Privacy Policy

ScaleSafe Client Evidence · Updated October 9, 2026

About this policy

ScaleSafe provides Client Evidence to help businesses using HighLevel preserve customer records and prepare dispute responses. This policy covers this separate application. The business using Client Evidence decides which customers, purchases, sources and records it is authorized to track.

Information we process

Depending on the business's setup, we process account and contact identifiers; payer and authorized-user relationships; purchase, service and external payment details; dispute notices; available communications, appointments, notes, tasks, forms and agreements; uploaded files; service-delivery and software-activity records; and connection, access, capture and audit information. Authorized provider credentials are used to maintain connected accounts. We do not intentionally collect full payment-card numbers, CVCs or raw bank credentials.

When a business authorizes Zoom transcript capture, we preserve available transcript text and related meeting and attendance information. This feature does not download meeting video or audio, generate a new transcription, or create a transcript that the provider does not supply. Availability depends on the connected account's permissions and Zoom settings.

How records are used and shared

We use records to maintain customer and purchase histories, preserve source versions, identify coverage gaps, prepare reviewed responses, secure access, diagnose failures and recover service. Authorized users in the connected business account can access its records according to their permitted role. Exports are provided to the business; a supported direct provider submission requires review of the exact response.

HighLevel provides account authorization and available business records. Stripe and Zoom provide their connected services when configured and authorized. Supabase hosts the application's database and stored originals; Railway hosts the application and encrypted recovery archives. Authorized operational recovery copies may also be held in restricted storage. Providers process information under their applicable terms and policies. We may disclose information when legally required or necessary to investigate misuse and protect the service.

When AI analysis is enabled, relevant product descriptions and selected customer, purchase and dispute records are sent through OpenRouter to the model provider selected for that request. We retain analysis results, their source references and usage information. AI interpretations are separate from original records, and a response requires merchant review before submission or export. Staff email notices contain case information and a link that requires CRM access; delivery uses our configured email provider.

Retention and account choices

We retain records for service delivery, dispute preparation, audit history and applicable record-keeping obligations. Archiving a customer stops its scheduled capture and retains existing evidence. Disconnecting a provider or uninstalling the app stops that authorized access; it does not delete previously preserved records. Retention notes entered in Settings document the business's policy and do not automatically delete evidence.

Encrypted backup copies may retain prior records until their rotation or authorized removal. Removing a record from active storage does not immediately remove every backup copy. Businesses can request access, correction, export or deletion through support. We verify the requester's authority and consider applicable retention obligations. Customers should normally contact the business that supplied their information.

Access and security

Access is bound to the active HighLevel business account. The application uses access controls, protected provider credentials, evidence hashes and encrypted recovery archives. These measures cannot guarantee that every security incident or service interruption will be prevented. Account holders must protect their own access and limit captured information to authorized purposes.

Temporary authorization cookies support connection security. Connected platforms have their own privacy practices. Review those providers' policies and your business's obligations before connecting a source or uploading information.

Contact and updates

Contact support@scalesafe.app for privacy and account requests. Include the product and business account name, but do not email passwords, payment-card details or provider secrets. We publish policy updates on this page with the updated date.