Privacy Policy

Scalvy AI collects the following data, only with your consent and authorization:

• Instagram direct messages from business accounts you connect — used to identify and classify leads.
• Website URLs you provide — used to analyze your site's SEO, content, and structure.
• Business metrics derived from connected accounts — message volume, lead temperature, sentiment, and posting activity.

Collected data is used solely to generate AI-powered analytics and reports for your business — lead classification, sentiment analysis, content recommendations, and organic-performance insights. We never sell, rent, or share your data with third parties for marketing purposes.

Instagram data is collected through the official Meta API, and only after you explicitly authorize a business account you own or manage. Direct messages are stored for a maximum of 90 days, after which they are deleted. AI-generated classifications and aggregated metrics derived from those messages are retained for up to 1 year to provide period-over-period reporting. You can revoke Instagram access at any time, which immediately stops further collection.

Sensitive fields, such as access tokens, are encrypted at rest using Fernet (AES). All data is transmitted exclusively over HTTPS. Data is stored in a managed Supabase PostgreSQL database, with access restricted to the application's service credentials.

Scalvy AI relies on the following sub-processors, each handling data only as needed to deliver its part of the service:

• Anthropic (Claude AI) — generates analysis, reports, and content.
• Apify — scrapes public Instagram profile data for organic analysis.
• Supabase — hosts the PostgreSQL database.
• Vercel — hosts the application and serves it over HTTPS.

At any time you may request deletion of your data, request an export of your data, or revoke our access to your connected accounts. To exercise any of these rights, contact us at the address below.

For privacy questions or requests, contact david.hi.kin@gmail.com.