What we do with what you tell us
Your details are yours. Who sees a listing, what an introduction actually shares, and how to make us forget you.
The privacy policy is the version that counts, and it is written to be read rather than survived. This is the shorter answer to the four questions people actually ask.
"Who sees my site?"
A listing is meant to be seen — that is the point of listing it — but not by everyone, and not all of it.
Only investors who hold ScalePath Pro can browse listed land. They see the site: where it is, what the venue is, what it could take and what it needs to build. What they do not get is a way to ring you. Your phone number reaches an investor only after they have registered interest in your site and the conversation between you has opened, which is a day later on Pro. Until then, everything goes through the chat on the platform.
That is the line we hold: an investor can find the land, and can only reach whoever owns it through us.
"Does the AI train on my details?"
Parts of the platform send what you have written to a model provider so it can produce drafts, summaries and answers. That is how the copilot works; there is no version of it that keeps your text on your own machine.
What that content is not used for is training models for anyone else. And the model does not decide anything about you on its own — every output is a draft you can accept, edit or throw away. If an estimate looks wrong to you, say so; it is not a gate that has quietly locked.
"What about my PAN and my bank details?"
Different answers, on purpose.
Identity numbers — PAN, Aadhaar — are collected only where a stage genuinely requires them, which in practice means an investor acting on a listing, or the signatory of a site. They are encrypted before storage with AES-256-GCM and displayed back to you masked. You will not find them in plaintext, and neither will we.
Card and bank details are simpler: they never reach us at all. Payments run through Razorpay, which holds them. What we keep is the subscription status, the payment identifiers and the invoices — enough to know what you have paid for and to give you a receipt for it.
Uploaded documents sit in private storage and are reachable only through short-lived signed links. There is no public URL for your project report.
"Can I get out?"
Yes, and it is not an ordeal.
Ask us to delete your account and we remove your details and your uploaded documents. The exception is records we are legally required to retain — payment and tax records, mainly — for their statutory period. We are not going to pretend we can delete an invoice we are obliged to keep.
You can also ask to see what we hold, correct it, or have it sent to you in a portable form. If you signed in with Google, you can disconnect ScalePath at myaccount.google.com/permissions at any time — though note that this stops the sign-in and does not by itself delete anything, so if deletion is what you want, ask for deletion.
The things we do not do
We do not sell your data, and we do not pass it to advertisers. The one advertising tag we run is Meta's pixel on the public EV application form, so we can tell which ads bring people in; nothing else on this site or in the app carries one.
Requests, or anything this did not answer: hello@scalepath.in.
ScalePath lists sites and makes introductions. It does not guarantee returns, and no one on the platform will promise you any.