Privacy Policy

Last updated: October 2026

1. Data We Collect

Scale for Agency collects only the data necessary to provide its social media management services. This includes your name, email address, and — when you authorize it — access tokens for Instagram and Facebook accounts via Meta's OAuth flow.

2. How We Use Your Data

We use your Instagram and Facebook access tokens solely to publish content on your behalf and to collect performance metrics (impressions, reach, engagement) for posts published through our platform. We never sell your data or use it for advertising purposes.

3. Meta Permissions

When you connect your Instagram or Facebook account, we request the following permissions:

You may revoke these permissions at any time from your Meta account settings.

4. Data Retention

Access tokens are stored encrypted in our database and are only decrypted at the moment they are needed to make API calls. You may request deletion of your data at any time by contacting us.

5. Deleting Your Data

To disconnect an Instagram or Facebook account, open the portal, go to Integrations and click Disconnect. This immediately deletes the stored access tokens for that account.

To delete your account and all associated data — posts, reports, metrics and tokens — email contact@wescalefor.com from the address registered on your account. Deletion is completed within 30 days and confirmed by email.

You may also revoke this app's access at any time from your Meta account settings (Settings → Business integrations), which stops all further data collection.

6. Cookies

On our waiting-list pages we ask before setting any advertising cookie. Your answer is kept in a first-party cookie, sf-consent, for 180 days. Only if you choose Accept do we load Google Ads, which may set cookies such as _gcl_au to measure whether our ads lead to sign-ups. If you choose Decline, nothing from Google is loaded. You can change your answer at any time with Cookie settings at the bottom of those pages; doing so also removes the Google Ads cookies set on our domain. Google may also set cookies on its own domains (such as doubleclick.net), which we cannot remove; you can delete them in your browser or through Google's own settings (see Google's privacy policy at policies.google.com).

7. Contact

For privacy inquiries: contact@wescalefor.com