Scale Post Privacy Policy

Effective date: August 23, 2026 Last updated: August 23, 2026

This Privacy Policy explains how Danleo LLC (“Danleo,” “Scale Post,” “we,” “us,” or “our”) collects, uses, discloses, and retains personal data when you visit scalepost.pro, use app.scalepost.pro, communicate with us, purchase a plan, connect a social-media account, or otherwise use Scale Post (collectively, the “Service”).

Danleo LLC is a Florida limited liability company located at 1021 NE 58th Street, Unit 106, Oakland Park, Florida 33334, United States. Questions and privacy requests may be sent to support@scalepost.pro.

This Policy should be read with our Terms of Service and Cookie Policy.

1. Scope and our role

This Policy applies to personal data processed by Danleo in connection with the Service. It does not govern third-party websites, payment pages, social networks, or services that have their own privacy policies.

Danleo generally acts as a controller or business for account administration, billing, security, customer support, Service analytics, marketing attribution, and our direct relationship with you.

When a business customer submits Customer Content containing another person’s personal data and Danleo processes it only to provide requested hosting, transformation, scheduling, or publication functions, the customer may be the controller or business and Danleo may act as its processor, service provider, or contractor. The customer is responsible for lawful instructions, notices, and permissions. A data processing addendum should be executed where required.

Social networks, payment providers, analytics providers, and certain integration providers may act as independent controllers for processing they determine themselves.

2. Summary of Scale Post’s processing

Scale Post is designed for existing video content. A user may upload a video or select eligible media associated with a connected social account, create altered copies, optionally create caption variants, and download, schedule, or publish those materials.

Scale Post does not use a third-party artificial-intelligence service to generate or alter video. If a user requests caption variants, the source caption and instructions may be sent to a contracted text-processing provider solely to perform that request.

Files are private within Scale Post and are made available only to authenticated, authorized users. Files intended for publication are transmitted to integration providers and destination platforms selected by the user.

3. Notice at collection: categories of personal data

The following table describes the categories we collect. Whether a field is collected depends on how you use the Service.

We do not collect full payment-card numbers. Those are collected by the payment provider on its hosted page.

Customer Content may incidentally contain faces, voices, locations, health information, political views, or other sensitive information. We do not intentionally infer biometric identity or sensitive characteristics from video. You should not submit sensitive or regulated data unless it is necessary, lawful, and appropriate for the Service.

4. How we collect personal data

We collect personal data:

• directly from you when you register, upload content, choose a plan, configure a post, request support, or exercise a right;
• automatically through the Service, server logs, cookies, pixels, local storage, and similar technologies;
• from payment providers when they report payment and subscription events;
• from integration providers and connected social platforms when you authorize an account connection or publication;
• from social-data providers when you request analysis of an eligible public social account or media item;
• from referral partners and campaign URLs; and
• from administrators who create authorized payment links or manage access.

We do not purchase consumer data from data brokers.

5. Why we use personal data

We use personal data for the following purposes:

5.1 Provide the Service

• create and authenticate accounts;
• receive, validate, process, transform, and deliver video files;
• generate requested caption variants;
• create workspaces and enforce plan limits;
• connect social-media accounts;
• schedule, publish, retry, cancel, and monitor posts;
• provide Instagram analysis and performance analytics; and
• retain files for the applicable plan period.

5.2 Billing and subscriptions

• create checkout sessions;
• process payment confirmations and renewals;
• prevent repeat use of restricted introductory offers;
• administer cancellation, refunds, disputes, and chargebacks;
• keep financial and tax records; and
• calculate referral earnings.

5.3 Security and integrity

• secure accounts, infrastructure, files, and integrations;
• rate-limit registration, uploads, and other sensitive actions;
• detect fraud, abuse, prohibited content, or Terms violations;
• investigate errors and incidents;
• maintain backups and operational continuity; and
• comply with sanctions, export controls, and lawful requests.

5.4 Communications and support

• respond to support, privacy, billing, copyright, and legal requests;
• provide in-product operational notices; and
• notify users about material Service or policy changes using available channels.

Scale Post currently does not operate a general marketing-email program. We will update this Policy before launching one where required.

5.5 Measurement and improvement

• understand registration and payment funnels;
• attribute registrations and purchases to campaigns or referrers;
• measure Service reliability and feature use;
• improve workflows and user experience; and
• measure advertising performance through the analytics and advertising providers described in the Cookie Policy where consent or another valid legal basis is present.

We do not use Customer Content to build a public advertising profile or to train our own general-purpose AI model.

6. Legal bases for EEA and UK processing

Where the GDPR or UK GDPR applies, we rely on the following legal bases:

You may withdraw consent at any time without affecting prior lawful processing. Where we rely on legitimate interests, you may object as described below.

We do not use solely automated decision-making that produces legal or similarly significant effects about users. Automated systems may enforce technical limits, detect suspected abuse, or route processing failures, with human review available through support.

7. How we disclose personal data

We disclose personal data only as described below and only to the extent reasonably necessary.

We identify recipients by specific functional category in this Policy. Where applicable law entitles you to more specific information about a recipient of your personal data, you may request it using the method in Section 11.

7.1 Infrastructure and operations

A contracted cloud-infrastructure provider hosts the Service, databases, queues, and private file storage. Processing takes place in the server region selected by Danleo and may occur outside your country of residence.

We use contractors or professional advisers only under appropriate confidentiality and data-protection obligations.

7.2 Social publishing and account integrations

Our contracted social-account integration and publishing provider receives or processes integration profile identifiers, connected-account information, media files selected for publication, captions, platform account IDs, schedules, and publication instructions. It facilitates account authorization and transmission to the destination platforms you select.

The selected destination social platform receives the content and instructions you choose to publish and processes them under its own terms. The platform’s identity is shown when you connect an account or choose a publication destination.

7.3 Social-account analysis

A contracted public social-data provider receives usernames, account or media identifiers, and query parameters needed to retrieve the public profile and media information you request. The Service may temporarily store returned public-profile fields, metrics, captions, thumbnails, and expiring media URLs.

7.4 Caption processing

A contracted artificial-intelligence text-processing provider receives the source caption, requested number of variants, and editing instructions when you invoke caption variation. Video files are not sent to that provider by this feature.

7.5 Payments

The payment provider selected during checkout receives the account email, selected plan, currency, amount, transaction references, and information necessary to process payment and manage a subscription. It collects payment credentials directly and acts under its own privacy notice, which is presented on the hosted payment page.

7.6 Analytics and advertising

After the required consent on public funnel pages, the third-party analytics and advertising providers identified in the Cookie Policy may receive online or browser identifiers, page and funnel events, campaign parameters, device information, purchase value, currency, plan, and—where used for lawful purchase matching—a one-way hash of the normalized account email.

The Service does not load these browser tags on core authenticated product pages under the current configuration. Server-side purchase events may still be sent using previously collected identifiers where lawful and consistent with the user’s consent or applicable opt-out.

7.7 Embedded media and links

An external media provider supplies the video player embedded on the public landing page. Loading the player may disclose IP address, device/browser data, and player interactions to that provider. The provider is identified in the Cookie Policy and in the relevant consent interface.

If you click an external support or messaging link, the service you choose processes the resulting visit and communication under its own terms. We do not automatically send account data to that service merely because the link is displayed.

7.8 Corporate and legal disclosures

We may disclose data:

• to comply with law, court orders, lawful government requests, sanctions, or legal process;
• to protect users, Danleo, platforms, or the public from fraud, security threats, or harm;
• to establish, exercise, or defend legal claims;
• in connection with a merger, financing, reorganization, sale, or transfer of the Service, subject to appropriate safeguards; or
• with your direction or consent.

8. Sale, sharing, and targeted advertising

Danleo does not sell personal data for money.

Some US state privacy laws may define disclosures through advertising or cross-context behavioral technologies as “sale,” “sharing,” or “targeted advertising,” even when no money changes hands. The analytics and advertising technologies identified in the Cookie Policy may fall within those definitions.

Where those laws apply, you may opt out by:

• selecting Decline or disabling advertising technologies in the cookie controls made available on the relevant domain;
• enabling a legally recognized browser opt-out preference signal such as Global Privacy Control; or
• emailing support@scalepost.pro with the subject “Opt Out of Sale/Sharing”.

You may use the email method if an automated control is unavailable or you want the request associated with your account. We honor browser-based opt-out preference signals where required by applicable law.

We do not knowingly sell or share personal data of anyone under 18.

9. Data retention

We retain personal data only for the period reasonably necessary for the purposes described here, including providing the Service, maintaining security, complying with law, and resolving disputes. Our retention criteria are:

Data may be kept longer when required by law, subject to litigation hold, necessary to prevent fraud or enforce agreements, or stored in de-identified form that no longer reasonably identifies a person.

Deleting content from Scale Post does not delete content already published to a social platform. You must use the platform’s controls for that copy. Providers may retain data under their own policies.

10. Security

We use administrative, technical, and physical safeguards designed to protect personal data, including password hashing, authenticated access, owner checks for private files, server-side API keys, rate limits, restricted storage paths, network encryption in transit where supported, backups, and limited worker concurrency.

No system is completely secure. You are responsible for protecting your password and connected accounts. Notify us promptly of suspected compromise.

If a personal-data breach requires notice under applicable law, we will notify affected users and regulators as required.

11. Your choices and rights

Depending on your location, you may have the right to:

• know or access personal data we hold about you;
• receive a portable copy;
• correct inaccurate data;
• delete data, subject to legal exceptions;
• restrict or object to processing;
• withdraw consent;
• opt out of sale, sharing, targeted advertising, or certain profiling;
• appeal our denial of a request where state law provides an appeal; and
• complain to a privacy or data-protection authority.

To exercise a right, email support@scalepost.pro from your account email and describe the request. We may ask for information reasonably necessary to verify identity and authority. We will not request your password.

An authorized agent may submit a request where permitted by law. We may require proof of authorization and direct identity confirmation. We will respond within the period required by applicable law and explain any denial or extension.

We will not discriminate against you for exercising a privacy right. Some data cannot be deleted while needed to provide a requested Service, complete a transaction, maintain security, comply with law, or establish legal claims.

12. EEA and UK rights

If the GDPR or UK GDPR applies, you may exercise the rights of access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. You may object at any time to direct marketing and to processing based on legitimate interests, subject to compelling lawful grounds.

You may lodge a complaint with the supervisory authority in the EEA country where you live or work, or where you believe an infringement occurred. UK users may complain to the UK Information Commissioner’s Office.

Danleo is established in the United States and is the primary contact for privacy matters. You may reach us directly at support@scalepost.pro. Any EEA or UK representative details required for the Service will be made available in this Policy and through the Service.

13. International data transfers

Danleo is based in the United States and uses providers in multiple countries. Personal data may therefore be processed outside your country, including in the United States and the EEA.

Where transfer law requires a safeguard, the transfer must be supported by a lawful mechanism appropriate to the recipient and destination. Depending on the transfer, this may include an adequacy decision, the EU Standard Contractual Clauses, the UK International Data Transfer Addendum or Agreement, a recipient’s valid Data Privacy Framework certification, or another mechanism permitted by law. Contact us if you would like information about the mechanism relevant to your data.

14. United States state privacy disclosures

14.1 California

The categories collected during the preceding 12 months are described in Section 3. The business and commercial purposes are described in Section 5. The categories of recipients are described in Section 7. We do not sell personal data for money.

California residents may have rights to know, access, correct, delete, opt out of sale or sharing, limit certain uses of sensitive personal information, and receive equal service. These statutory rights apply when Danleo meets the CCPA’s definition of a covered “business”; we may honor substantially similar requests voluntarily even when a threshold is not met.

Potentially sensitive data may include account-login information and the contents of private communications. We use it only for the purposes reasonably expected to provide, secure, and administer the Service and do not use it to infer characteristics.

We do not disclose personal data to third parties for their own direct marketing in exchange for money. California “Shine the Light” inquiries may be sent to the contact below.

14.2 Other US states

Residents of Colorado, Connecticut, Delaware, Iowa, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Tennessee, Texas, Utah, Virginia, and other states with applicable comprehensive privacy laws may have similar rights, subject to each law’s scope, exceptions, and effective dates.

To appeal a decision, reply to our response with the subject “Privacy Appeal” and explain why you believe the decision should be reconsidered. If the appeal is denied, we will provide any regulator contact required by applicable law.

Nevada residents may submit a verified request to opt out of covered sales, although we do not currently sell covered information for monetary consideration.

15. Russia and CIS regional notice

No single privacy law applies across the Commonwealth of Independent States. The law of each country may impose separate notice, consent, localization, registration, security, or cross-border-transfer requirements.

For Russian citizens, Federal Law No. 152-FZ may require certain collection, recording, systematization, accumulation, storage, updating, and retrieval to occur using databases located in Russia, and may require a separate consent document and regulatory notices. Scale Post’s primary production database is currently hosted outside Russia.

Because the primary production database is outside Russia, availability for processing subject to Russian localization requirements may be limited. We may restrict onboarding or particular features where a required regional arrangement is unavailable or where sanctions or provider restrictions apply.

Users in Russia and other CIS countries may request access, correction, deletion, withdrawal of consent, or information about processing by emailing support@scalepost.pro. Mandatory local rights remain unaffected.

15.1 Other international users

For users in jurisdictions not addressed separately above, Danleo applies this Policy as a general international notice. You may submit the requests listed in Section 11 regardless of location. Country-specific statutory rights, regulator contacts, localization rules, or response periods apply where mandatory. We may restrict availability rather than process data where a required local arrangement is not operationally available.

16. Children

The Service is intended only for persons aged 18 or older. We do not knowingly collect personal data from children. If you believe a child has provided personal data, contact us and we will investigate and delete it where required.

You may not upload content featuring a child unless you have all legally required parental permissions, releases, and lawful bases and the content otherwise complies with law and platform rules.

17. Third-party links and services

The Service links to or integrates with third parties. Their processing is governed by their own notices. We encourage you to review those notices before connecting an account, visiting a payment page, playing embedded media, or publishing content.

We are not responsible for a third party’s independent processing, security, or policy changes, but we remain responsible for our own selection and management of processors where law requires.

18. Changes to this Policy

We may update this Policy to reflect legal, technical, provider, or business changes. We will post the revised Policy with a new date. For material changes, we will provide notice through the Service, at login, by email where available, or by another method required by law. We will request new consent when required.

19. Contact

Danleo LLC Attn: Privacy 1021 NE 58th Street, Unit 106 Oakland Park, FL 33334 United States Email: support@scalepost.pro

Please use the subject “Privacy Request” for rights requests.