Privacy Policy
ScaleDux Software Innovations Private Limited
Effect date: 03/08/2026 | Last Updated: 03/08/2026
This Privacy Policy tells you exactly what personal data ScaleDux collects, why it is collected, how it is used, who it is shared with, how long it is kept, and what rights you have over it.
This Policy is governed by the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000, the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and all other applicable Indian laws.
ScaleDux operates with a commitment to honest, transparent data practices. Every statement in this Policy describes something ScaleDux actually does.
1. About This Policy and the Applicable Legal Framework
ScaleDux Software Innovations Private Limited, bearing CIN U62013OD2025PTC049049 and having its registered office at Plot No. 241/3601, First Floor, Jaydev Vihar, Regional Research Laboratory, Khordha, Odisha, India, 751013, operates the ScaleDux websites, web applications, account dashboards, professional marketplace features, calculators and related digital services.
For personal data for which ScaleDux determines the purpose and means of processing, ScaleDux acts as the Data Fiduciary. Another User may independently determine how that User processes personal data received through an authorised Platform interaction. This Policy does not make ScaleDux responsible for every independent act of another User.
1.2 Purpose of This Privacy Policy
This Privacy Policy explains what personal data ScaleDux processes, where it comes from, why it is used, who may receive it, how visibility is controlled, how long records may be retained, the safeguards applied, and the controls available to individuals.
What this means for you
This document applies when you browse ScaleDux, use a live calculator, create or operate an Account, complete identity, tax or bank verification, create a professional profile, interact with another User, use a supported payment or payout workflow, submit a review, or contact ScaleDux.
1.3 Current Indian Legal Framework
ScaleDux processes personal data under the Indian laws and binding directions in force and applicable to the relevant activity. These may include the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 as amended, directions issued by the Indian Computer Emergency Response Team, applicable tax and accounting laws, and the provisions of the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 that have commenced.
The Digital Personal Data Protection framework has been brought into force in phases. ScaleDux will apply each statutory duty and right when it becomes effective and applicable. Before a provision becomes mandatory, ScaleDux may voluntarily provide a similar control as part of transparent Platform practice. Such a voluntary control is not an admission that a provision not yet in force already applies.
1.4 Privacy Notice, Acknowledgement and Consent
This Privacy Policy is a notice. It does not operate as blanket consent for every present or future use of personal data. Where consent or another affirmative authorisation is required, ScaleDux will request it at the relevant point and identify the data and purpose with reasonable clarity.
Your acknowledgement of this Privacy Policy confirms that the Policy has been made available to you. Such acknowledgement does not replace a separate DigiLocker authorisation, marketing choice, cookie or analytics choice where such choice is provided or required by Applicable Law, public-visibility instruction, public Project-publication confirmation, transaction instruction or other consent or authorisation where a separate action is required.
1.5 Relationship With Other ScaleDux Documents
This Privacy Policy should be read with the ScaleDux Terms of Service, Community Guidelines, applicable Role Terms, applicable Transaction Terms, the relevant Offer, Order, Booking or other Transaction Record, the Cookie Notice and any feature-specific privacy notice displayed by ScaleDux.
A user-to-user NDA may impose additional confidentiality duties between its signatories. It does not replace ScaleDux’s own obligations concerning personal data under Applicable Law.
1.6 Language and Accessibility
The controlling version is the English version. ScaleDux may provide translations, summaries and contextual explanations for convenience. Such material should be read consistently with the controlling English text.
2.1 Visitors and Free Resource Users
This Policy applies to a person who visits a public ScaleDux webpage, views an indexed profile landing page, views a public Project posting or public Project attachment, reads a public review, accesses a blog or Help Centre page, takes a product tour, uses a live calculator, or submits information through a public form.
Public Website Information may be delivered through a ScaleDux webpage, an unauthenticated application programming interface, a content-delivery service or another technical method used to provide the relevant public feature. Viewing public information does not permit the Visitor to submit a Proposal, send a message, enter a transaction or perform another action that requires an eligible Account.
The substantive inputs entered into the current live calculators are processed locally in the User’s browser and are not transmitted to or stored by the ScaleDux server. Ordinary website, cookie, security and analytics information may still be processed when the calculator page is used.
2.2 Registered Users and Role-Based Accounts
This Policy applies to Registered Users operating a role made available by ScaleDux, currently including Expert, Agency and Mentor-facing features. ScaleDux may introduce Founder, Investor or other role features in stages. A reference to a feature applies only when ScaleDux has made that feature available and the User uses it.
The current Account model may require separate Accounts for different roles. ScaleDux may associate Accounts as Related Accounts where reasonably necessary for identity, security, fraud prevention, payment, tax, dispute or enforcement purposes.
2.3 Representatives, Team Members and Other Individuals
This Policy also applies to authorised representatives, Agency personnel, team members, prospective Users, support contacts, persons identified in User Content and any other individual whose personal data is processed in connection with ScaleDux.
Role-based Accounts and user-to-user transactions are intended only for individuals who have completed eighteen years of age and are legally competent to contract. ScaleDux does not knowingly permit a person under eighteen to create or operate such an Account.
A third-party website, identity source, payment interface, meeting service, social network or other independent service may process personal data under its own privacy notice and terms. ScaleDux remains responsible for obligations that Applicable Law places on ScaleDux concerning the selection and use of processors and operational providers.
3. Definitions and Interpretation
3.1 Terms Defined in the Terms of Service
Capitalised terms used but not separately defined in this Privacy Policy have the meanings given to them in the current ScaleDux Terms of Service.
This includes Account, Agency, Applicable Law, Authorised Representative, Expert, Founder, Free Resource, Investor, Mentor, Payment Provider, Platform, Platform Information, Project, Public Project Posting, Public Website Information, Registered User, Related Account, Resource User, Restricted Platform Information, Services, Third-Party Service, Transaction Record, Transaction Terms, User, User Content, Verification, Verified Status and Visitor.
The Terms of Service is the controlling source for common Platform definitions. This Privacy Policy does not modify the meaning of a common defined term unless a different meaning is expressly stated to apply only to a specified privacy or Personal Data matter.
Defined Term | Meaning |
Data Fiduciary | means any person who, alone or together with another person, determines the purpose and means of Processing Personal Data. |
Data Principal | means the individual to whom the Personal Data relates and, where the individual is a child or a person with disability, includes the parent or lawful guardian acting on that individual’s behalf as provided by Applicable Law. |
Data Processor | means any person who Processes Personal Data on behalf of a Data Fiduciary. |
Logged-In Marketplace Information | means information made available only after authentication and subject to the applicable role, Account status, Verified Status, feature eligibility, relationship and permission requirements. |
Personal Data | means any data about an individual who is identifiable by or in relation to that data. |
Personal Data Breach | means any unauthorised Processing of Personal Data, or accidental disclosure, acquisition, sharing, use, alteration, destruction or loss of access to Personal Data, that compromises the confidentiality, integrity or availability of Personal Data. |
Processing | in relation to Personal Data, means a wholly or partly automated operation or set of operations performed on digital Personal Data, including collection, recording, organisation, structuring, storage, adaptation, retrieval, use, alignment or combination, indexing, sharing, disclosure by transmission, dissemination or otherwise making available, restriction, erasure or destruction. |
Transaction Data | means Personal Data relating to a Project, mentorship engagement, payment, payout, invoice or another transaction supported through the Platform. |
Verification Data | means Personal Data, reference identifiers, results, timestamps, match outcomes, failure reasons, attempt records and related information Processed in connection with an identity, business, tax, bank-account, authority or other Verification. |
The rules of interpretation stated in clause 2.6 of the Terms of Service apply to this Privacy Policy, subject to the context and the nature of this Privacy Policy as a privacy notice.
Where a privacy-specific term is defined by Applicable Law, the applicable statutory meaning shall prevail to the extent of any inconsistency.
Where applicable Role Terms, Transaction Terms or a Transaction Record define a term for a specific feature or transaction, that definition applies only to that feature or transaction. A specialised definition shall not be applied to an unrelated feature or activity.
Headings are provided for convenience and do not limit the meaning of any provision. A reference to a law includes its amendments, replacements, subordinate legislation and binding directions applicable to the relevant matter.
Words in the singular include the plural and words in the plural include the singular where the context permits. Words such as “including”, “includes”, “for example” and “such as” introduce non-exhaustive examples and do not limit the meaning of the preceding words.
4. ScaleDux’s Role and the Responsibilities of Other Users
4.1 ScaleDux as Data Fiduciary
ScaleDux acts as the Data Fiduciary where it determines why and how personal data is processed for Account administration, Platform operation, verification orchestration, profile and marketplace features, security, analytics, payment and payout onboarding, support, legal compliance and the other purposes stated in this Policy.
4.2 Other Users as Independent Recipients
When another User receives personal data through an authorised profile, Project, mentorship, message, meeting or transaction, that User may process the information independently outside ScaleDux’s direct control. The receiving User must use it only for the authorised purpose, protect it appropriately, comply with Applicable Law and observe the ScaleDux Terms of Service, Community Guidelines, applicable Transaction Terms and any additional NDA.
Visibility through ScaleDux does not authorise scraping, republication, sale, database enrichment, model training, unrelated solicitation, profiling or other exploitation of another person’s information.
4.3 Personal Data About Another Person
A User who uploads or submits personal data about another individual represents that the User has a lawful purpose and appropriate authority to provide it. The User is responsible for providing any notice or obtaining any consent required from that individual.
The data collected depends on how a person uses ScaleDux, the role associated with the Account, the feature selected and the choices made. ScaleDux does not intentionally collect more personal data than reasonably necessary for the stated purpose.
5.1 Visitor, Calculator and Public-Form Data
IP address, browser type, device type, operating system, language, approximate network-derived location, referring page, pages viewed and timestamps.
Cookie, local-storage, session, security and analytics identifiers where the relevant technologies are used.
Clicks, scrolls, navigation paths, page performance and other website interactions processed through Google Analytics and Microsoft Clarity.
Name, email address, mobile number, company information or message submitted through a public contact, waitlist, newsletter or support form.
Calculator-use events and ordinary analytics information. The substantive numbers and assumptions entered into the current calculators remain in the browser and are not sent to ScaleDux.
5.2 Registration, Account and Authentication Data
Full legal name or Account name, email address, mobile number and communication-verification status.
Primary role, profile status, entity name, representative capacity and authority information where applicable.
Password hash, authentication tokens, OTP event records, recovery information and login state.
Account-creation, login, logout, device, session, IP address, restriction, deactivation, reactivation, deletion and closure records.
Related Account indicators used to identify duplicate Accounts, common control, self-dealing, evasion, impersonation or security risk.
5.3 Identity and DigiLocker Verification Data
ScaleDux currently uses IDTO and integrated sources to support identity, business, tax and bank verification. Where a User selects a DigiLocker-based verification journey, the provider may return a verification result and permitted identity fields required for the implemented workflow.
Depending on the live provider response and verification type, ScaleDux may process and retain a masked Aadhaar-linked identifier, verified name, date of birth, gender, address information, a verification photograph where returned and required for the verification record, verification status, provider reference, timestamp, match outcome, failure information and other fields required to preserve the verification record. ScaleDux does not intentionally retain Aadhaar biometric information. ScaleDux does not display a complete Aadhaar number to ordinary Users.
Selected verification fields are protected through access controls and encryption at rest. ScaleDux does not intentionally write complete Aadhaar, PAN, GSTIN or bank-account information to ordinary application logs.
5.4 PAN, GSTIN and Entity Verification Data
ScaleDux may collect PAN, GSTIN, legal name, billing address, tax status, entity type, CIN, LLPIN, registered-office details and authorised-representative information. PAN and GSTIN may be submitted for verification through IDTO or another integrated source, and entity information may be checked against appropriate public or government records.
ScaleDux separately retains the tax information required for invoicing, tax deduction or collection, certificates, reconciliation, audit and statutory reporting. Tax information may remain subject to legal retention after Account closure or withdrawal from an unrelated optional feature.
5.5 Bank Account and Linked Account Data
For bank verification, payout onboarding and Razorpay Route administration, ScaleDux, IDTO and Razorpay may process the bank-account holder name, complete bank-account number, masked account number, IFSC, account type, bank name, verification result, provider reference, Razorpay Linked Account identifier, transfer information and payout status, to the extent required by the implemented workflow.
Selected bank and payout fields are encrypted at rest and are not visible to ordinary marketplace Users. ScaleDux may preserve a limited change and verification history to reduce payout-redirection risk, investigate fraud and reconcile payment records.
Professional title, biography, skills, experience, employment and project history, education, claimed qualifications and certifications.
Portfolio, work samples, case studies, languages, rates, availability, service categories and contact preferences.
Agency legal information, authorised representative details, team information, assigned personnel and service capability.
Profile views, saves, invitations, proposals, proposal changes, shortlists, offers, NDAs, delivery records, handover, invoices, payout information, reviews and disputes where the relevant feature is available.
Professional background, sector experience, claimed qualifications, memberships, biography, areas of guidance and languages.
Availability, pricing, mentorship offering information, scheduling windows, booking and rescheduling information where the feature is available.
Communications, attendance, materials, outputs, review and payout information connected with a mentorship interaction.
5.8 Marketplace, Profile and Project Data
ScaleDux processes information required to provide profile discovery and, when available, public Project discovery and restricted Project-transaction workflows. This may include profile details, Project descriptions, invitations, Proposals, Offers, NDAs, scope, price, Milestones, Deliverables, Acceptance Criteria, dates, Dependencies, messages, files, Submissions, revisions, approvals, reviews, Handover and closure records.
A Public Project Posting may include selected Project information and any image, document or other attachment that the Founder uploads to a field identified or presented as part of the public Project posting. Public Project Postings may be accessed without login through ScaleDux webpages, unauthenticated application programming interfaces or content-delivery links. They may also be viewed, downloaded, copied, cached, indexed or shared by persons outside ScaleDux.
Proposals, Offers, NDAs, private messages, Project workspace files, Deliverables, revisions, invoices, payment information, support records and dispute evidence are not part of the Public Project Posting merely because they relate to the same Project. Those records remain subject to the applicable Account, role, transaction and access controls.
A User must not place trade secrets, credentials, raw customer information, sensitive personal data, confidential source material, restricted documents or information subject to an NDA in a Public Project Posting. The User should disclose only the information reasonably necessary to describe the opportunity and must have the authority to make that information public.
5.9 Payment, Transfer, Settlement, Tax and Invoice Data
Payment amount, currency, payment-method category, provider transaction identifier, order identifier, timestamp, status and failure reason where a paid feature is available.
ScaleDux Charges, user-to-user service amount, commissions, taxes, deductions, credits, coupons and approved costs.
Razorpay Route transfer, Linked Account, settlement-hold, release, settlement and transfer-failure information where implemented.
PAN, GSTIN, legal name, billing address, place of supply, invoice, tax certificate and tax-reporting information.
Bank and payout information described in Section 5.5.
ScaleDux does not receive or store complete payment-card numbers, card verification values, UPI PINs or net-banking passwords. Razorpay may provide masked instrument details, payment-method categories, risk information and transaction status required for payment administration.
5.10 Communications, Reviews, Support and Dispute Data
Messages, attachments, meeting requests, scheduling records, notices, reminders and communications exchanged through authorised Platform workflows.
Support emails, call notes, troubleshooting information, complaint and grievance records.
Public reviews, star ratings, responses, moderation records and non-public feedback.
Dispute, quality, confidentiality, intellectual-property, delivery, security or account submissions, evidence, decisions and appeals.
Audit records showing the User, role, version and timestamp associated with a material action.
5.11 Technical, Security and Analytics Data
IP address, device, browser, operating system, application version, time zone, language, referral source, session and login information.
Pages, screens, searches, filters, clicks, downloads, uploads, views, saves and interaction events.
Authentication, access-control, rate-limit, security-alert, error, performance and diagnostic logs.
Google Analytics identifiers and event data used to understand website and feature use.
Microsoft Clarity interaction data from public and designated non-sensitive pages, used for heatmaps and session replay and potentially including mouse movement, clicks, scrolls, navigation and rendered page elements.
ScaleDux configures Microsoft Clarity not to record designated sensitive pages, including Account-authentication, identity-verification, DigiLocker, tax, PAN, GSTIN, bank, payout, payment, private-message, NDA, private Project-workspace, support, grievance and dispute pages.
ScaleDux does not intentionally send passwords, OTPs, complete bank-account details, PAN, GSTIN, Aadhaar-linked identity information, private-message content, confidential transaction documents or similar directly identifying information to Google Analytics or Microsoft Clarity. Page URLs, page titles, search parameters, custom events and analytics fields should not contain such information.
Where ScaleDux identifies unintended analytics capture, it may delete or restrict the affected record where reasonably possible, change the relevant configuration, disable the tool on the affected page and take other appropriate corrective action.
5.12 Marketing and Preference Data
Marketing consent, subscription status, channel preference and unsubscribe record.
Product-update, event, survey and promotional preferences.
Email, SMS, WhatsApp and in-app notification preferences where the channel is used.
Campaign delivery, open, click and interaction information supplied by the relevant provider.
5.13 Data We Do Not Intentionally Collect or Use
ScaleDux does not intentionally collect Aadhaar biometrics, full card numbers, card verification values, UPI PINs, net-banking passwords, or personal data relating to a person under eighteen for Account or transaction use.
ScaleDux does not represent that it is a reporting entity under the Prevention of Money-Laundering Act, 2002, files Suspicious Transaction Reports on its own behalf or performs statutory PEP screening on its own behalf. ScaleDux and regulated providers may perform identity, fraud, sanctions, payment-security or risk checks appropriate to their respective roles and Applicable Law.
ScaleDux does not sell personal data and does not disclose personal data to third parties for their independent targeted advertising. Meta Pixel, LinkedIn Insight Tag, advertising retargeting and mobile analytics SDKs are not part of the current stated launch configuration.
6. How We Obtain Personal Data
Source | Examples |
Directly from you | Account forms, profiles, verification instructions, tax and bank forms, messages, uploads, support requests, reviews and transaction workflows. |
Automatically from use | Technical, session, cookie, analytics, security, performance, device, IP, interaction and audit information. |
From another User | Invitations, messages, team additions, reviews, disputes, references, documents and other User Content that identifies or relates to you. |
From IDTO and integrated sources | Identity, PAN, GSTIN, entity and bank-verification results, reference identifiers, timestamps, match results, returned fields and failure information. |
From DigiLocker | Identity information and permitted verification fields through the IDTO-integrated flow when you authorise that journey. |
From Razorpay and banking systems | Linked Account, payment, transfer, settlement, payout, method, masked instrument and status information. |
From Google Analytics and Microsoft Clarity | Website, device, event, interaction, heatmap and session-replay information. |
From public or government records | Company, tax-registration, professional or other information lawfully available through public registers or integrated sources. |
From advisers and authorities | Information received in connection with a lawful request, complaint, dispute, claim, investigation, audit or compliance review. |
7. Why We Process Personal Data
ScaleDux processes personal data for a specified and lawful purpose. References in this section are intended to explain ScaleDux’s purposes under Indian law and do not import foreign legal categories where they do not apply.
Where a relevant Digital Personal Data Protection provision is in force and applicable, ScaleDux will rely on consent or another use permitted by Applicable Law. Before that provision becomes operative, ScaleDux processes data under the legal framework then in force, the User’s request, the applicable contract and the safeguards described in this Policy.
7.1 Providing the Requested Platform and Transactions
ScaleDux processes Account, profile, verification, communication, marketplace, payment and payout information to create and secure Accounts, provide the selected role, facilitate authorised interactions, administer supported transactions, process payout onboarding, provide calculators, deliver notices and support, and maintain records of those activities.
ScaleDux obtains separate consent, authorisation or another affirmative choice where Applicable Law requires it or where the relevant Platform feature is designed to depend on that choice. This may include DigiLocker document sharing, marketing communications, cookies or analytics where prior consent is required, and a future feature introducing a materially different processing purpose.
Publication of a Public Project Posting is based on the Founder’s submission through a workflow that identifies the information as public. Acknowledgement of this Privacy Policy alone is not treated as an instruction to publish Project information or attachments.
Withdrawal operates prospectively and does not require deletion of information that must be retained to complete an existing transaction, comply with law, protect security, prevent fraud, administer a dispute or establish, exercise or defend a legal claim.
7.3 Legal, Tax and Regulatory Compliance
ScaleDux processes personal data to issue invoices, administer tax deduction or collection, maintain accounting and corporate records, respond to lawful orders, preserve required records, comply with intermediary and cyber-security obligations and meet another legal requirement applicable to ScaleDux.
7.4 Security, Fraud Prevention and Legal Rights
ScaleDux processes Account, device, network, verification, bank, payment, profile, transaction and communication information to authenticate Users, identify Related Accounts, prevent impersonation, self-dealing, fraud, abuse, malware, unauthorised access, payout redirection and circumvention, investigate incidents, enforce Platform rules and protect legal rights.
7.5 Analytics and Product Improvement
ScaleDux uses usage, performance, support and interaction information to understand feature performance, identify defects, improve usability, allocate resources and develop new features. Where reasonably practicable, ScaleDux uses aggregated, de-identified or anonymised information when personal data is no longer required for the analysis.
7.6 Automated Tools and Human Review
ScaleDux may use automated tools to assist with matching, ranking, recommendations, security, fraud detection, verification routing, moderation and workflow administration. Such tools do not guarantee suitability, quality, legality, creditworthiness, investment merit or a commercial outcome. ScaleDux does not intend to make a decision producing a legal or similarly significant effect solely through automated processing without a review mechanism where Applicable Law requires one.
Activity | Personal data | Purpose |
Account and authentication | Name, email, mobile, credential, device and login records | Create, operate and secure the Account. |
Professional profile | Skills, experience, biography, portfolio, rates, availability and preferences | Provide profile discovery and role functionality. |
Identity and business verification | Verification instruction, returned fields, result, reference, match and attempt data | Confirm identity or entity, prevent fraud and control feature eligibility. |
Tax and invoicing | PAN, GSTIN, legal name, address, transaction and invoice records | Tax administration, invoicing, certificates, reconciliation and audit. |
Bank and payout onboarding | Bank, IDTO, Razorpay, Linked Account, transfer and settlement data | Verify bank information, administer payouts and reconcile records. |
Mentorship and transactions | Offering, communication, schedule, payment and review data | Administer the requested relationship where available. |
Support and grievances | Request, message, evidence, response and appeal data | Resolve requests and protect rights. |
Security and integrity | IP, device, session, network, behavioural and risk data | Prevent abuse and investigate incidents. |
Analytics | Google Analytics and Microsoft Clarity event and interaction data | Understand usage, diagnose issues and improve the Platform. |
Marketing | Contact, consent, preference and campaign interaction | Send optional marketing and preserve opt-out evidence. |
8. Profile, Marketplace, Project and Review Visibility
8.1 Public Website Information
Public Website Information may include general company pages, marketing pages, blogs, Help Centre material, calculators, limited signed-out profile landing pages, Public Project Postings, public Project attachments, public reviews and ratings, and other information intentionally made available by ScaleDux without login.
Public Website Information may be made available through webpages, application programming interfaces, content-delivery services and other technical systems used to provide the public feature. Public availability does not authorise scraping, bulk extraction, unrelated commercial use or another use prohibited by the Terms of Service.
8.2 Signed-Out Profile Landing Pages and Search Engines
A signed-out visitor may reach a profile landing page and see limited information such as a masked name, profile picture, cover image and a prompt to log in. Search engines may index this limited landing page. The complete professional profile is intended to require login and the relevant marketplace eligibility.
For example, the signed-out page may show the first name and an initial or another masked form instead of the complete legal name. ScaleDux may change the masking method as long as the signed-out information remains limited and the change is reflected in the Platform design.
8.3 Logged-In Marketplace Information
An eligible logged-in User may view additional profile information according to the User’s role, verification status, subscription or plan, relationship and the feature design. Logged-in visibility does not authorise extraction, republication, onward sharing or use for an unrelated purpose.
ScaleDux does not presently provide a complete public or private profile-control panel to every User. ScaleDux may introduce granular visibility controls later and will update the relevant notice before a materially different public-visibility model is implemented.
8.4 Public Project Postings and Public Project Attachments
Where the public Project-discovery feature is available, selected Project details may be viewed without login. A Visitor may view the Public Project Posting but must create or use an eligible Account to submit a Proposal, send a message, save the Project where login is required, or take another Project-related action.
An image, document or other attachment uploaded to the public attachment area of a Public Project Posting is Public Website Information. It may be accessible through the public Project page or a content-delivery link and may be viewed or downloaded by any person who accesses the page or obtains the link.
Public Project Postings and public attachments are not confidential merely because they are hosted by ScaleDux or relate to a Project. Selecting an NDA requirement for a later Project stage does not make information already published through the public posting confidential.
The Founder must not upload trade secrets, credentials, raw customer data, sensitive personal data, confidential source material, unreleased intellectual property or another restricted document to the public Project-posting area. Such information should be shared only after the appropriate NDA and through the restricted transaction workflow.
ScaleDux may remove, restrict or disable public content in accordance with the Terms of Service and Community Guidelines. Removal from ScaleDux does not guarantee removal of copies previously downloaded, cached, indexed or independently retained by another person.
8.5 Contact Details and Transaction Information
Complete email addresses, mobile numbers, bank information, PAN, GSTIN, complete verification records and private transaction information are not intended to be included in Public Website Information or returned through unauthenticated Platform interfaces.
Contact information may be released at the permitted stage of an authorised interaction or where the User has intentionally chosen to share it. ScaleDux may display limited or masked identity information before that stage.
Public reviews and star ratings may be visible on a profile without login. A person must be logged in and eligible under the implemented workflow to submit, respond to or otherwise act upon a review. Non-public feedback is visible only to the reviewed User, ScaleDux and persons requiring access for moderation, support, safety or dispute administration.
Information | Who may access | Control |
Marketing site and Help Centre | Any internet user | Information intentionally published by ScaleDux. |
Calculator page | Any internet user | Substantive calculator inputs remain within the User’s browser and are not transmitted to ScaleDux under the current calculator design. |
Signed-out profile landing page | Any internet user and search engines | Limited information only, including the masked name, profile picture, cover image and login prompt. |
Complete professional profile | Eligible logged-in Users | Access is subject to authentication, role, Account status, feature eligibility and applicable Platform permissions. |
Public Project Posting | Any internet user, including a signed-out Visitor, and search engines where applicable | Only Project information intentionally included in the Public Project Posting is public. Project-related actions require an eligible Account. |
Public Project attachment | Any internet user who accesses the Public Project Posting or obtains the public attachment link | The attachment is public and may be viewed, downloaded, copied, cached, indexed or shared. The uploader must not include confidential, sensitive, restricted or NDA-protected information. |
Private Project and transaction records | Authorised Project participants and ScaleDux personnel or providers who require access | Proposals, Offers, NDAs, private messages, Project workspace files, Deliverables, revisions, invoices, payment records, support records and dispute records remain restricted. |
Public review and rating | Any internet user where public review visibility is enabled | Submission, response and other review actions require an eligible Account. |
Non-Public Feedback | The reviewed User and ScaleDux personnel who require access | Not displayed publicly and may be used for moderation, trust, safety, support and service improvement. |
PAN, GSTIN, bank, payout and Verification Data | ScaleDux, relevant verification or payment providers, professional advisers and authorities where required | Not visible to ordinary marketplace Users or returned through unauthenticated Platform interfaces. |
ScaleDux shares personal data only to the extent reasonably necessary for the purpose described in this Policy, the User’s request or Applicable Law.
9.1 Public Visitors and Other Platform Users
ScaleDux may make Public Website Information available to any internet user, including limited signed-out profile information, Public Project Postings, public Project attachments and public reviews.
ScaleDux makes non-public personal data available to another User only where the information is visible under the applicable logged-in profile, message, mentorship, Project or transaction workflow. A receiving User must comply with Section 4.2 and the applicable Terms of Service, Community Guidelines, Transaction Terms and NDA.
Public availability does not permit unlawful collection, scraping, profiling, republication, harassment, unsolicited contact or another use prohibited by the applicable Platform documents or Applicable Law.
9.2 IDTO, DigiLocker and Verification Sources
ScaleDux provides IDTO and the relevant integrated source with the information and instruction required for the selected verification. The provider and DigiLocker may process information under their own legal framework and service conditions. ScaleDux receives and retains the fields required for the implemented verification and audit record.
9.3 Razorpay and Payment Infrastructure
ScaleDux uses Razorpay and may use Razorpay Route for Linked Account onboarding, transfer, settlement-hold, release, settlement and related administration. ScaleDux provides the identity, tax, bank, transaction and contact information required for provider onboarding, payment security and the supported workflow. Razorpay processes information under the legal and regulatory requirements applicable to it.
9.4 Hosting, Storage, Network and Communication Providers
ScaleDux uses providers for application hosting, databases, file storage and content delivery, network security, email, SMS, meetings, scheduling and other operations. Current providers may include Hostinger, Bunny.net, Cloudflare, MSG91, an email-delivery provider, Google, LinkedIn, Zoom and Microsoft, depending on the feature used.
A provider receives only the information reasonably required for the relevant service and is expected to process it under appropriate confidentiality, security and use restrictions. ScaleDux may change a provider as the Platform evolves, subject to Applicable Law and this Policy.
9.5 Google Analytics and Microsoft Clarity
ScaleDux uses Google Analytics for event-based website and product analytics and Microsoft Clarity for behavioural analytics, heatmaps and session replay on public and designated non-sensitive pages.
These providers may process device, browser, IP-derived, cookie, page, event and interaction information under their respective terms and privacy notices. Under the current technical implementation, the relevant analytics tags may load when a page loads and before the Visitor makes a cookie choice.
Microsoft Clarity is configured not to record designated sensitive pages, including authentication, identity-verification, tax, bank, payout, payment, private-message, NDA, private Project-workspace, support, grievance and dispute pages.
ScaleDux does not use Google Analytics or Microsoft Clarity for third-party advertising or retargeting under the current launch configuration.
9.6 Professional Advisers, Authorities and Legal Processes
ScaleDux may disclose relevant personal data to lawyers, auditors, accountants, company secretaries, insurers, investigators, arbitrators, mediators, courts, tax authorities, regulators, law-enforcement agencies and government bodies where reasonably necessary for advice, audit, legal compliance, a lawful request, protection of rights or dispute resolution.
ScaleDux will review a request where reasonably practicable and limit disclosure to information required or reasonably relevant. Notice may be withheld where prohibited, where it would prejudice an investigation or where it is not reasonably practicable.
Personal data may be disclosed under confidentiality to a prospective investor, lender, acquirer, successor or adviser in connection with financing, restructuring, merger, acquisition, asset sale, insolvency or another corporate transaction. A completed successor must handle transferred personal data under Applicable Law and the commitments applicable to the transferred business.
10. International Processing and Data Location
ScaleDux’s current application and database infrastructure is hosted in India. Certain file-storage and content-delivery services may process or store files from infrastructure located in Singapore. IDTO, Razorpay, Google Analytics, Microsoft Clarity and other providers may process information in India or in another jurisdiction in which their infrastructure or authorised sub-processors operate.
ScaleDux does not represent that every category of personal data is stored exclusively in India. Processing outside India is subject to Applicable Law, provider safeguards, contract terms and any restriction imposed by the Central Government or a sectoral regulator.
Payment providers may be subject to payment-data localisation and regulatory requirements applicable to their own processing. A User who accesses ScaleDux from outside India remains responsible for laws applicable to that User’s own disclosure and use of the Platform.
11. Retention, Deletion, Backups and Legal Holds
ScaleDux retains personal data only for as long as reasonably necessary for the purpose for which it was processed, for the duration of the Account or transaction, or for a longer period required for tax, accounting, intermediary, cyber-security, fraud, audit, dispute, legal-claim, court-order, provider or regulatory purposes.
Account closure does not require immediate deletion of every record. ScaleDux may retain a restricted record needed to complete a payment or payout, issue a tax document, investigate misuse, respond to a grievance, protect another User’s transaction record, preserve evidence, enforce an agreement or comply with law.
Data category | Retention position |
Account and registration information | During the Account and, where the IT Rules apply, for at least 180 days after cancellation or withdrawal of registration, with longer retention where another lawful reason applies. |
Security and ICT logs | For a rolling period meeting the CERT-In directions for logs to which those directions apply, including the applicable rolling period within India, and longer where required for an incident or legal hold. |
Identity and verification records | For the period reasonably necessary for Account integrity, eligibility, fraud prevention, provider requirements, disputes, audit and Applicable Law. |
PAN, GSTIN, invoices and tax records | For the applicable statutory tax, assessment, audit and record-retention period, including extensions for proceedings. |
Bank, Linked Account and payout information | While required for the payout relationship and afterwards for reconciliation, tax, fraud, audit, legal claims, provider requirements and Applicable Law. |
Payment, transfer and settlement records | For payment-provider reconciliation, tax, accounting, audit, disputes, legal claims and statutory records. |
Profile and marketplace records | While the Account or profile remains active and afterwards as needed for deletion cycles, integrity, reviews, disputes, legal claims and Applicable Law. |
Messages, support and complaint records | For the operational relationship and afterwards under the moderation, security, dispute and legal-retention schedule. |
Public reviews and non-public feedback | For as long as relevant to the Platform, subject to moderation, Account closure, dispute, integrity and legal requirements. |
Google Analytics and Microsoft Clarity data | According to ScaleDux’s configured settings and the provider’s applicable retention and deletion controls. |
Marketing consent and opt-out records | Until withdrawal and afterwards for a reasonable period to evidence the preference and prevent renewed marketing. |
Calculator inputs | Substantive calculator inputs are not transmitted to or retained by ScaleDux under the current browser-only design. |
Data subject to a litigation hold, regulatory request, security investigation, tax proceeding, payment dispute or reasonably anticipated legal claim may be preserved beyond the ordinary period.
When the relevant purpose and retention requirement end, ScaleDux will delete, securely dispose of or irreversibly anonymise the information, subject to technical limitations and routine backup cycles. Data may remain in restricted backups until the backup is overwritten or expires. Backup copies are not intended for ordinary use and should be restored only for continuity, security or another authorised purpose.
12. Security Practices and User Responsibilities
ScaleDux applies reasonable technical and organisational safeguards appropriate to the nature of the information, the current scale of processing, the risks involved and the company’s stage of development. These safeguards are intended to protect confidentiality, integrity, availability, access control and accountability.
Role-based and need-based access controls for personnel and operational providers.
Authentication, session and Account-recovery controls appropriate to the feature.
Secure transmission controls, including HTTPS and transport protections for the implemented web architecture.
Encryption at rest for selected identity, tax and bank fields and restricted access to verification and payout information.
Logging and monitoring appropriate to the current Platform, with continued work towards the retention and incident requirements applicable to ScaleDux.
VPS backup capability and operational recovery measures appropriate to the current infrastructure.
Provider, confidentiality and access restrictions proportionate to the service and information involved.
Investigation and remediation steps when a security weakness or incident is identified.
ScaleDux does not claim that its systems are impenetrable, that every incident will be prevented or that no data loss can occur. ScaleDux will not describe a certification, administrator-MFA control, penetration-testing programme, disaster-recovery capability, restore time or other specific control as implemented unless it has been verified.
Users must protect passwords, OTPs, devices, authentication methods, recovery information, API keys, credentials and access links. A User should not share access with an unauthorised person and should promptly report suspected compromise to [email protected].
13. Personal Data Breaches and Cyber Security Incidents
ScaleDux maintains and continues to develop an incident-response process intended to identify, contain, investigate, remediate, document and learn from suspected or confirmed security events.
Where an incident falls within a category reportable to the Indian Computer Emergency Response Team, ScaleDux will report it within the legally applicable period and provide the information or assistance required by CERT-In. ScaleDux will maintain or designate an appropriate Point of Contact and preserve relevant ICT logs and evidence as required by the applicable directions.
ScaleDux will notify affected individuals and the Data Protection Board of India where and when the relevant personal-data-breach obligations under the Digital Personal Data Protection framework are in force and applicable. Before that commencement, ScaleDux may provide notice where required by another law or where notice is reasonably appropriate to help affected individuals protect their interests.
A notice may be issued in stages as facts become known and may describe the incident, affected data, likely consequences, measures taken, recommended actions and the contact channel for further information.
Where an incident originates at a provider, ScaleDux will coordinate with the provider and comply with ScaleDux’s own legal obligations. ScaleDux does not disclaim a responsibility imposed on it merely because a processor or another provider experienced the incident.
14. Privacy Controls and Rights
ScaleDux voluntarily provides the controls described in this section as part of transparent Platform practice. Where a statutory right under the Digital Personal Data Protection Act, 2023 or another law has commenced and applies, the statutory right will operate according to Applicable Law.
You may request a summary of personal data ScaleDux processes about you, the relevant processing activities and the categories of persons to whom the information has been disclosed, subject to identity verification, the rights of another person, legal privilege, security, fraud prevention and another lawful restriction.
You may request correction of inaccurate or misleading information, completion of incomplete information and updating of information that has changed. Verified, tax, payment, review, transaction and audit records may require preservation of the earlier value and the reason for change rather than silent overwrite.
You may request deletion of personal data that is no longer required. ScaleDux may refuse or limit deletion where retention is required for tax, payment, accounting, cyber-security, intermediary, fraud, dispute, legal-claim, court-order, provider or other lawful purposes.
Deletion from ScaleDux does not automatically delete information that another User lawfully received during an interaction. That User remains subject to the confidentiality, purpose, return, deletion and retention duties applicable to the recipient.
14.4 Withdrawal of Consent and Marketing Opt-Out
Where ScaleDux relies on consent for an optional activity, you may withdraw it through the method displayed for the feature or by contacting ScaleDux. Withdrawal applies prospectively. Security, payment, tax, transaction, support, policy and legal communications may continue where necessary.
14.5 Nomination and Future Statutory Rights
The statutory nomination and Data Protection Board complaint processes will be made available when the relevant provisions are in force and the required operational process applies. ScaleDux will update the request channel and this Policy where necessary.
ScaleDux may verify the identity, authority, Account, contact information and scope of a privacy request before acting. ScaleDux may request additional information where necessary to prevent unauthorised disclosure or deletion.
ScaleDux may decline a request that cannot be verified, is abusive or repetitive, would disclose another person’s information, conflicts with law, compromises security or fraud prevention, or seeks deletion of a record that must be retained. ScaleDux will explain the reason to the extent lawful and reasonably practicable.
Control | How to exercise | Current response position |
Access summary | Email [email protected] with the subject “Privacy Request”. | Target response within 30 days after verification, unless a shorter period applies or additional time is reasonably required. |
Correction or update | Account settings or a verified privacy request. | Processed after verification and preservation of required history. |
Account deactivation | Use the available deactivation control. | Reversible during the period displayed by the Platform. |
Account deletion | Use the deletion control or submit a privacy request. | Subject to transaction completion, legal retention, backups and technical deletion cycles. |
Marketing opt-out | Unsubscribe, STOP, preferences or support. | Applied prospectively. Required service communications continue. |
Privacy grievance | Email the Grievance Officer at [email protected]. | Acknowledged and handled under the applicable grievance timeline. |
15. Account Deactivation and Account Deletion
Account deactivation and Account deletion are different actions.
Deactivation temporarily disables access. The User may reactivate the Account during the period displayed by the Platform. The exact period may change according to the current product rule and is not fixed by this Policy. If the Account is not reactivated within the displayed period, ScaleDux may proceed with deletion after any required notice and subject to retention obligations.
A deletion request is intended to remove the User’s Account and personal data that ScaleDux no longer needs. ScaleDux may retain limited or restricted records required for tax, payment, payout, accounting, security, fraud prevention, reviews, disputes, contractual claims, audit, legal holds or Applicable Law.
Deletion may take time across active systems, provider systems, file storage and backups. ScaleDux will apply deletion or restriction through the implemented process and routine technical cycles. A provider may retain information independently where required under its own legal or regulatory obligations.
Reactivation, restoration or a fresh Account after deletion may require new verification and may not restore previous profile, review, payment or transaction history except where ScaleDux is legally required or operationally able to preserve and reconnect a restricted record.
16. Cookies, Google Analytics and Microsoft Clarity
ScaleDux uses cookies, local storage and similar technologies for authentication, Account security, session continuity, fraud prevention, preferences, website analytics and user-experience analysis.
Strictly necessary technologies support login, security and essential Platform operation. Google Analytics and Microsoft Clarity are non-essential analytics tools used to understand website use, feature adoption, performance and usability.
16.2 Current Page-Load Behaviour
Under the current implementation, Google Analytics and Microsoft Clarity may load and begin processing technical and interaction information when a relevant page loads and before the Visitor makes a cookie choice.
This disclosure does not replace consent where Applicable Law or an applicable provider requirement requires prior consent. Where prior consent or a valid consent signal is required, ScaleDux will configure the relevant tool to delay non-essential cookies or equivalent identifiers, limit processing, or remain disabled until the required choice is received.
Google Analytics may process page views, events, device and browser information, IP-derived information, cookie identifiers, page titles, page addresses and feature-interaction information.
ScaleDux does not intentionally send names, email addresses, mobile numbers, complete bank information, PAN, GSTIN, Aadhaar-linked information, passwords, OTPs, message content, attachment content or similar directly identifying information to Google Analytics.
ScaleDux will use appropriate configuration and data-redaction controls to reduce the risk that personal information is transmitted through URLs, query parameters, page titles, search terms, custom dimensions or event fields.
Microsoft Clarity provides heatmaps, interaction analysis and session replay on public and designated non-sensitive pages. It may process page interactions, mouse movement, clicks, scrolling, navigation, device and browser information, cookie identifiers and rendered page elements.
ScaleDux configures Microsoft Clarity not to record designated sensitive pages, including:
Account login, authentication, OTP and recovery pages;
identity-verification and DigiLocker pages;
PAN, GSTIN and tax pages;
bank, payout and payment pages;
private-message pages;
NDA and private Project-workspace pages;
support, grievance and dispute pages; and
another page that ScaleDux classifies as inappropriate for session recording.
Clarity exclusion and masking settings operate prospectively after the relevant configuration takes effect. Earlier recordings may remain until deleted or until the applicable provider-retention period expires.
ScaleDux does not currently use Meta Pixel, LinkedIn Insight Tag, advertising retargeting or a mobile advertising or analytics SDK. ScaleDux will update the Cookie Notice and provide any control required by Applicable Law before introducing a materially different tracking or advertising technology.
You may manage cookies through your browser settings and through any cookie or analytics preference mechanism made available by ScaleDux. Disabling strictly necessary technologies may prevent login or use of protected features.
Google and Microsoft may also provide provider-level privacy or opt-out controls. A later withdrawal or browser deletion does not necessarily erase information already processed before the control took effect.
Microsoft explains that masking changes apply only to new recordings and may take time to take effect. It also states that masked information is not uploaded to Clarity.
Category | Current purpose | Control |
Strictly necessary | Authentication, Account security, session continuity, fraud prevention and essential Platform operation. | Required for the relevant feature. Disabling these technologies may prevent login or use of protected Platform functionality. |
Functional | Language, layout, notification and other preferences where implemented. | Browser or Platform settings where available. |
Google Analytics | Page views, events, device information, browser information and feature-use analysis to understand Platform performance, adoption and usage. Under the current implementation, Google Analytics may begin processing when a relevant page loads and before the Visitor makes a cookie choice. | Browser controls, Google-provided controls and any ScaleDux cookie or analytics preference mechanism made available. Where prior consent is required by Applicable Law, ScaleDux will implement an appropriate consent or tag-control mechanism. |
Microsoft Clarity | Heatmaps, interaction analysis and session replay on public and designated non-sensitive pages. Under the current implementation, Microsoft Clarity may begin processing when a relevant page loads and before the Visitor makes a cookie choice. | Microsoft Clarity is disabled on designated sensitive pages. Browser controls, Microsoft-provided controls and any ScaleDux cookie or analytics preference mechanism made available also apply. |
Marketing and advertising | ScaleDux does not currently use Meta Pixel, LinkedIn Insight Tag, advertising retargeting, third-party behavioural advertising or a mobile advertising SDK. | Not applicable to the current launch configuration. ScaleDux will update the Cookie Notice and implement any legally required control before introducing such technology. |
17. Marketing and Service Communications
ScaleDux may send marketing communications by email, SMS, WhatsApp or another channel where the communication is lawfully permitted and the required choice has been obtained.
Marketing consent is separate from acceptance of the Terms of Service and acknowledgement of this Privacy Policy. A marketing opt-out does not prevent ScaleDux from sending communications necessary for Account security, verification, payment, payout, tax, transaction, support, policy, grievance or legal purposes.
Where ScaleDux uses commercial SMS or WhatsApp messaging, it will use the registration, template, sender, preference and opt-out controls required for the applicable channel.
18. Children and Persons Under Eighteen
ScaleDux is not designed for persons under eighteen years of age and does not knowingly offer role-based Accounts or user-to-user transactions to a child. A person under eighteen should not submit personal data through a calculator, public form or support channel without a parent or lawful guardian where such involvement is required.
If you believe ScaleDux has received personal data relating to a person under eighteen contrary to this Policy, contact [email protected] or [email protected] and provide enough information for ScaleDux to investigate without submitting unnecessary additional personal data.
19. Privacy Requests, Grievances and Appeals
ScaleDux has designated a Grievance Officer for complaints concerning the Platform, this Privacy Policy and personal-data practices. A request should include the requester’s name, registered email where applicable, Account or transaction concerned, a clear description and supporting information reasonably necessary to verify and resolve the matter.
Item | Current position |
Grievance Officer | Sunil Kumar Dash |
Privacy requests and grievances | |
General support and security reports | |
Legal notices | |
General and partnership enquiries | |
Ordinary acknowledgement | Within 24 hours where the IT Rules require that period. |
Ordinary grievance resolution | Within 7 days where the IT Rules require that period and sufficient information has been received. |
Specified removal complaint | As expeditiously as possible and within 36 hours where the IT Rules require that period. |
Specified intimate-content or electronic-impersonation complaint | Within 2 hours where the IT Rules require that period. |
Access, correction or erasure request | Target substantive response within 30 days after verification, with a status update where the request depends on another party or requires additional time. |
Where an external provider, bank, authority or another User must complete an action, ScaleDux may issue its substantive position within the applicable period and continue to communicate the status of the external action.
A person aggrieved by an applicable intermediary grievance decision, or the absence of a decision within the prescribed period, may use the Grievance Appellate Committee mechanism where available and applicable. A complaint to the Data Protection Board of India will be governed by the DPDP provisions in force at that time.
20. Changes to This Privacy Policy
ScaleDux may update this Policy to reflect changes in law, product functionality, data flows, vendors, security practices, corporate structure or operations.
A change that introduces a materially different purpose, a new category of high-risk processing, a new form of external visibility or a materially broader recipient category will be communicated through an appropriate channel before it takes effect, unless immediate implementation is required for law, security, fraud prevention or a binding direction.
Because this Policy is a notice, continued use will not be treated as consent where Applicable Law requires specific consent. ScaleDux will request fresh consent or authorisation where required.
The current Policy will identify its version and effective date. ScaleDux will retain prior versions for an appropriate period for contract, audit, grievance and legal-reference purposes.
Purpose | Contact |
Company | ScaleDux Software Innovations Private Limited |
CIN | U62013OD2025PTC049049 |
Registered office | Plot No. 241/3601, First Floor, Jaydev Vihar, Regional Research Laboratory, Khordha, Odisha, India, 751013 |
Website | www.scaledux.com |
Grievance Officer | Sunil Kumar Dash |
Privacy requests and grievances | |
General support and security reports | |
Legal notices | |
General and partnership enquiries |
Appendix A. Processing Summary
Activity | Data | Purpose | Recipients | Retention |
Visitor browsing | Technical, cookie, device, page and analytics data | Website delivery, security, analytics and preferences | Hosting, network, Google Analytics and Microsoft Clarity | Tool, provider and applicable log schedule |
Calculator use | Ordinary technical and analytics data | Provide the calculator, maintain security and understand use | Analytics and infrastructure providers | Substantive calculator inputs remain browser-only; other data follows the applicable tool and log schedule |
Account creation | Name, email, mobile, role, authentication, device and Account records | Create, operate and secure the Account | Communication, infrastructure and security providers | Account duration plus applicable legal and operational retention |
Identity verification | Returned identity fields, Verification result, reference, match outcome, attempt record and timestamp | Identity confirmation, eligibility, fraud prevention and Account integrity | IDTO, DigiLocker and integrated sources | Verification, provider, security and legal schedule |
Tax onboarding | PAN, GSTIN, legal name, billing information and Verification records | Tax administration, invoicing, certificates, reconciliation and audit | IDTO, tax advisers, providers and authorities where required | Applicable statutory tax and audit period |
Bank and payout onboarding | Bank-account, Verification, Linked Account, transfer and settlement information | Bank verification, payout onboarding, transfer administration and reconciliation | IDTO, Razorpay and banking systems where applicable | Finance, provider, tax, audit and legal schedule |
Expert or Agency profile | Skills, experience, portfolio, rates, team, services and profile information | Professional profile and marketplace functionality | Eligible Users and operational providers | Account, marketplace and claims schedule |
Mentor profile | Experience, offerings, availability, pricing and profile information | Mentorship profile and marketplace functionality | Eligible Users and operational providers | Account, marketplace and claims schedule |
Public Project discovery | Public Project fields, Project description and public Project attachments | Publish and enable discovery of a Project opportunity | Any internet user, search engines where applicable, and hosting or content-delivery providers | While published and afterwards where required for moderation, audit, complaints, legal claims, security or technical caching |
Restricted Project transaction | Proposal, Offer, NDA, private message, Project workspace file, Deliverable, revision, approval, invoice and review information | Administer the requested Project relationship | Authorised participants and operational providers who require access | Transaction, claims, tax, audit and legal schedule |
Payment and settlement, where available | Payment, Razorpay Route, transfer, settlement, payout, PAN, GSTIN and reconciliation information | Payment, payout, tax, accounting and audit administration | Razorpay, advisers and authorities where required | Applicable provider, tax, accounting, audit and legal schedule |
Support and grievance | Request, message, evidence, response, decision and appeal information | Resolve requests, grievances and complaints and protect legal rights | Advisers, providers and authorities where required | Complaint, grievance and legal-claims schedule |
Security | Logs, IP address, device, session, access, risk and incident information | Protect ScaleDux and Users, prevent abuse and investigate incidents | Infrastructure, network and security providers | CERT-In, security, incident and legal schedule |
Analytics | Google Analytics and Microsoft Clarity device, page, event and interaction information | Performance analysis, usability analysis and product improvement | Google and Microsoft | ScaleDux configuration and applicable provider-retention controls |
Marketing | Contact information, consent, preference, subscription and interaction records | Send optional marketing and maintain opt-out evidence | Communication providers | Until withdrawal and afterwards for a reasonable evidence and suppression period |
Appendix B. Visibility Summary
Public Website Information may include general ScaleDux webpages, Help Centre material, calculators, limited signed-out profile landing pages, Public Project Postings, public Project attachments and public reviews or ratings.
A signed-out profile landing page may display only limited information, including a masked name, profile picture, cover image and login prompt. The landing page may be indexed by search engines.
Complete professional profiles are intended for eligible logged-in Users and are subject to authentication, role, Account status, feature eligibility and Platform permissions.
Public Project Postings and attachments uploaded to their public attachment areas may be viewed without login through ScaleDux webpages, unauthenticated Platform interfaces or public content-delivery links.
A public Project attachment may be viewed, downloaded, copied, cached, indexed or shared outside ScaleDux. A User must not upload confidential, sensitive, restricted or NDA-protected information to a public Project attachment field.
Proposals, Offers, NDAs, private messages, Project workspace files, Deliverables, revisions, invoices, payment records, support records and dispute records are intended only for authorised participants and persons requiring access for Platform operation or Applicable Law.
Complete email addresses, mobile numbers, PAN, GSTIN, bank information, payout information and complete Verification Data are not intended to be included in Public Website Information or returned through unauthenticated Platform interfaces.
Public reviews and ratings may be visible without login where that visibility is enabled. Non-Public Feedback is not publicly displayed.
Google Analytics and Microsoft Clarity may begin processing technical and interaction information when a relevant page loads under the current implementation. Microsoft Clarity is disabled on designated sensitive pages as described in Section 16.
Join ScaleDux Community
Select Your Role and Get Tailored updates, opportunities, insights, and ecosystem news