Last Updated: July 1, 2024 (view prior version here)
Scale respects your privacy and is committed to protecting your personal information. Your privacy is important to us. Please read this policy carefully to understand how we will collect, use, and disclose your information, and what choices you have with respect to your information. You can also access a printable version of this Privacy Policy here.
We are Scale, a San Francisco-based company with a mission to accelerate the development of artificial intelligence. We do this by powering AI with our Data Engine and unlocking the value of AI with our Generative AI Platform.
This policy describes how Scale collects, uses, shares or otherwise processes information relating to individuals and the rights associated with that processing. A reference to “Scale,” “we,” “us” or the “Company” is a reference to Scale AI, Inc. and its affiliates involved in the collection, use, sharing, or other processing of personal information. Where applicable, Scale AI, Inc. is the controller.
This Privacy Policy applies to the personal information we collect when you use our websites (such as www.scale.com) and our products, services, and applications (collectively, the “Services”), when you attend a Scale event, or otherwise interact with us.
This Privacy Policy does not apply to the extent we process personal information in the role of processor or service provider on behalf of our customers. Customers are solely responsible for establishing policies for and ensuring compliance with all applicable laws and regulations, as well as any and all privacy policies, agreements, or other obligations relating to such Customers’ use or collection of personal information in connection with the use of our Services by individuals with whom our Customers interact. If you are an individual who interacts with a Customer using our Services or you otherwise believe that a Customer uses our Services to process your personal information, and you contact us regarding this data, you will be directed to contact the applicable Customer for assistance with any requests or questions relating to your personal information, including without limitation any requests to access, amend or erase your personal information.
When we talk about “personal information” or “personal data,” we’re talking about a broad range of information. Data protection laws around the world define this concept in different ways, but in general, we mean any information that relates to an identifiable, living individual person.
In addition, some data protection laws and privacy laws in certain jurisdictions differentiate between “controllers” and “processors” of personal data. A controller decides why and how to process personal data. A processor does not make decisions about personal data; it only processes personal data on behalf of a controller based on the controller’s instructions.
A. Personal Information You Provide Us Directly. We collect personal information you provide directly to us when interacting with us or using the Services. We use this information to provide, improve, promote, and protect the Services. Providing this information is voluntary but may be necessary in certain cases, such as for account registration. In such cases, if the information is not provided, Scale may not be able to provide the user with the requested Services.
The information we collect may include the following:
B. Personal Information We Collect From You Automatically. We use typical tools and services, such as log files, cookies, pixel tags, and similar technologies to automatically collect information, which may contain personal information from your devices while you navigate our Services or interact with emails we sent to you. For more information, please visit our Cookie Policy.
C. Personal Information We Collect From Third Parties. We may also collect personal data from third-party sources such as authentication partners and public databases for the purposes of user authentication and marketing activities. For example, if you create or log into your Scale account using your Google Account credentials, we will access your name and email for authentication.
If you are based in the European Economic Area (“EEA”), the United Kingdom (“UK”), or Switzerland, our legal basis for collecting and using your personal information will depend on the personal information concerned and the specific context in which we collect it. As further described in Sections 7 and 15, we comply with the EU-U.S. Data Privacy Framework (“EU-U.S. DPF”), the UK Extension to the EU-U.S. DPF, and Swiss-U.S. Data Privacy Framework (“Swiss-U.S. DPF”) regarding collection, retention, and use of personal information from the EEA, the UK, and Switzerland. Below describes the legal bases we rely on for each of our purposes in using your personal information.
In some limited cases, we may also have a legal obligation to collect personal information from you. If we ask you to provide personal information to comply with a legal requirement, we will make this clear at the relevant time and advise you whether the provision of your personal information is mandatory or not, as well as of the possible consequences if you do not provide your personal circumstance.
We may share your personal information as described in this Privacy Policy or at the time of collection:
Scale is concerned with safeguarding your information. Scale employs appropriate and reasonable physical, technological, and administrative security measures. For further information about our security practices, please see our Security page. No method of transmission over the Internet, or method of electronic storage, is 100% secure, however. Therefore, while we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.
Information that we collect from you may be transferred to, stored, and processed by us, our affiliates, and other third parties in countries outside the EEA, the UK, and Switzerland including, but not limited to, the United States and other countries, where data protection and privacy regulations may not offer the same level of protection as in other parts of the world.
For transfers of personal information from the EEA, the UK, and Switzerland to third countries, we will transfer personal information according to the requirements of applicable data protection legislation by putting in place appropriate safeguards, including by entering into European Commission Standard Contractual Clauses. Customers transferring personal information from the EEA, the UK or Switzerland can reach out to Scale for a copy of its Data Processing Addendum by contacting us at privacy@scale.com.
In addition, Scale has self-certified and adheres to the principles identified in the EU-U.S. DPF, UK extension to the EU-U.S. DPF and Swiss-U.S. DPF set forth by the US Department of Commerce. For more information about our certification and the Data Privacy Framework, see our Data Privacy Framework Notice below.
We will retain your personal information only for as long as is necessary for the purposes set out in Section 4. How and Why We Use Personal Information. We will retain and use your personal information to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.
Because the needs can vary for different data types in the context of different services, actual retention periods can vary significantly. We determine the appropriate retention period for personal information based on the amount, nature and sensitivity of your personal information processed, the potential risk of harm from unauthorized use or disclosure of your personal information and whether we can achieve the purposes of the processing through other means, as well as applicable legal requirements (such as applicable statutes of limitation). After expiry of the applicable retention periods, your personal information will be deleted. If there is any data that we are unable, for technical reasons, to delete entirely from our systems, we will put in place appropriate measures to prevent any further use of that data.
Our Services may contain links to, or interoperate with third-party services. When you click on a link to any other website or location, or when you or the Customer provides a third-party service with access to information in your account, such third-party may then collect or access information from you or Customer. The use of such information by the third-party service will be governed by the third-party service’s privacy policy. We have no control over, do not review, and cannot be responsible for, these third-party services. We encourage you to read the privacy policies of every website you visit and every third-party service you use.
Our website includes plugins of social media platforms, such as Meta Inc., Twitter Inc., and LinkedIn Corporation. You can identify the plugins by the respective network's logo. Details about purpose and extent of data collection, as well as processing and use of the data, by the social media networks can be obtained by reading the privacy policies of the social media networks.
The Services are not directed to individuals under 18. If Scale becomes aware that a person under 18 has submitted information to us, we will delete the information. If you believe that we may have any information from a child under 18, please contact us at privacy@scale.com.
Depending on your location, and subject to applicable law, you may have the following rights with regard to the personal information we control about you.
We may request specific information from you to help us confirm your identity and process your request. If your User account was provisioned by a Customer, and if you seek to access, correct, amend, or delete data associated with your account, you should direct your requests to the Customer’s Admin.
This section applies to California consumers, and it describes how we collect, use and share Personal Information of California consumers in operating our business, and their rights with respect to that Personal Information. For purposes of this section, “Personal Information” has the meaning given in the California Consumer Privacy Act of 2018 (“CCPA”) but does not include information exempted from the scope of the CCPA. Under the CCPA, Personal Information is any information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular California resident or household.
A. How We Collect, Use, and Share Your Personal Information. We collect the following statutory categories (as defined by CCPA) of Personal Information directly from you or automatically from your device:
The business and commercial purposes for which we collect this information are described in Section 3 of this Privacy Policy; and the categories of third parties to whom we “disclose” the information for a business purpose are described in Section 5 of this Privacy Policy.
B. California Privacy Rights. California law grants California residents consumers certain rights and imposes restrictions on particular business practices as set forth below.
C. How to Exercise Your California Privacy Rights.
If you are a California consumer seeking to exercise your CCPA rights, or if you are an authorized agent wishing to exercise CCPA rights on behalf of someone else, please email us at privacy@scale.com. We will respond to verifiable requests received as required by law.
Please note that to protect your personal information, we will verify your identity by a method appropriate to the type of request you are making. We may also request that your authorized agent have written permission from you to make requests on your behalf, and we may also need to verify your authorized agent’s identity to protect your personal information.
California Civil Code Section 1798.83 permits users of our Services that are California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, please send an email to privacy@scale.com.
If you have questions about your rights under CCPA, please send us an email to privacy@scale.com.
Scale may modify this Privacy Policy periodically, including in response to changing legal, regulatory, technical or business developments. The “Last Updated” legend at the top of this page indicates when this Privacy Policy was last revised. Any changes to this Privacy Policy will become effective when we post the revised Privacy Policy on the website.
If we make any material changes to this Privacy Policy, we will take appropriate measures to provide you with additional notice, consistent with the significance of the changes we make. We will obtain your consent to any material Privacy Policy changes if, and where, required by applicable data protection laws.
We encourage you to review this Privacy Policy from time to time to inform yourself of any changes.
If you have questions about this Privacy Policy, please contact us at privacy@scale.com or by mail:
Attn: Privacy, 650 Townsend Street, San Francisco, CA, 94103.
If you are in an EU member state, you may contact our GDPR EU Representative at scale@lionheartsquared.eu or by mail:
Lionheart Squared (Europe) Limited, (FAO Scale AI), 2 Pembroke House Upper Pembroke Street 28-32, Dublin, D02 EK84, Republic of Ireland
If you are in UK, you may contact our GDPR UK Representative at scale@lionheartsquared.co.uk or by mail:
Lionheart Squared Limited, (FAO Scale AI) 17 Glasshouse Studios, Fryern Court Road, Fordingbridge, Hampshire, SP6 1QX
We are committed to ensuring this Privacy Policy is accessible to individuals with disabilities. If you wish to access this Privacy Policy in an alternative format, please contact us as described above.
Scale AI, Inc. (“Scale”, “we”, or “us”) complies with the EU-U.S. Data Privacy Framework, UK Extension to the EU-U.S. Data Privacy Framework, and the Swiss-U.S. Data Privacy Framework as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal information transferred from the European Economic Area, United Kingdom, and Switzerland to the United States. Scale has certified to the Department of Commerce that it adheres to the Data Privacy Framework Principles. If there is any conflict between the terms in this privacy policy and the Data Privacy Framework Principles, the Data Privacy Framework Principles will govern. To learn more about the Data Privacy Framework Program, please visit www.dataprivacyframework.gov. To view our certification, please click here.