Scalitt

Privacy Policy

Last updated: September 2026

1. Data Controller

Scalitt B.V., registered in the Netherlands, is the data controller responsible for the processing of your personal data through our platform at scalitt.com and app.scalitt.com. For questions about this policy or your personal data, contact us at hello@scalitt.com.

2. Information We Collect

2.1 Account information you provide:

  • Name and email address
  • Company name and role within your organization
  • Password (stored in hashed form)
  • Connected email accounts (e.g. Gmail) for sending sequences

2.2 Payment information:

Payment details (credit card, billing address) are processed directly by Stripe and are never stored on our servers. We only store your Stripe customer ID and subscription status.

2.3 Content you create and import:

  • Leads and prospect data (names, email addresses, job titles, company information, LinkedIn URLs, phone numbers)
  • Email sequences, templates, and sent emails
  • Call recordings, transcripts, and coaching analyses
  • Pipeline deals, notes, and activity logs
  • Ideal Customer Profile (ICP) definitions and search filters

2.4 Automatically collected information:

  • IP address and approximate location
  • Browser type and operating system
  • Session data required for authentication

3. Lead & Prospect Data

Our platform helps you find and engage potential customers. When you use our lead generation features, we retrieve prospect data (such as names, email addresses, job titles, and company information) from third-party data providers, specifically Apollo.io. This data is sourced from publicly available business information. You are responsible for using this data in compliance with applicable laws, including GDPR and applicable anti-spam legislation.

4. How We Use Your Information

  • Provide, maintain, and improve our platform
  • Process transactions and manage your subscription
  • Generate and enrich leads using third-party data providers
  • Generate personalized email drafts using AI
  • Record, transcribe, and analyze sales calls for coaching purposes
  • Score and qualify leads using AI-powered analysis
  • Send emails on your behalf through connected email accounts
  • Send technical notices, security alerts, and support messages

5. Legal Basis for Processing (GDPR)

We process your personal data on the following legal grounds:

  • Contract performance - Processing your account data and providing platform features is necessary to deliver our services under our agreement with you.
  • Legitimate interest - Improving our platform, preventing fraud, and ensuring security. For B2B prospecting activities, we rely on the legitimate interest of our customers to conduct business development.
  • Consent - Where required, such as for call recording. You can withdraw consent at any time.
  • Legal obligation - Retaining transaction records as required by tax and accounting regulations.

6. AI & Automated Processing

Scalitt uses artificial intelligence to power core features of our platform. This includes:

  • Email generation - Prospect names, job titles, and company information are sent to AI providers to generate personalized email drafts. You always review and approve emails before they are sent.
  • Sales coaching - Call transcripts are analyzed by AI to provide coaching recommendations, sentiment analysis, and conversation scoring.
  • Lead scoring - AI evaluates prospect data to suggest which leads are most likely to convert. This scoring is advisory and does not replace human decision-making.

Your data is not used to train AI models. We use AI providers as data processors under strict data processing agreements.

7. Call Recording & Transcription

Our platform supports recording and transcription of sales calls. Call recordings are stored securely in encrypted cloud storage. Transcripts and AI-generated coaching analyses are stored in our database. You are responsible for obtaining appropriate consent from call participants before recording, in accordance with applicable local laws.

8. Data Sharing & Third-Party Processors

We do not sell your personal information. We share data with the following categories of service providers, acting as data processors under data processing agreements:

  • Cloud infrastructure providers - for hosting, database, authentication, and file storage
  • Stripe - for payment processing
  • Lead data enrichment providers - for sourcing publicly available business information
  • AI service providers - for email generation, coaching analysis, and lead scoring
  • Google (Gmail, Calendar) - for email sending and calendar integration when you connect your account

A complete list of our sub-processors is available on request. Contact us at hello@scalitt.com.

9. International Data Transfers

Scalitt B.V. is based in the Netherlands (EU). Our service providers are primarily located in the United States. These transfers are safeguarded by Standard Contractual Clauses (SCCs) as approved by the European Commission, or by the EU-U.S. Data Privacy Framework where applicable. You can request a copy of these safeguards by contacting us.

10. Data Security

We implement industry-standard security measures to protect your data. All data is encrypted in transit using TLS and encrypted at rest. Our platform uses multi-tenant architecture with strict data isolation, ensuring your data is never accessible to other customers. Access to production systems is restricted and monitored.

11. Data Retention

  • Account data - Retained for the duration of your account. Deleted within 30 days of account closure upon request.
  • Lead and prospect data - Retained while your account is active. You can delete individual leads at any time.
  • Call recordings and transcripts - Retained while your account is active. You can delete individual recordings at any time.
  • Payment records - Retained for 7 years after the transaction as required by Dutch tax law.
  • Server logs - Automatically deleted after 90 days.

12. Your Rights

Under the General Data Protection Regulation (GDPR), you have the following rights:

  • Access - Request a copy of the personal data we hold about you.
  • Rectification - Request correction of inaccurate or incomplete data.
  • Erasure - Request deletion of your personal data.
  • Restriction - Request that we restrict processing of your data.
  • Portability - Receive your data in a structured, machine-readable format.
  • Objection - Object to processing based on legitimate interest.
  • Withdraw consent - Where processing is based on consent, withdraw it at any time.

To exercise any of these rights, contact us at hello@scalitt.com. We will respond within 30 days. If you are unsatisfied with our response, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.

13. Cookies

We use only essential cookies required for our platform to function:

  • Authentication cookies - To maintain your logged-in session.
  • Preference cookies - To remember your settings (e.g. selected views).

We do not use third-party tracking or advertising cookies.

14. Children's Privacy

Our platform is designed for business use and is not intended for individuals under the age of 16. We do not knowingly collect personal data from children.

15. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a notice on our platform. Your continued use of the platform after changes take effect constitutes acceptance of the updated policy.

16. Digital Assistant

Our website offers a Digital Assistant, an AI chatbot that answers questions about Scalitt. It is powered by a third-party large language model provider (Anthropic) that processes your messages to generate replies. Please do not share sensitive personal data in the chat.

  • We store the conversations (your messages and the assistant's replies) so our team can review them and improve the service.
  • If you ask to be contacted or the assistant hands your question to our team, the transcript and the email address you provide are sent to us by email so we can follow up.
  • You can request access to, or deletion of, your conversation data by emailing us (see Contact Us below).

17. Scalitt Chrome Extension

The Scalitt extension for Google Chrome records your Google Meet calls and sends them to your Scalitt workspace. This section describes what the extension collects and what happens to it. It applies in addition to the rest of this policy.

17.1 What the extension collects:

  • Meeting audio - When a recording runs, the extension records your microphone and the incoming audio of the other participants in the Google Meet call. Recording starts automatically when you join a call, unless you turn automatic recording off in the extension's settings. A visible banner on the meeting page shows whenever a recording runs. The extension asks for your consent before the first recording.
  • Meeting details - The meeting address and title, the start time and duration, and the names and email addresses of the participants, taken from the Google Meet page and, if you connected Google Calendar, from the calendar event.
  • Account and session data - Your email address and the session tokens that keep you signed in to Scalitt.
  • Settings and status - Your settings in the extension and the status of your last upload.

The extension reads no page other than Google Meet. From Google Meet it keeps only the address, title and time of the meetings you record.

17.2 How it is used:

The extension uses this data for one purpose: recording your sales calls and turning them into transcripts and coaching suggestions in your Scalitt workspace. Each recording and its meeting details are uploaded to Scalitt's API over an encrypted connection (HTTPS). Scalitt transcribes the recording and analyses the transcript to produce coaching suggestions. The suggestions are advisory.

17.3 Where it is stored:

  • In your browser - A recording is kept in the extension's own storage until its upload is confirmed. If you choose the local copy option, or if an upload fails permanently, a copy is saved to your Downloads folder. That copy stays until you delete it.
  • At Scalitt - Recordings are stored in Amazon S3 in the EU (eu-west-1, Ireland). Transcripts and meeting details are stored in Scalitt's database. They are kept while your account is active and can be deleted as described in section 11.

17.4 Who receives it:

We do not sell this data and do not use it for advertising. It is shared only with the processors that run the service, under data processing agreements (see section 8):

  • Railway - Hosts the Scalitt API that receives the upload, and the services and job queue that process it.
  • Amazon Web Services, EU region (Ireland) - File storage (Amazon S3), audio conversion (AWS Lambda) and speech-to-text (Amazon Transcribe).
  • Supabase - Database and authentication.
  • OpenAI and Anthropic - Analysis of the transcript for the coaching suggestions and the meeting summary.
  • OpenRouter - Routes these analysis requests to the AI providers.

OpenAI, Anthropic and OpenRouter may process data outside the European Union. Section 9 describes how these transfers are safeguarded.

17.5 Other participants:

A recording contains the voices, names and email addresses of the other participants in the call. You are responsible for telling them that the call is recorded, and for obtaining their consent where the law requires it. Participants can ask you or us to delete data that concerns them.

17.6 Limited Use:

The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.

Questions about the extension and your data: hello@scalitt.com.

18. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, contact us at:

Scalitt B.V.
Leidseveer 2, 3511 SB Utrecht, The Netherlands
Chamber of Commerce (KvK): 99879506
Email: hello@scalitt.com