Privacy Policy

1.The short version

2.Who is responsible

ScaledThought Inc. (“ScaledThought”, “we”), of Vancouver, British Columbia, Canada, is responsible for the personal information described here.

Our person in charge of the protection of personal information (Québec Law 25) is Joshua Andrews, Co-founder, reachable at privacy@scaledthought.com. For any privacy question or request you can also write to privacy@scaledthought.com.

When you send us content that contains personal information about other people (for example, customer messages in a prompt), we process it on your behalf and on your instructions, as your service provider. You are responsible for having a lawful basis to send it to us.

3.What we collect

Account information. An account id, its home region, and, only if you or your agent provide them, an account name and an email address. The terms version you accepted on the payment page and when.

Dashboard members. The email addresses of the people who can sign in to the account's dashboard, with their role and when they joined. The first is normally the email entered at the account's first payment, or one your agent sets before anyone has signed in; others are invited by an owner. We use them only to send sign-in links, invitations and account notices, and keep them in the account's region. We erase a member's address when they are removed (or replaced as owner), and every member's address when the account is closed. Sign-in links and sessions are stored only as keyed hashes.

API keys. A keyed hash (HMAC-SHA-256) of each key and its first 16 characters, so a key can be recognised without being stored. We can't recover a key from what we keep. Each key's name, scopes, limits, budget and status.

Usage records. For each request: a request id, the key and account ids, the model, token counts, cost, status, timings (time to first token, duration) and which kind of upstream served it. Never the prompt or completion.

Content. Prompts and completions pass through our servers and the model servers in memory while a request is served, and, for some us requests, through a network provider in transit (see Where your data is stored and processed); we don't log or store them. Files you upload for batches and fine-tuning, and batch results, are stored as described in Retention. Metadata you attach to a batch is kept with the batch record.

Credits and payments. Your credit balance and credit ledger, top-ups (amount, status, time, the Terms version shown on the approval page), auto-reload settings, and Stripe identifiers (customer id, Checkout session id, payment intent id, saved payment method id when auto-reload is on). Card numbers and billing details are entered directly with Stripe; we never see full card numbers.

Signup abuse limits. To limit how many accounts one network can create (3 a day by default), we keep a keyed hash of the signing-up IP address (for IPv6, of its /64 network) for 3 days. The address itself is never stored or logged.

Operational logs. Our services log request ids, account and key ids, models, status codes, token counts, costs and latencies, to run and secure the service. They never contain prompts, completions, file contents, API keys or IP addresses.

Operator audit log. When one of our staff acts on an account (for example suspends it, revokes a key or issues a refund), we record who did it, what changed, when, and a keyed hash of their IP address.

Campaign code. Our ads link to scaledthought.com/go/<code>, where the code names an ad campaign, not a person (everyone who saw the ad shares it). If your agent signs up with that code (--source), we store it with the account in its home region so we know which campaign worked. We also count visits to each campaign link per day, with no IP address, browser details or other identifier.

Ad click (optional, US campaigns). Only if you choose “Copy with ad measurement”: the ad platform's click id for your ad click, as described in Ad measurement.

Communications. If you email us, we keep the correspondence to answer you. Our email provider, Google Workspace, stores it outside Canada, on Google's servers, which may be in the United States or other countries, whichever region your account is in.

Website visitors. This website uses no third-party analytics, cookies or trackers; we count visits per campaign link and record which of our campaigns an account signed up from. Our host, Vercel, processes standard request data (such as IP address and user agent) to serve the pages, on its global network, which may be outside your country. The site stores one setting in your browser's local storage (st-mode, whether you chose the human or the agent view); it never leaves your browser.

4.How we use it

• To provide the service: authenticate keys, route and serve requests, run batches and fine-tuning jobs, and enforce budgets and rate limits.
• To meter usage, take payment, apply credits, process refunds and handle disputes.
• To secure the service and prevent abuse, including signup limits and investigating misuse of the Acceptable Use Policy.
• To operate, monitor and improve the service using usage metadata (never content).
• To learn which of our ad campaigns bring customers, from the campaign code an account signed up with.
• If you chose ad measurement, to report your signup and first purchase to the advertising platform whose ad you clicked.
• To contact you about your account, security, or changes to our terms, if you gave us an email.
• To meet legal, tax and accounting obligations, and to establish or defend legal claims.

We don't use your content to train, fine-tune or evaluate models (other than fine-tuning jobs you request for your own account), we don't read it, and we don't use personal information for targeted advertising or profiling, other than the ad measurement you can choose. We rely on your consent (given when an account is created or a payment approved), on what is necessary to provide the service you asked for, and on our legitimate interests in securing it and meeting legal obligations.

5.Where your data is stored and processed

Each region is a separate deployment with its own servers, database, keys and logs. There is no shared global database.

• us accounts are served and stored in the United States, on AWS US East (Ohio) (us-east-2), at api.us.scaledthought.com.
• ca accounts are served and stored in Canada, on AWS Canada (Central) (ca-central-1), at api.ca.scaledthought.com.

A key sent to the other region is refused (HTTP 421) before the request body is read, so content is never forwarded across the border by mistake. Models we host ourselves run on GPU servers in the account's own country.

Network transit (us region only). When a us request is served by a model we host on some of our US GPU servers, it may reach them through a network provider, Cloudflare, whose edge decrypts it to forward it. The prompts and completions of those requests pass through its network in transit, at locations we can't choose, which may be outside the United States. Canadian (ca) requests never take this path.

Dashboard email (us region only). Sign-in links, invitations and account notices for us accounts are sent through Resend, in the United States. They contain the member's email address and the message, never prompts or completions. Canadian accounts get no dashboard email until we use an email provider in Canada.

Third-party inference (us region only). Some models in the us region may be served by DeepInfra, a US inference provider, which receives the prompts and completions of those requests transiently to serve them. Canadian (ca) requests are never sent to a third-party inference provider or out of Canada; our production systems refuse that configuration. We route customer requests to a third-party inference provider only under a written agreement that limits it to serving the request and prohibits it from retaining your content or using it for training.

Payments (both regions). We use one Stripe account for the whole company. Stripe processes payment information in the United States for customers in both regions: the opaque account and top-up ids we send, amounts, and the card, contact and billing details you enter with Stripe. Prompts, completions and usage content are never sent to Stripe. Region residency applies to our own processing and storage of account and usage data, not to payment processing by Stripe.

Several of our service providers are US companies. Even when they process data in Canada, they may be subject to US laws that can require disclosure to US authorities. A current list of our service providers, with what each receives and where, is available on request at privacy@scaledthought.com.

6.Who we share it with

We share personal information only:

• with the service providers we use to run the service (hosting, network and DNS, payments, email and, for us accounts only, third-party inference providers), under contracts that require them to protect it; a current list is available on request at privacy@scaledthought.com;
• when the law requires it, for example a valid court order, and then only what is required; where allowed, we tell you first;
• to protect the rights, property or safety of our customers, the public or us, for example to stop fraud or abuse;
• as part of a merger, acquisition or sale of assets, subject to this policy, with notice to you.

We do not sell personal information. If you choose “Copy with ad measurement”, we disclose your ad click id, signup and first purchase to the advertising platform whose ad you clicked, which may be “sharing” for cross-context behavioural advertising as the CCPA/CPRA defines it. You can opt out at any time; see Ad measurement.

7.Ad measurement (optional, US campaigns only)

Some of our ads shown in the United States, on advertising platforms such as search engines and social networks, may link to a landing page that offers, besides the usual prompt, a second, clearly labelled one: “Copy with ad measurement”. It is never the default, and it isn't offered when your browser sends a Global Privacy Control signal.

If you choose it, the prompt carries a signed token with the ad platform's click id, the time of the click and the campaign code. When your agent creates the account in the us region with it, we store the click id with the account and send the advertising platform whose ad you clicked, and no other, that click id with two events: the signup, and the first credit purchase with its amount. Nothing else: no account id, prompts, completions, email, IP address or browser details. That platform uses this under its own terms to measure and optimise its ads.

The ad's link. The platform adds its click id to the address of the landing page it sends you to, whichever prompt you copy. Like any page address, it reaches the request logs of our website host, Vercel, which keeps them for up to 30 days; we don't export those logs or use the click id from them. The signed token is never part of a web address: it travels only in the prompt you copy.

Never for Canada. Nothing about a Canadian (ca) account is ever sent to an ad platform, the Canadian region never stores click ids, and the option is offered only on campaigns we target to people in the United States.

Your privacy choices. You can opt out at any time, and nothing more is sent after your opt-out takes effect, except an event already being sent at that moment: ask your agent to run account ad-measurement off (or PATCH /v1/account with {"ad_measurement": false}, or the MCP tool account_settings), or email privacy@scaledthought.com. Once you opt out, the stored click id is deleted within the hour, unless a legal hold requires us to keep it. We treat a Global Privacy Control signal as an opt-out.

8.Retention

Retention period for closed accounts: 6 years, to meet tax, accounting and legal obligations; then we delete or anonymise the records. Credit ledger entries and the operator audit log are append-only by design, so when the law requires us to keep them we keep them unchanged; they contain ids and amounts, not content.

9.How we protect it

• TLS 1.2 or later for all traffic to our API; encryption at rest for databases, caches, file storage and backups, with keys in each region.
• API keys and signup IP addresses are stored only as keyed hashes; operator IP addresses in the audit log likewise.
• No content in logs, traces, metrics, workflow payloads or error messages, by design, and checked by automated tests.
• Least-privilege access: the inference gateway reads the database through a read-only role; staff use passkeys and every action on an account is audited.

If we become aware of a breach of security safeguards involving your personal information that creates a real risk of significant harm, we will notify you and the regulators as the law requires. Report security issues under our vulnerability disclosure policy.

10.Your rights and choices

Depending on where you live, you have the right to:

• know what personal information we hold about you and get a copy of it (access and portability);
• have inaccurate information corrected;
• have your information deleted, subject to what we must keep by law;
• withdraw consent, subject to legal and contractual limits (withdrawing it may mean we can no longer provide the service);
• opt out of the ad measurement described above (Your privacy choices);
• not be discriminated against for exercising these rights.

Much of this you can do yourself through the API: read your account (GET /v1/account), usage (GET /v1/usage) and credit ledger (GET /v1/billing/transactions), revoke keys, and delete files and fine-tuned models. For anything else, including closing your account and deleting its data, email privacy@scaledthought.com. Because accounts don't need a name or email, we verify requests by asking you to prove control of the account, for example with a request made using one of its API keys. You can use an authorised agent to make a request for you. We respond within 30 days.

If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada, to the Commission d'accès à l'information du Québec, or to the privacy regulator where you live.

11.Children

The service is not directed to children, and accounts may only be created for adults and organisations.

12.Cookies

This website uses no third-party analytics, cookies or trackers; we count visits per campaign link and record which of our campaigns an account signed up from. It sets no cookies of its own, and neither does the API. The customer dashboard sets one session cookie, __Host-st_dash, on app.<region>.scaledthought.com while a member is signed in. Our staff console sets a session cookie for our own operators only. The payment page is hosted by Stripe, which sets its own cookies under Stripe's policies.

13.Changes

We will post changes to this policy here, with a new version and date, and announce material changes in /llms.txt before they take effect. Latest change (October 11, 2026): the policy now covers ad measurement, an opt-in that may be offered on the landing pages of some of our ads targeted to people in the United States: if you choose it, we report your signup and first purchase to the advertising platform whose ad you clicked. It is never the default, never applies to Canadian accounts, and you can opt out at any time. The list of our service providers is no longer a separate page; a current list is available on request at privacy@scaledthought.com. The policy now also says where email you send us is kept.

14.Contact

Privacy questions and requests: privacy@scaledthought.com. Person in charge of the protection of personal information: Joshua Andrews, Co-founder, privacy@scaledthought.com. Postal address: on request to legal@scaledthought.com.