Last updated: July 1, 2026
This policy covers two different groups, and we try to be direct about which one you are:
From website visitors: standard analytics (pages viewed, referrer, device type) and anything you submit through a form (name, email, company, message).
From customers, about the people they ask us to score: information drawn from the public record and any data the customer has the right to share with us — for example public professional history, public writing, and information the customer already holds about a candidate or founder they are evaluating. We do not scrape private, access-gated, or authentication-walled data.
Where GDPR applies, we rely on legitimate interest (operating and improving the service, and performing scoring on a customer's behalf under contract) or contractual necessity, depending on the activity.
We share data with the subprocessors listed on our Trust & security page, strictly to operate the service, under contracts that limit their use of it. We do not share personal data with third parties for their own marketing purposes.
We retain data for as long as needed to provide the service to the customer who submitted it, or as required by law, then delete or anonymize it.
Depending on where you live, you may have the right to access, correct, delete, or export your data, or to object to certain processing. To exercise these rights, email privacy@scoringfactory.ai. If you're the subject of a score rather than a direct customer, we may need to route your request through the customer who requested the score.
Where personal data is transferred outside the United States, we rely on Standard Contractual Clauses or an equivalent lawful transfer mechanism.
ScoringFactory is not directed at children and we do not knowingly collect data from anyone under 16.
We'll update the date at the top of this page when we make material changes, and for significant changes we'll make a reasonable effort to notify customers directly.
Questions about this policy: privacy@scoringfactory.ai.