Privacy Policy

1. Scope

This policy explains what information Alpha Scaling collects, how we use it, and the choices you have. It covers three surfaces:

• our website;
• our lead funnel, where you can request an audit or book a call;
• our client platform, where engagements are run and audit deliverables are shared.

2. Information we collect

Prospect and lead information (funnel)

When you request an audit or book a call, you may provide:

• your name;
• your email address;
• your phone number;
• information about your company;
• your approximate annual revenue bracket;
• your fleet size (number of trucks).

Platform information (client platform)

When your organization uses the platform, we process:

• Account and profile — name, email, role, and the organization you belong to;
• Organization / company information;
• Engagement metadata — status, dates, and the day target for your engagement;
• Audit intake and checklist responses — the questionnaire you complete;
• Uploaded business and financial documents you provide for analysis;
• Automated document check results — the verdicts of deterministic checks run on your uploads;
• Audit findings — identified profit-leak zones, ranges, and confidence, produced for your engagement;
• Deliverables and reports we prepare for you;
• Messages exchanged within the platform;
• Activity events — an append-only log of actions, kept for auditability.

3. Information collected automatically

On our funnel pages we also collect:

• your IP address and browser user-agent;
• advertising cookies set by the Meta Pixel (_fbp, and _fbc when you arrive from a Meta ad);
• basic page-interaction events (for example, that a page or video was viewed).

Our homepage and client platform do not load the Meta Pixel and set no advertising cookies. For the full breakdown, see our Cookie Policy.

4. How we use information

• to assess whether a profit audit is a fit for your business;
• to contact you about your request and to schedule and run your call;
• to provide and operate the platform and run your engagement;
• to produce, review, and deliver your audit findings and reports;
• to secure the Service and maintain an auditable record of activity;
• to measure and improve our advertising (funnel only).

5. How AI-assisted processing works

We use AI-assisted processing to help deliver the Service, with important limits on what data is involved:

• Our in-platform assistant is a status and process helper. It receives only minimized metadata — for example, your organization’s name, document file names, and item statuses — and does not receive the contents of your uploaded documents or your financial figures. Our AI provider for this feature is Anthropic.
• The contents of your uploaded documents are processed by our own analysis engine on server-side infrastructure to produce your findings. Those findings are reviewed by our team and pass a publish step before you see them.
• We do not provide your data to our AI provider for the purpose of training its models. How our providers handle data is managed under our vendor-risk process rather than asserted here as a provider guarantee.

For more detail on how AI is governed in the Service, see our AI Governance page.

6. Service providers

We share the minimum necessary information with service providers (subprocessors) that process it on our behalf:

• Vercel – website and serverless hosting.
• Supabase – secure database, authentication, and file storage for the platform.
• Anthropic – AI model provider for our AI-assisted features (receives minimized metadata only, as described above).
• Meta (Facebook/Instagram) – we use the Meta Pixel and the Meta Conversions API to measure ad performance. Where we send contact details (email, phone, name) to Meta for ad matching, they are hashed before transmission; technical identifiers such as _fbp, _fbc, IP address, and user-agent are sent as provided. Funnel only.
• Typeform – collects your funnel form responses.
• Calendly – schedules your call and sends the calendar invite.
• Google Fonts – serves the Inter webfont (receives IP address; sets no cookie).

Our current subprocessors are listed on our Subprocessors page.

7. Cookies and tracking

Our homepage and client platform set no advertising cookies and use no analytics. Our funnel pages use the Meta Pixel (advertising) and a functional identifier, and the client panel stores a strictly necessary sign-in token. Full details, including how to control cookies, are in our Cookie Policy.

8. We do not sell your data

We do not sell your personal information.

9. Security

We use technical and organizational measures to protect your information, including encryption in transit (TLS), access controls, role separation, and tenant isolation so that an organization’s data is kept separate from others. Encryption at rest is provided by our infrastructure providers. For more detail, see our Security page.

10. How long we keep it

We keep your information for as long as needed to respond to your request, run your engagement, and meet our record-keeping and advertising-measurement needs. Our platform supports a data lifecycle that includes soft-deletion of individual documents and full purge of an organization’s data. Retention periods vary by data category and business requirement, and Alpha Scaling is formalizing category-specific retention schedules. You can ask us to delete your information (see below).

11. Accessing or deleting your data

You can ask us for a copy of the information we hold about you, or ask us to delete it, by emailing edward@alpha-scaling.com. For platform customers, deletion is carried out through our document soft-deletion and organization-purge mechanisms, subject to your engagement agreement and any legal record-keeping obligations.

12. International transfers

Your information may be processed and stored by us and our providers in one or more countries. Core application data is hosted with Supabase in the United States (AWS us-east-1); other processing locations are provider-dependent — see our Subprocessors page. Where personal data is transferred across borders, we rely on appropriate safeguards where required by applicable law.

13. Your privacy rights

Depending on where you are, you may have rights over your personal information. You can exercise any of these by contacting us.

• You can ask us for a copy of the information we hold about you, or ask us to delete it.
• You can limit ad tracking through your browser settings and through your Meta account’s ad preferences.

EEA and UK (GDPR)

If you are in the European Economic Area or the UK, you may have the right to access, rectify, erase, restrict, or object to the processing of your personal data, and the right to data portability. You may also lodge a complaint with your local supervisory authority.

United States (state privacy rights)

If you are a resident of California or another US state that grants privacy rights, you may have the right to know about, access, correct, and delete personal information, and to opt out of its “sale” or “sharing”. As noted above, we do not sell personal information.

14. Children

Alpha Scaling is a business service intended for organizations and their personnel. It is not directed to children, and we do not knowingly collect personal information from children.

15. Changes

We may update this policy from time to time. The “last updated” date above reflects the current version.

16. Contact