Privacy Policy

Version 2.0 · Effective September 3, 2026

This Privacy Policy explains how Scrub to Scale LLC (“we,” “our,” “us”) collects, uses, and protects information when you visit our websites (scrubtoscale.com, shop.scrubtoscale.com, and resources.scrubtoscale.com), buy a digital product, join our email list, or use our software platform at app.scrubtoscale.com (together, the “Service”). By using the Service, you agree to the practices described here.

1. Information We Collect

We collect the following categories of information:

  • Order information: when you buy a digital product, your name, email address, phone number if you enter one, billing address, what you bought, and the amount paid. Card details go directly to the payment processor; we never receive full card numbers.
  • Email list data: if you join our list or buy from us, your email address, name, and which of our emails you open or click.
  • Marketing and attribution data: how you found us (the platform and campaign tags on the link you clicked, the referring site, and click identifiers added by advertising platforms such as fbclid, ttclid, or gclid), your landing page, and the pages you visit. We keep the first and most recent source in a first-party cookie (sts_attr) so that a later purchase can be credited to the platform or post that sent you.
  • Account information (software platform): your email, password (hashed), business name, and any details you provide during signup or in your dashboard.
  • Billing information (software platform): handled by Stripe; we receive and store only customer and subscription identifiers, not full payment card numbers.
  • Configuration data (software platform): pricing rules, services, branding, custom questions, and other content you create in the software.
  • Lead data (software platform): contact information and form responses submitted by your customers via your embedded widget. You are the controller of this data; we process it on your behalf.
  • Usage data: IP addresses, device and browser information, log timestamps, and feature interactions, used to operate, secure, and improve the Service.
  • Communications: emails or messages you send to our support address.

2. How We Use Information

  • To deliver the digital products you buy, send your access email and receipt, and answer support requests;
  • To provide, maintain, and improve the Service;
  • To process subscriptions and deliver receipts;
  • To send transactional notifications (e.g., order confirmations, trial-ending reminders, password resets);
  • To send you emails about our products, free tools, and community when you have opted in or bought from us. You can unsubscribe at any time using the link in any email;
  • To measure which platforms, posts, and pages lead to sign-ups and sales, so we know what is worth making more of;
  • To detect, prevent, or address fraud, abuse, or security issues;
  • To comply with legal obligations.

3. Subprocessors

We use third-party service providers (subprocessors) to operate the Service. Each is contractually obligated to protect your data.

For the websites and store:

  • GoHighLevel (LeadConnector): checkout pages, order records, email and SMS delivery, and marketing automation for the store and community.
  • Hosting.com: web hosting for scrubtoscale.com.
  • Google Analytics: website analytics (see Section 6).
  • Meta and TikTok: advertising measurement (see Section 6).

For the software platform:

  • Supabase: database, authentication, and storage.
  • Stripe: payment processing, subscription billing, and tax calculation.
  • Resend: transactional email delivery.
  • Twilio: SMS notifications (only if enabled).
  • Vercel: application hosting and content delivery.
  • Upstash: caching and rate limiting.

4. Sharing & Disclosure

We do not sell your information. We share it only as necessary with the subprocessors listed above; with advertising and analytics platforms (Google, Meta, TikTok) through the tools described in Section 6, unless you have opted out; with your customers via the integrations you configure (e.g., webhook payloads sent to your CRM); and as required by law (subpoenas, court orders, regulatory requests). The above excludes mobile information, phone numbers, SMS opt-in data, and text messaging consent, which will not be sold, rented, shared, or transferred to third parties or affiliates for marketing or promotional purposes.

5. SMS Communications and Consent

When you provide your mobile phone number and opt in to receive text messages from Scrub to Scale, we may collect your name, phone number, email address, SMS consent status, opt-in source, opt-in date and time, and messaging history.

We use this information to send text messages you have consented to receive, including account notifications, onboarding reminders, customer care messages, support updates, billing or subscription notices, service updates, and marketing or promotional messages if you have separately opted in to receive them.

Message frequency varies. Message and data rates may apply. You may opt out of SMS messages at any time by replying STOP. You may reply HELP for assistance.

Mobile information, phone numbers, SMS opt-in data, and text messaging consent will not be sold, rented, shared, or transferred to third parties or affiliates for marketing or promotional purposes.

We may share limited information with service providers who help us deliver SMS messages, operate our systems, maintain security, or comply with legal obligations. These service providers are only permitted to use the information as necessary to provide services to Scrub to Scale and are not permitted to use it for their own marketing or promotional purposes.

Your SMS consent is not a condition of purchase.

6. Cookies & Tracking

On our websites and store (scrubtoscale.com, shop.scrubtoscale.com, resources.scrubtoscale.com) we use:

  • Google Analytics 4: how visitors find and use the site, which pages they read, and which purchases follow. Google does not log or store full IP addresses in Google Analytics 4.
  • Meta Pixel and TikTok Pixel: to measure whether visits from our Facebook, Instagram, and TikTok content lead to purchases, and to build audiences for advertising on those platforms.
  • A first-party attribution cookie (sts_attr): stores the source of your first and most recent visit (campaign tags, referrer, landing page, and ad click identifiers) for 90 days so we can credit a purchase to the right platform. It contains no name or email address.
  • Essential cookies at checkout: the checkout on shop.scrubtoscale.com runs on GoHighLevel, which sets cookies needed to complete your order and may load the same measurement tools. Our Skool community and our podcast on Spotify are third-party platforms governed by their own policies.

Inside the software dashboard: we use essential cookies for authentication and session management, and Vercel Speed Insights for first-party performance monitoring (no personal data, no cross-site tracking). The dashboard itself does not load Meta Pixel, TikTok Pixel, Google Analytics, or other third-party advertising or analytics scripts.

Your choices. We honor the Global Privacy Control (GPC) browser signal across all of our properties as a binding opt-out under the CCPA. When your browser sends GPC, Google Analytics, Meta Pixel, and TikTok Pixel do not load. You can also opt out on our Privacy Preferences page or through the “Do Not Sell or Share My Info” link in the footer of every page, and you can block or delete cookies in your browser settings. Subprocessors such as Stripe may set their own cookies during checkout; their practices are governed by their policies.

7. Data Retention

We retain data for the following general periods, subject to longer retention where required by law (taxation, accounting, legal hold):

  • Order records: 7 years (federal tax recordkeeping)
  • Email list data: until you unsubscribe, plus a suppression record so we do not email you again
  • Attribution cookie: 90 days from your most recent visit
  • Account & configuration data: for the life of your account, plus 90 days after deletion
  • Lead data: for the life of your account; deleted with the account or at your written request
  • Billing records: 7 years (federal tax recordkeeping)
  • Security & access logs: 90 days
  • Terms-acceptance audit log: for the life of the account plus 7 years

You may request deletion of your account and associated data by emailing the address in Section 15.

8. Your Rights (General)

Subject to applicable law, you may:

  • Access the personal information we hold about you;
  • Request correction of inaccurate information;
  • Request deletion of your account and personal information;
  • Export your data in a portable format;
  • Restrict or object to certain processing;
  • Withdraw consent at any time, where processing is based on consent.

California (CCPA) and EU/UK (GDPR) residents have additional rights described in Sections 9 and 10 below. To exercise any of these rights, submit a request through the privacy request form on our Privacy Preferences page (no account required), or email ebooth@scrubtoscale.com as a fallback. We verify the requester's identity before acting and respond within the timelines in Sections 9 and 10.

9. California Residents (CCPA / CPRA)

If you are a California resident, you have the right to:

  • Know what personal information we collect, use, disclose, or sell;
  • Delete personal information we have collected about you;
  • Correct inaccurate personal information;
  • Opt out of the sale or sharing of your personal information for cross-context behavioral advertising;
  • Limit the use and disclosure of sensitive personal information;
  • Non-discrimination for exercising any of these rights.

We do not knowingly sell personal information for monetary consideration. To the extent that our use of Meta Pixel, TikTok Pixel, and Google Analytics on our websites and store constitutes “sharing” for cross-context behavioral advertising under the CCPA, you may opt out via the “Do Not Sell or Share My Info” link in the footer of every page, on the Privacy Preferences page, or by enabling Global Privacy Control in your browser. We will respond to verifiable CCPA requests within 45 days, with a one-time 45-day extension if reasonably necessary.

To submit a CCPA request, email ebooth@scrubtoscale.com with the subject line “CCPA Request”.

10. EU/UK Residents (GDPR / UK GDPR)

If you are in the European Economic Area, the United Kingdom, or Switzerland, the General Data Protection Regulation (or UK GDPR) applies to your personal data and we act as a data controller for the information we collect directly from you (orders, email list, account data, billing, support communications). For lead data submitted through widgets you operate, the cleaning business is the controller and we act as a processor.

Legal bases. We process personal data on the following bases:

  • Contract: to deliver the digital products you buy and provide the software you subscribed to (orders, account, billing, support);
  • Legitimate interest: to secure the Service, prevent abuse, and improve product quality (subject to balancing test);
  • Legal obligation: to comply with tax, accounting, and other laws;
  • Consent: for marketing emails and for any optional analytics or advertising tracking, where applicable; you may withdraw consent at any time.

International transfers. The Service is operated in the United States. Where we transfer personal data of EU/UK residents to the United States, we rely on the EU–US Data Privacy Framework or Standard Contractual Clauses approved by the European Commission, as applicable.

Your rights. You may exercise any of the rights listed in Section 8 above, plus the right to lodge a complaint with your local supervisory authority. We will respond to verifiable GDPR requests within 30 days.

Data breach notification. In the event of a personal data breach likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware and inform affected users without undue delay where required.

To submit a GDPR request, email ebooth@scrubtoscale.com with the subject line “GDPR Request”.

11. Children, Health & Other Regulated Data

The Service is not directed to individuals under 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us so we can delete it.

Not for protected health information (PHI). The Service is not a HIPAA-covered platform and we do not sign Business Associate Agreements unless we have explicitly agreed to do so in writing. Do not use the Service to collect, store, or transmit PHI or other health information regulated by HIPAA.

Customer-configured forms. You are the controller of data collected through your embedded widget and forms. You must not configure forms to collect children's data (subject to COPPA/GDPR-K), PHI, government IDs, financial account numbers, or other regulated sensitive categories without your own lawful basis and any required authorization. We provide the Service on the basis that you do not collect such data through it.

12. Security

We use industry-standard safeguards, including encryption in transit (HTTPS) and at rest, access controls, and regular security review, to protect your information. No system is perfectly secure; we cannot guarantee absolute security.

13. International Users

The Service is operated in the United States. If you access it from outside the U.S., you consent to the transfer and processing of your information in the U.S. and other jurisdictions where our subprocessors operate. EU/UK residents: see Section 10 for the specific transfer mechanisms we rely on.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated to active customers via email or in-app notice. The “Effective” date at the top of this page reflects the most recent version.

15. Contact

Questions or requests? Email ebooth@scrubtoscale.com.