Privacy Policy

1. Scope

This Privacy Policy explains how Scopelyt collects, uses, discloses, and protects personal information in connection with:

• the ValiReach product and related application flows available through scopelyt.com, app.scopelyt.com, and any product-specific legal or marketing pages;
• account registration, onboarding, and workspace setup;
• lead discovery, qualification, contact enrichment, CRM, campaign management, analytics, and multi-channel outreach features; and
• support, billing, communications, and related business operations.

In this policy, Scopelyt, we, our, and us means Scopelyt Technologies PVT LTD, the operator of ValiReach. You means the individual or entity using the Services. If you use ValiReach on behalf of an organization, you also includes that organization.

2. Information We Collect

We collect information in the following categories.

A. Information you provide directly

This may include:

• account and profile information, such as name, work email address, password credentials, role, and organization membership;
• onboarding and workspace information, such as company name, business description, target customer profile, geography, competitors, positioning, and other information you submit to help configure the product;
• CRM and outreach information you enter into the Services, such as notes, tags, campaign settings, approval preferences, sequence rules, and uploaded attachments;
• billing and transaction information, such as billing contact details, billing address, subscription selections, and payment status information;
• communications you send to us, including support requests, demo requests, feedback, and other correspondence; and
• information submitted by invited team members when they accept an invitation or use the workspace.

B. Information generated through use of the Services

This may include:

• authentication and session data;
• organization, user, and permission records;
• usage logs, device and browser metadata, IP address, timestamps, and interaction data;
• application events, diagnostics, security logs, and audit trails;
• lead-generation run data, search-query logs, candidate-attempt records, deduplication records, qualification scores, qualification reasoning, and related AI-generated insights;
• campaign, sequence, enrollment, and message-planning records;
• webhook event data and delivery status events from connected services; and
• analytics and performance data relating to your use of the Services.

C. Information about leads, prospects, and contacts

ValiReach is designed to discover, qualify, and enrich business leads. In that context, we may collect or generate business-contact information and related professional data, including:

• company name, website, industry, company size, address, city, state, country, and related business profile data;
• business contact name, title, work email address, phone number, LinkedIn profile URL, and similar professional contact data;
• public ratings, review counts, social profile links, technology-stack signals, hiring or expansion signals, and other business intelligence used for qualification; and
• internal status, notes, tags, assignments, and activity history created within your workspace.

D. Information from third parties and connected services

Depending on how the Services are used, we may receive information from:

• search and discovery providers;
• contact enrichment and verification providers;
• payment processors;
• communication and outreach providers;
• connected integration providers;
• analytics, hosting, and infrastructure providers; and
• other parties you authorize to share data with us.

E. Cookies and similar technologies

We and our service providers may use cookies, local storage, pixels, or similar technologies to operate the Services, remember preferences, measure performance, improve security, and analyze usage. If we use consent-based cookies in any jurisdiction that requires consent, we will request consent where required by law.

3. Sources of Information

We collect personal information:

• directly from you and your team members;
• from your use of the Services;
• from integrations and service providers you connect or enable;
• from business directories, public websites, public professional profiles, and other sources used for lead discovery and qualification;
• from payment processors and communication providers involved in service delivery; and
• from security, fraud-prevention, and analytics tools we use to operate the platform.

4. How We Use Information

We use personal information to:

• create and manage accounts, workspaces, invitations, and access controls;
• provide the ValiReach product, including onboarding, business-context setup, lead discovery, qualification, contact enrichment, CRM workflows, campaign management, analytics, and support;
• generate and maintain the product's context, learning, and audit records, including markdown context files, lead qualification reasoning, and adaptive sequence planning;
• process subscriptions, billing, invoices, renewals, credits, and payment-related operations;
• send transactional, service, and support communications;
• operate, maintain, monitor, debug, and improve the Services;
• protect the security and integrity of the Services, enforce our Terms, detect abuse, and prevent fraud or misuse;
• comply with law, regulation, court order, or lawful request;
• investigate disputes, incidents, or claims; and
• where permitted, send marketing communications about our products or services, subject to applicable opt-out rights.

5. Legal Bases for Processing

Where applicable law requires a legal basis for processing, we may rely on one or more of the following:

• performance of a contract or steps taken at your request before entering into a contract;
• legitimate interests, such as operating, securing, improving, and marketing the Services, and supporting customers;
• compliance with legal obligations; and
• consent, where consent is required or where we choose to rely on consent.

6. How We Disclose Information

We may disclose personal information to the following categories of recipients:

• affiliated entities and internal personnel who need access to operate the business and provide the Services;
• hosting, infrastructure, database, analytics, security, email, communications, customer-support, payment, and similar service providers;
• integration and channel providers you choose to use through the Services;
• your organization, including workspace admins and authorized team members, as part of normal product functionality;
• professional advisers, auditors, insurers, and legal counsel;
• regulators, law enforcement, courts, and other parties where disclosure is required by law or reasonably necessary to protect rights, safety, or the Services; and
• a buyer, investor, successor, or other relevant party in connection with a merger, acquisition, financing, reorganization, asset sale, or similar transaction.

Based on the documented product architecture, service providers or integration categories may include Cloudflare, Supabase, Amazon SES, Unipile, Twilio, Bland AI, Razorpay, and search or enrichment vendors used for lead discovery and contact verification. We will update this policy if our provider stack changes in a material way.

7. Customer Instructions and Workspace Visibility

If you use ValiReach within an organization:

• workspace admins may be able to access, manage, export, modify, or delete workspace data;
• team-member activity, lead records, campaign records, notes, and related business data may be visible within the workspace according to role permissions; and
• we process data you submit to the Services in order to provide the product to your organization.

If your organization is the controller of personal information processed through ValiReach, we act as a processor or service provider for that information to the extent required by applicable law and our customer agreement.

8. International Data Transfers

We may process and store information in countries other than the country where it was collected. Where applicable law requires safeguards for cross-border transfers, we will use appropriate transfer mechanisms, which may include the European Commission's Standard Contractual Clauses or other lawful transfer tools recognized by applicable law. You may contact us to request more information about the safeguards we use for relevant transfers.

9. Data Retention

We retain personal information for as long as reasonably necessary to:

• provide the Services;
• maintain account, billing, security, compliance, and audit records;
• support product functionality such as deduplication, lead history, CRM records, campaign records, analytics, and AI context history; and
• comply with legal, accounting, tax, and dispute-resolution obligations.

Retention periods may vary depending on the type of information and the purpose for which it is processed. Some records may be deleted, aggregated, anonymized, or archived when no longer needed. Where an organization deletion request is initiated through the product, the current documented product flow schedules deletion for the end of the current billing period and states that data is permanently removed after 30 days.

10. Security

We use reasonable technical, administrative, and organizational safeguards designed to protect personal information. These measures may include access controls, authentication protections, logging, role-based permissions, webhook validation, and other security controls appropriate to the nature of the Services.

No system is completely secure, and we cannot guarantee absolute security.

11. Your Rights and Choices

Depending on your location and the circumstances, you may have rights to:

• access personal information we hold about you;
• correct inaccurate or incomplete information;
• request deletion of personal information;
• object to or restrict certain processing;
• request portability of certain information;
• withdraw consent where processing is based on consent; and
• opt out of marketing communications.

To exercise applicable rights, contact us at [email protected]. We may need to verify your identity before fulfilling a request. If we process your information on behalf of a customer organization, we may direct your request to that organization where appropriate.

12. California and Similar State Law Disclosures

If U.S. state privacy laws apply to our processing, you may have additional rights, including rights to know, delete, correct, or obtain a copy of personal information, and rights relating to certain profiling or targeted advertising practices.

We do not sell personal information for monetary consideration. Based on the currently documented product architecture and public-facing implementation reviewed for this draft, we also do not share personal information for cross-context behavioral advertising as that term is used under California privacy law. If that changes, we will update this policy and provide any notices or opt-out rights required by law.

13. Children

The Services are intended for business use and are not directed to children under 18. We do not knowingly collect personal information from children under 18 in connection with ValiReach.

14. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will post the updated version here and update the Last updated date. Where required by law, we will provide additional notice or obtain consent.