Privacy Policy

Last updated: May 2025

1. Data Controller

Scalivy is the data controller for personal data collected through this website and the platform. Contact: contact@scalivy.com

2. Data We Collect

  • Contact form: first name, last name, professional email, company name, role, company size
  • Account: email address, hashed password, role within the organization
  • Platform usage: actions performed, dates and times of connections (audit logs)
  • Technical data: IP address, browser type (collected via standard server logs)

3. Purpose of Processing

  • Responding to beta access requests
  • Managing user accounts and authentication
  • Providing and improving the Scalivy service
  • Sending service-related communications (no marketing without consent)
  • Ensuring platform security

4. Legal Basis

Processing is based on: performance of a contract (account management), legitimate interest (security, service improvement), and consent (optional communications).

5. Data Retention

  • Contact form data: 3 years from last contact
  • Account data: duration of the contractual relationship + 3 years
  • Audit logs: 1 year

6. Recipients

Your data may be shared with our technical service providers strictly within the scope of their mission: Vercel (hosting), Neon (database), Resend (transactional email). No data is sold to third parties.

7. Your Rights

You have the right to access, rectify, erase, restrict processing, and port your data, as well as the right to object. To exercise these rights: contact@scalivy.com. You may also lodge a complaint with the CNIL (France's data protection authority).