ScaleX InnovationBook a demo

Privacy Policy

Effective Date: April 26, 2026

ScaleX Innovation SAS ("ScaleX", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our websites, applications, and services, including AssessX, UrJob, ReviewAnything, ReviewPilot, PatentX, ScaleXI Crew, and XEducation.

1. Information We Collect

1.1 Information You Provide

  • Account Information: Name, email, phone number, organization, role, and password.
  • Profile Data: Job title, department, academic institution, and other details you choose to provide.
  • User Content: Documents, messages, exam content, job postings, chat messages, and other submitted content.
  • Payment Information: Billing address and payment method (processed by Stripe, Paddle, or PayPal, not stored by us).
  • Communications: Information provided when you contact support or participate in surveys.

1.2 Information Collected Automatically

  • Device Information: IP address, browser type, operating system, device identifiers.
  • Usage Data: Pages visited, features used, timestamps, click patterns.
  • Log Data: Server logs including access times and API call metadata.

1.3 Information from Third Parties

  • Single Sign-On: Name, email, and profile picture from Google, Microsoft, or other identity providers.
  • Payment Processors: Transaction status and billing country for order fulfillment.

2. How We Use Your Information

  • Provide, maintain, and improve the Services (contract performance).
  • Process payments and manage subscriptions (contract performance).
  • Send transactional emails: receipts, security alerts, account notifications (contract performance).
  • Provide customer support (contract performance).
  • Analyze usage to improve features and user experience (legitimate interest).
  • Detect, prevent, and address fraud, abuse, and security issues (legitimate interest).
  • Send marketing communications with your consent (consent).
  • Comply with legal obligations (legal obligation).

We do not use your User Content to train general-purpose AI models without your explicit, separate consent.

3. How We Share Your Information

We do not sell or rent your personal data. We may share information with:

  • Service Providers: Cloud hosting, payment processing (Stripe, Paddle, PayPal), email delivery, and analytics.
  • AI Model Providers: Your prompts may be sent to third-party AI providers (OpenAI, Anthropic, Google, Groq) for processing. These providers are prohibited from using your data for training.
  • Legal Requirements: When required by law, court order, or to protect our rights and safety.
  • Business Transfers: In connection with a merger, acquisition, or sale of assets.

4. International Data Transfers

ScaleX operates from France, Tunisia, and Saudi Arabia. Your data may be processed in the EEA, Middle East, or other regions. When transferring data outside the EEA, we use EU Standard Contractual Clauses (SCCs) and other legally recognized mechanisms.

5. Data Retention

  • Account data: Retained while active and for 30 days after deletion for recovery.
  • User Content: Deleted upon account deletion or request.
  • Usage and log data: Up to 12 months for analytics and security.
  • Payment records: 7 years as required by tax and accounting laws.
  • Support communications: Up to 3 years.

You may request deletion at any time. See our Data & Account Deletion page.

6. Your Rights

Under GDPR (EU/EEA residents)

  • Access: Request a copy of your personal data.
  • Rectification: Correct inaccurate or incomplete data.
  • Erasure: Request deletion ("right to be forgotten").
  • Restriction: Request restriction of processing.
  • Portability: Receive your data in a structured, machine-readable format.
  • Objection: Object to processing based on legitimate interest.
  • Withdraw Consent: Withdraw consent at any time.
  • Complaint: Lodge a complaint with your local Data Protection Authority.

Under CCPA (California residents)

  • Right to know what personal information we collect and disclose.
  • Right to delete your personal information.
  • Right to opt out of the sale of personal information (we do not sell data).
  • Right to non-discrimination for exercising your rights.

Under Saudi Arabia PDPL

  • Right to be informed, access, correction, and destruction of personal data.

To exercise any right, contact privacy@scalexi.ai. We respond within 30 days.

7. Cookies

  • Essential Cookies: Required for authentication, security, and preferences. Cannot be disabled.
  • Analytics Cookies: Privacy-focused analytics (Plausible), no cross-site tracking.
  • Functional Cookies: Remember your preferences (language, theme, chat session).

We do not use advertising or cross-site tracking cookies. Manage cookies through your browser settings.

8. Children's Privacy

Our Services are not directed to children under 16. We do not knowingly collect personal information from children under 16. If we learn that we have, we will delete it promptly. Contact privacy@scalexi.ai if you believe a child has provided us data.

9. Data Security

  • Encryption in transit (TLS 1.2+) and at rest (AES-256).
  • Access controls and role-based permissions.
  • Regular security assessments and vulnerability scanning.
  • Secure development practices and code review.

If we become aware of a data breach, we will notify you and the relevant authorities within 72 hours as required by law.

10. Automated Decision-Making

Some Services use AI for automated grading, candidate matching, and document review. These assist human decisions and are not the sole basis for decisions with significant legal effects. You have the right to request human review of automated decisions.

11. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email or in-app notice at least 30 days before taking effect.

12. Contact Us