Data Policy

You own the business information, files, and figures you put into Scafflow. We act as a processor of that data on your behalf and use it only to provide the service to you and your workspace.

Your data is stored in a managed PostgreSQL database (Neon) and served through our application host (Vercel), located in the United States. Connections are encrypted in transit, and passwords are stored only as secure hashes.

We process your data to build and save your checklist and progress, run the financial model, generate AI suggestions when you request them, send transactional emails, and process payments. We do not use your business data to train AI models, and we do not sell it.

We rely on a small set of trusted vendors to operate Scafflow:

• Neon — database hosting
• Vercel — application hosting
• Stripe — payment processing
• Resend — transactional email
• Anthropic — AI processing for AI features

If you invite teammates to your workspace, they can view and edit the shared business data in that workspace (profile, tasks, worksheets, financial model). Workspace owners can add or remove teammates at any time.

We retain your data while your account is active. You can edit or delete your information from within the app, including a “reset” that clears your profile and progress. When you close your account, we delete your data within a reasonable period, except where we must retain limited records to comply with law or in routine backups that expire over time.

We use encryption in transit, hashed credentials, access controls, and reputable infrastructure providers to protect your data. If a data breach affecting your personal information occurs, we will notify affected users and authorities as required by law.

For data requests or questions, email support@tryscafflow.com.