Privacy Policy

The short version

Scalar is a software service that helps real estate agents answer calls, qualify leads, and book showings. To do that we handle some of your personal and business data. We use it only to run the service. We never sell it, and we never share it with advertisers.

Who we are

"Scalar" refers to the software and service operated at byscalar.com and app.byscalar.com. If you have any questions, email support@byscalar.com.

What we collect

When you sign up and use Scalar, we collect:

• Account info: your name, email, business name, business phone, brokerage, license number, service areas, and photo URL if you provide one.
• Calendar data (when you connect Google Calendar): your availability (busy/free times) so we never double- book a showing. We create events when a showing is booked. We do not read personal event titles, descriptions, attendees, or attachments.
• Phone + SMS content: audio recordings, transcripts, and SMS messages sent to or from your Scalar phone number. Used to generate summaries, score leads, and let you review call outcomes in your dashboard.
• Lead data: names, phone numbers, emails, and messages from people who contact your business through Scalar.
• Billing info: handled by Stripe. We never store your full card number; Stripe sends us a reference and a last-four-digits display.
• Usage data: IP address, browser, pages viewed inside the dashboard, errors. Used for analytics and debugging.

Google user data — what we do and don't do

Scalar's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We do:

• Read your Google Calendar busy/free blocks to find real open slots before the AI books a showing.
• Create calendar events when a showing is booked, with the buyer's name and property address.
• Update or cancel events when a buyer reschedules through text or call.

We do not:

• Read the contents of personal events (titles, descriptions, attendees).
• Share your calendar data with any third party.
• Use your data to train machine-learning models.
• Sell, rent, or transfer your calendar data to advertisers or data brokers. Ever.

You can revoke Scalar's access at any time from your Google Account permissions page. When you do, we stop reading or writing to your calendar immediately.

How we use your data

• To run the AI phone and SMS agent you signed up for.
• To book, reschedule, and confirm appointments.
• To send you notifications (morning brief, new lead, call summary) based on your preferences.
• To show you analytics about your own pipeline.
• To bill you through Stripe.
• To prevent abuse and investigate security incidents.

Who we share it with

Only service providers we need to run Scalar, and only the minimum data each one needs:

• Cloudflare Workers — application hosting.
• Supabase — database and storage.
• Twilio — phone numbers, call routing, SMS delivery.
• Vapi — AI voice agent runtime.
• OpenAI — language model for the AI agent (transcripts and summaries are sent for processing; OpenAI does not train on data sent through their API).
• Google — only for your calendar if you connect it.
• Stripe — billing.
• Resend — transactional email.

We do not share your data with advertisers, data brokers, or other realtors.

How long we keep it

Account and transaction data is retained for as long as your account is active, and for up to 24 months after cancellation for legal and tax purposes. Call recordings and transcripts are retained for 12 months by default; you can request earlier deletion by emailing support@byscalar.com. Stripe retains billing records on its own schedule.

Your rights

You can, at any time:

• Export your data from the dashboard.
• Delete your account and all associated data.
• Revoke Google Calendar access.
• Request a correction or copy of your data by emailing support@byscalar.com.

If you live in California, the EU, the UK, or Canada, you have additional rights under CCPA, GDPR, UK-GDPR, and PIPEDA respectively, including the right to know, the right to delete, and the right to opt out of certain uses. Email us to exercise them — we respond within 30 days.

Security

We use HTTPS everywhere, encryption at rest on databases, service-role access controls, and row-level isolation per client account. We never store full credit card numbers or plaintext MLS passwords. No system is perfectly secure — if we discover a breach that affects your data, we will notify you within 72 hours.

Children

Scalar is for real estate professionals. We do not knowingly collect data from anyone under 18.

Changes

If we make material changes to this policy, we will email account holders and update the effective date at the top. Continued use of Scalar after a change means you accept the new policy.

Contact

Questions or requests go to support@byscalar.com.