Privacy
What we access, why, who sees it, and how you switch it off.
Who we are
This site and the Scalerify Verified service are operated by Scalerify Management LLC, a Delaware limited liability company operating principally out of Miami, Florida. For any question about this notice, or about data we hold, use our contact form at https://scalerify.com/contact — it reaches us directly. We do not publish an email address.
This notice sets out how we collect, use, process and protect your personal and business data when you use this site and our diligence platform.
What data we access
When you write to us or request a report, we hold your name, your work email address, your role in the transaction — broker, buyer, seller or lender — and the record of what we exchanged.
When a seller connects their business, we access:
- Amazon Selling Partner API, read-only: settlement and payout records, fees, refunds and reimbursements, orders, inventory, account health, and catalog and listing data. We use no write operation: no listing, price or inventory is ever changed, and no message is ever sent to a buyer.
- Business bank statements and supplier invoices the seller shares with us.
- Advertising reports the seller shares with us.
- Risk register inputs: intellectual property status, account health and listing metadata.
We do not request, access or store personally identifiable information about Amazon buyers.
Through this site, separately from any seller account, four tools are involved. What each one does, and where the data goes:
- Umami, self-hosted by us: counts page views and which parts of a page are reached. No cookie, no cross-site tracking, nothing that identifies you. It runs on every visit, and the data stays on our own server.
- Google Analytics 4: audience measurement. It sets cookies and sends your visit to Google. It loads only if you accept it in the banner.
- Meta Pixel: advertising measurement. It sets cookies and sends your visit to Meta. It loads only if you accept it in the banner.
- Kit, our email provider: receives what you type into the sample report form and the mailing list form (your email, and your role on the sample form), and sends you the emails you asked for. Every email carries an unsubscribe link.
Declining in the banner costs you nothing on this site: everything works the same, and only Umami keeps counting. What is stored in your browser, and how to change your mind, is set out in our cookie policy.
The report request, contact and Red Flag Scan forms are hosted on our own form server (for the Red Flag Scan: the listing URL, email, asking price and LOI status you send); what you send through them reaches us and our CRM, and nothing else.
Why we access it
To reconstruct and verify a brand’s financials and to produce the report requested. In practice we use the data to:
- Rebuild the financial statements and reconcile them to bank records.
- Produce the Scalerify Score and the verification report.
- Route verified financial data to lenders or investors the client designates in writing, only at the seller’s explicit request.
- Improve the Scalerify Score, using aggregated, non-identifiable metrics only — never the underlying brand data.
We use the data for nothing else.
Who we share it with
Data from a connected seller account goes to infrastructure sub-processors only.
Our sub-processors, and the terms they process under, are listed in our data processing agreement.
Apart from those sub-processors, data is disclosed only to parties the seller designates in writing: their broker, a prospective buyer, or a lender.
A report itself is shared by role: sample and teaser material is anonymized so the seller’s brand cannot be identified, and a full report is disclosed only to the buyers or lenders taking part in the transaction.
We never sell data, and we never share it with advertisers, agencies or data brokers.
Retention and deletion
We retain data for the duration of the engagement and delete it on request. Raw source files are kept only as long as needed to evidence the report.
Security
- Encryption in transit and at rest.
- Credentials held in a managed secrets store.
- Least-privilege access.
- Multi-factor authentication on administrative accounts.
- Data isolated per seller.
How to revoke access
Access is revoked in two ways.
- Amazon Selling Partner access: Seller Central → Apps & Services → Manage Your Apps → Revoke authorization.
- Documents the seller shared (bank statements, supplier invoices, advertising reports): ask us to delete them through the contact form.
Revoking the Amazon authorization stops all future access to that data; data already collected is handled under the retention section above.
Your rights
Depending on where you live, you may ask for access to the personal data we hold about you, for its correction, or for its deletion. To exercise any of those rights, use our contact form at https://scalerify.com/contact.
Contact
Scalerify Management LLC, Miami, Florida. For any question about this notice, or about data we hold, use our contact form at https://scalerify.com/contact — it reaches us directly. We do not publish an email address.
Last updated: October 16, 2026.