Privacy

What we store

Your email address and password, so that you can log in. Your brand's name, tone and colors. Your products, with their photos, labels and ingredients. The scripts and angles you upload. And the ads we produce for you, with their order history.

We do not request or store card details: if we ever charge online, a payment gateway does so and the data remains on its side.

What we use it for

To produce your ads and so that you can view and download what you ordered. We do not sell or transfer your data.

If you accept measurement cookies, we also use some data to learn which of our ads are working: which ones bring in people who later make a purchase. That is measuring our own advertising. What you upload to Scalo (your products, your scripts, your ads) is not used for that purpose and does not leave our systems.

Where it is stored

In Supabase, which runs our database and file storage. Each account sees only its own data: it is separated at the database level, not by a screen that hides things.

Who else handles it

To produce an ad, the necessary material goes through the video and text generation providers we use. We send them the minimum necessary (the scene description, the product photo, the script) and we do not send them your email address or your account details.

If you connect Scalo to your Claude via MCP, the connection is with your account and reads only your data. You may disconnect it at any time from Claude's settings, without going through us.

If you accepted measurement cookies, we send Meta (Facebook and Instagram) only what it needs to recognize that a purchase came from one of our ads: your email address converted into a code that cannot be reversed (never the email address in plain text), your IP address, the browser you use, and the identifiers Meta places in your browser when you click on an ad.

We store those identifiers in your payment order, and this is intentional: when you pay by bank transfer, the purchase is confirmed hours after you have left the site, and without them there would be no way to know where it came from. If you do not accept measurement cookies, none of this is sent or stored.

Vercel is the company that hosts this site, so it sees the requests your browser makes to it (this is unavoidable: it is what delivers the pages to you). We also use its analytics service, which counts how many visits each screen receives and from which country and type of device they come. It does not use cookies, does not store your IP address and does not build a profile of you: these are aggregate figures, and we cannot see an individual's path through the site. That is why it works whether or not you accept measurement cookies.

We also count how many people are viewing the site at this moment and on which page, to know whether there is activity. To do so, your browser sends a "still here" signal once a minute while the tab is open. It does not use cookies or store anything on your device: the identifier is a random number generated in your browser, it is not stored anywhere and it disappears when you close or reload the page. We remove any identifying number from the screen's address before storing it, so what is recorded is "my orders" and not which one. Your IP address is not stored: we convert it into a code that changes every day and serves only to prevent anyone from inflating the counter. All of this is deleted automatically after two and a half minutes.

How long

For as long as your account remains open. Intermediate production files are deleted automatically after a few days; finished ads remain available for you to download whenever you wish.

What you can ask us

To see the data we hold about you, to correct it, or to have us delete all of it and close your account. Write to us and we will do so; there is no form or procedure.

Cookies

There are two types, and only the first type is always present.

Necessary cookies. The minimum required to keep your session open. Without them you could not log in, so they cannot be turned off.

Measurement cookies. These are Meta's, plus one of our own that records which campaign you came from (the information written in the ad's link, such as utm_campaign) and lasts 30 days; it is used to know which ad led to a purchase when you pay days later. None of these are loaded until you accept them: the first time you visit, we ask you, and if you decline, nothing is installed and the site works the same. You may change your mind at any time from Cookies, in the footer of this page.