only to provide that brand’s reports and recommendations.

6. Where data is stored and who processes it

We use trusted infrastructure providers to run Scalerup, including Supabase (database and sign-in) and Vercel (hosting). They process data only on our instructions. Data is encrypted in transit, access tokens for connected accounts are stored encrypted, and each brand can only see its own data.

7. How long we keep data

We keep connected data while a brand’s account is active, so that history and trends stay available. On the Free plan, data is deleted after 60 days of inactivity, with a warning email first. When a brand closes its account or asks us to, we delete its data within 30 days, except where the law requires us to keep it.

8. Disconnecting and deleting data

• A brand can disconnect any integration at any time from Scalerup’s settings, or revoke access directly in Shopify, Meta (Business Settings) or Google (myaccount.google.com/permissions).
• To ask us to delete your data, email hello@scalerup.me with the subject “Data deletion request”. We confirm deletion within 30 days.
• End customers of a brand should contact that brand first; we will help the brand respond.

9. Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal data, or to object to how it is used. Email us and we will respond within 30 days.

10. Cookies

Our website uses Google Analytics cookies to measure visits. You can block or delete cookies in your browser settings; the site still works without them.

11. Children

Scalerup is a business service and is not directed at children under 18.

12. Changes

If we change this policy, we will update the date above and, for significant changes, notify customers by email.

13. Contact

Questions about privacy: hello@scalerup.me. Scalerup is based in Cairo, Egypt.