Privacy Policy

Your privacy is important to us. This Privacy Policy explains how ScaleRocket ("we", "us", or "our"), operated by Martin SCAURI, based in Nice, France, collects, uses, and protects your personal information when you visit scalerocket.app and purchase our products.

ScaleRocket is a digital SaaS boilerplate sold as source code via GitHub repository access. By using our website or purchasing our product, you agree to the practices described in this policy.

We collect the following personal information:

• Account information: Name, email address, and GitHub username when you purchase our product.
• Payment information: Payment details are processed securely by Stripe. We do not store your full credit card number, CVV, or other sensitive payment data on our servers.
• Communication data: Email address for transactional emails (purchase confirmation, product delivery, important updates).
• Usage data: We may collect basic analytics data such as page views, referral sources, and device information through Vercel Analytics, if enabled.

We use the collected information to:

• Process your purchase and deliver the product (GitHub repository access).
• Send transactional emails related to your purchase (via Resend).
• Provide customer support and respond to your inquiries.
• Improve our website and product based on aggregated, anonymized usage data.
• Comply with legal obligations.

We do not use your data for marketing emails, newsletters, or advertising purposes unless you explicitly opt in.

All payments are processed securely through Stripe, a PCI-DSS Level 1 certified payment processor. When you make a purchase, your payment information is sent directly to Stripe and is never stored on our servers.

For more information on how Stripe handles your data, please review Stripe's Privacy Policy.

Our website uses only essential cookies required for the proper functioning of the site (e.g., session management). We do not use advertising or tracking cookies.

If Vercel Analytics is enabled, it may use privacy-friendly, cookie-less analytics that do not track individual users across websites.

We use the following third-party services:

• Stripe — Payment processing. Subject to Stripe's Privacy Policy.
• Resend — Transactional email delivery only (purchase confirmations, product access). Subject to Resend's Privacy Policy.
• GitHub — Product delivery via repository access. Subject to GitHub's Privacy Statement.
• Vercel Analytics (if enabled) — Privacy-friendly website analytics. Subject to Vercel's Privacy Policy.

We do not sell, trade, or otherwise transfer your personal information to any other third parties.

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy:

• Purchase records: Retained for the duration required by French tax law (up to 10 years for accounting purposes).
• Email address: Retained as long as your GitHub repository access is active, or until you request deletion.
• Analytics data: Aggregated and anonymized; not tied to individual users.

As ScaleRocket is based in Nice, France (EU), you benefit from the protections of the General Data Protection Regulation (GDPR). You have the following rights regarding your personal data:

• Right of access: You can request a copy of the personal data we hold about you.
• Right to rectification: You can request correction of inaccurate or incomplete data.
• Right to erasure: You can request deletion of your personal data, subject to legal retention requirements.
• Right to restrict processing: You can request that we limit how we use your data.
• Right to data portability: You can request your data in a structured, machine-readable format.
• Right to object: You can object to the processing of your personal data.
• Right to withdraw consent: Where processing is based on consent, you can withdraw it at any time.

To exercise any of these rights, please contact us at contact@scalerocket.app. We will respond to your request within 30 days as required by GDPR.

You also have the right to lodge a complaint with the French data protection authority (CNIL) at www.cnil.fr.

Our website and product are not directed to children under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from a child, please contact us immediately and we will delete it.

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this page periodically. Continued use of our website after changes constitutes acceptance of the revised policy.

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us: