Privacy Policy

This Privacy Policy describes how Scale Lab OS LLC ("Scale Lab OS," "we," "us," or "our") collects, uses, discloses, and protects your information when you visit scalelabos.ai, app.scalelabos.ai, or otherwise interact with our services (collectively, the "Services").

We are operators, not lawyers. This policy is written in plain English where possible and follows the requirements of the Federal Trade Commission ("FTC"), the Telephone Consumer Protection Act ("TCPA"), the CAN-SPAM Act, the Children's Online Privacy Protection Act ("COPPA"), and applicable Ohio law including the Ohio Personal Privacy Act and the Ohio Consumer Sales Practices Act.

1. Information we collect

Information you provide

• Quiz responses: when you take the Bottleneck Quiz, your answers to each question.
• Contact information: name, email address, company name, and optionally mobile phone number.
• Account information: if you create an account at app.scalelabos.ai, your email and a password (we store passwords using one-way hashing, never plain text).
• Purchase information: products you buy, billing email address. Payment card data is collected and processed by Stripe; we never see or store your card number.
• Inquiries you submit: messages, business details (revenue, EBITDA estimate, goals), and any other content you send via our forms or by email.
• SMS consent records: the exact wording you agreed to, the date and time of consent, and the phone number you provided.

Information collected automatically

• Device and usage data: IP address, browser type and version, operating system, referring URL, pages visited, time on page, and approximate location derived from IP address.
• UTM parameters: when you arrive via a marketing link, we may capture campaign source, medium, and campaign name to understand which channels work.
• Server logs: standard web server logs of requests to our infrastructure.

2. How we use your information

• To deliver your quiz result, email your Official Bottleneck Report, and provide access to products you purchase.
• To send transactional communications (account confirmations, receipts, magic-link logins, fulfillment notices).
• To send marketing communications (newsletters, product updates) where you have provided consent or where permitted by law.
• To send SMS messages where you have explicitly opted in.
• To respond when you contact us.
• To improve our products, content, and quiz scoring based on aggregate patterns.
• To prevent fraud, abuse, and security incidents.
• To comply with legal obligations, court orders, and regulatory requests.

3. When we share information

We do not sell or rent your personal information to anyone. We share information only in these limited circumstances:

• Service providers: vendors who help us run the business and have agreed in writing to confidentiality and limited-use terms. Current providers include:
  • Supabase (database hosting)
  • Vercel (application hosting and DNS)
  • Stripe (payment processing)
  • Resend (transactional and marketing email delivery)
  • An SMS provider (currently being finalized; will be added here when active)
• Legal compliance: when required by law, court order, subpoena, or to respond to government requests.
• Business transfers: in the event of a merger, acquisition, or sale of all or part of our business, your information may be transferred to the acquirer subject to this policy.
• With your consent: when you explicitly ask us to share (for example, when you use the "Email it to someone" feature on the quiz result page, your result is sent to the address you specify).

4. SMS / text message program

Program description

Our SMS program sends:

• Informational messages: your Bottleneck Score result, a checklist for your worst pillar, and follow-up content tailored to your quiz answers.
• Marketing messages: new product launches, free resources, and occasional updates from Scale Lab OS.

Opting out

You can stop receiving text messages from us at any time by replying STOP to any message we send. You will receive a single confirmation message and will not receive further marketing or informational SMS from us unless you opt in again.

Consent records

We retain records of your SMS consent (timestamp, phone number, and the exact wording you agreed to) as required by the TCPA and FCC regulations.

Carriers

Carriers are not liable for delayed or undelivered messages.

5. Email communications

We send three categories of email:

• Transactional: receipts, account confirmations, magic-link logins, quiz results, fulfillment. You cannot opt out of strictly transactional email if you maintain an account or have an active purchase, but we minimize these.
• Marketing: newsletters, product updates, promotional offers. You can opt out at any time using the unsubscribe link in every marketing email, in compliance with the CAN-SPAM Act.
• Personal correspondence: replies to your direct emails.

6. Cookies and tracking

We use a minimal set of cookies and similar technologies:

• Strictly necessary cookies: required for the Services to function (login session, security tokens).
• First-party analytics: aggregate, privacy-respecting analytics to understand usage patterns. We do not use cross-site tracking, the Facebook Pixel, or third-party retargeting cookies.
• UTM session storage: brief session storage of UTM parameters so we can attribute conversions to the correct campaign.

Most browsers let you control cookies through their settings. Blocking strictly necessary cookies may break parts of the Services.

7. Data security

We implement reasonable administrative, technical, and physical safeguards designed to protect your information against unauthorized access, disclosure, alteration, or destruction. These include:

• Encryption in transit (TLS/HTTPS for all connections)
• Encryption at rest (Supabase Postgres encryption-at-rest by default)
• Role-based access controls (Supabase Row-Level Security policies)
• Hashed password storage (we never store plain-text passwords)
• Service-role credentials kept in server-only environment variables
• Limited employee access on a need-to-know basis

No security program is perfect. If we become aware of a security breach affecting your personal information, we will notify you and the Ohio Attorney General as required by Ohio Revised Code §1349.19 within the timeframes the law specifies.

8. Data retention

We retain personal information only as long as we have a legitimate need:

• Quiz submissions: retained at the original URL for 90 days, then archived to rolled-up contact statistics.
• Account data: retained while your account is active and for a reasonable period after deletion for backup and dispute resolution.
• Purchase records: retained as required by tax and accounting law (typically 7 years in Ohio).
• Marketing contact data: retained until you unsubscribe or request deletion.
• SMS consent records: retained for at least 4 years after opt-out, as required by TCPA recordkeeping rules.

9. Your rights and choices

Regardless of where you live, you have the following rights:

• Access: request a copy of the personal information we hold about you.
• Correction: ask us to correct inaccurate information.
• Deletion: ask us to delete your personal information, subject to legal retention requirements.
• Opt-out of marketing: unsubscribe from email at any time using the link in any marketing email; reply STOP to opt out of SMS.
• Withdraw consent: where we rely on your consent to process data, you can withdraw it at any time.

To exercise any of these rights, email info@scalelabos.ai with the subject line "Privacy Request." We will respond within 30 days.

10. Children's privacy

Our Services are designed for business owners and operators. They are not directed to children under 18, and we do not knowingly collect personal information from anyone under 18. If you believe a child under 18 has provided us with personal information, contact us and we will delete it promptly.

11. Ohio residents

Scale Lab OS LLC is organized under the laws of the State of Ohio. We comply with applicable Ohio law including:

• The Ohio Personal Privacy Act (Ohio Revised Code §1349.19), including the data-breach notification requirements.
• The Ohio Consumer Sales Practices Act (Ohio Revised Code Chapter 1345), which prohibits unfair or deceptive practices in consumer transactions.
• The Ohio Telephone Solicitation Sales Act (Ohio Revised Code Chapter 4719) where applicable to our SMS and phone communications.

The Ohio Attorney General's Consumer Protection Section can be contacted at: Office of the Ohio Attorney General, Consumer Protection Section, 30 E. Broad Street, 14th Floor, Columbus, Ohio 43215, or at OhioProtects.org.

12. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email or in-app notice. Your continued use of the Services after the effective date constitutes acceptance of the revised policy.

13. Contact us

Questions, requests, or concerns? Email info@scalelabos.ai.

Scale Lab OS LLC
Columbus, Ohio, USA

← Back to scalelabos.ai  ·  Terms of Service  ·  info@scalelabos.ai