Who this applies to
This policy covers two groups:
- Visitors and customers. People who use our website or work for a company that has a contract with us.
- Subjects of a score. Founders, companies, or candidates scored by ScoringFactory for a customer. Our customer controls what happens with that score. Contact that customer first for access or deletion requests. We will also honor direct requests where we can.
What we collect
From website visitors, we collect standard analytics such as pages viewed, referrer, and device type, plus information submitted through a form such as name, email, company, and message.
For people and companies a customer asks us to score, we process information from the public record and data the customer has the right to share. That may include public professional history, public writing, and information the customer already holds. We do not scrape private, access-gated, or authentication-walled data.
How we use it
- To generate a score and evidence trail for the customer who requested it.
- To operate, secure, and improve the product.
- To communicate about an account or inquiry.
- We do not sell personal data or use one customer's data to improve another customer's product experience.
Legal basis for EEA and UK users
Where GDPR applies, we rely on legitimate interest or contractual necessity, depending on the activity.
Sharing
We share data with the subprocessors described on our Trust & security page only to operate the service. Contracts limit how those providers may use the data. We do not share personal data with third parties for their own marketing.
Google user data
Two ScoringFactory apps can connect to your Google account. Both use the same Google OAuth client.
- ScoringFactory CRM (crm.scoringfactory.ai). Scopes: openid and userinfo.email, to confirm which account you connected; gmail.readonly, so the assistant can search and read your mail when you ask it to; and gmail.compose, so it can save drafts for you to review. Access is granted per workspace, and you turn it on yourself.
- ScoringFactory Talent (talent.scoringfactory.ai). Scopes: openid and userinfo.email, to confirm which account you connected; gmail.send, to send outreach you have reviewed from your own Gmail; calendar.freebusy, to show your busy times for the next 10 working days so you can pick an interview slot (we do not store them); and calendar.events, to create one interview event on your primary calendar. That event can include a Google Meet link, and it lists the candidate as a guest only if you choose to.
For both apps:
- We store the refresh token encrypted with AES-256-GCM. Access tokens are used once.
- We do not copy your mailbox or calendar. In CRM, the assistant's replies can quote mail it read for you, and drafts it writes; these stay in your assistant chat history, which only you can see. In Talent, we keep only the id and link of an interview event we create.
- We do not sell Google user data or use it for advertising. We never use it to train AI models.
- We do not share it with third parties, except as needed to run the feature you are using.
- You can disconnect at any time in Settings → Connections, which revokes our access at Google. You can also remove access at myaccount.google.com/permissions.
ScoringFactory's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Retention
We retain data for as long as needed to provide the service to the customer who submitted it, or as required by law. We then delete or anonymize it.
Your rights
Depending on where you live, you may have the right to access, correct, delete, or export your data, or object to certain processing. Email privacy@scoringfactory.ai. If you are the subject of a score, we may need to route the request through the customer who requested it.
International transfers
Where personal data moves outside the United States, we rely on Standard Contractual Clauses or another lawful transfer mechanism.
Children's privacy
ScoringFactory is not directed at children and does not knowingly collect data from anyone under 16.
Changes to this policy
We will update the date at the top when this policy changes. For material changes, we will make a reasonable effort to notify active customers directly.
Contact
Send privacy questions to privacy@scoringfactory.ai.