Operational draft: This notice is designed to support GDPR and UK GDPR Article 14 transparency for indirectly collected professional information. Counsel must validate Scryon's entity identity, address, EU or UK representative requirements, source and vendor inventory, first-contact notice process, retention, legitimate-interest assessment, and data-broker registration obligations before commercial reliance.
1. Who this notice is for
This section explains who this notice is written for.
This Business Data Notice applies if Scryon holds professional or event-related information about you that it did not obtain directly from you. This can include attendees, speakers, sponsors, exhibitors, organizers, employees, founders, sales or marketing professionals, and other business contacts.
Scryon ("we," "us," or "our") provides B2B event intelligence through scryon.io and app.scryon.io. We may act as an independent controller for professional information we source and organize for our Service. We may instead act only as a processor when a customer uploads or directs our handling of your information. In that case, the customer controls the purpose and should provide its own notice.
2. Categories of data and sources
This section lists categories of professional data and typical sources.
We may process your name, business email or telephone number, employer, job title, seniority, department, public professional profile URL, company attributes, professional interests, location at a business level, event participation or likely relevance, speaker, sponsor, exhibitor or organizer role, and source or refresh metadata.
Sources may include:
- public event, organizer, sponsor, exhibitor, speaker, company, and professional-profile websites;
- public directories, registries, press releases, announcements, and other internet sources;
- event organizers, event platforms, APIs, and attendee or exhibitor files;
- Scryon customers and their CRM records, CSV uploads, target-account lists, and corrections; and
- third-party business-contact, company, event, and enrichment providers.
We aggregate records across sources and may not preserve a one-to-one source for every field. If you ask, we will provide available source-category or specific-source information unless disclosure would violate another person's rights or applicable law. Public availability does not remove your privacy rights.
3. Purposes and legal bases
This section explains why we process this data and on what legal bases.
We use professional information to create and maintain business and event records; identify relevant companies and contacts; match customer criteria to events, exhibitors, sponsors, speakers, or attendees; enrich and deduplicate records; provide research and event intelligence; correct and secure the Service; communicate about the Service where lawful; comply with law; and honor objections and suppression requests.
Where the GDPR or UK GDPR applies, we generally rely on legitimate interests under Article 6(1)(f): operating a B2B event-intelligence service, helping organizations identify professionally relevant events and business contacts, maintaining accurate records, preventing fraud, and supporting proportionate business communications. We may rely on legal obligation where required and consent where a particular activity requires it.
Legitimate-interest balancing
Our interests are commercial but relate to professional roles and event participation rather than private life. We consider the source, public or business context, data sensitivity, reasonable expectations, intended B2B use, impact, accuracy risk, transparency, customer restrictions, security, opt-out rights, and suppression. We do not intend to collect sensitive personal data, target sensitive traits, or support decisions producing legal or similarly significant effects. We conclude that these interests may justify proportionate processing where safeguards are applied, but we reassess when context or risk changes.
4. AI, scoring, and inferred information
This section covers AI inferences and scoring on professional data.
Scryon uses AI and machine-learning models to classify, match, score, summarize, enrich, and otherwise process professional, company, customer, and event data. We may infer likely company fit, event relevance, professional function, or business interests from source records.
These inferences and outputs may be inaccurate, incomplete, duplicated, stale, unavailable, or biased. They are intended to assist human business research, not to determine employment, credit, housing, insurance, healthcare, education, eligibility, or access to essential services. We do not intend to make solely automated decisions that produce legal or similarly significant effects about you. You may object to profiling and ask for correction or human review.
5. Recipients and international transfers
This section lists recipients and cross-border transfers.
Professional information may be made available to authorized Scryon business customers according to Service controls and their agreement. We may also disclose it to providers supporting hosting, infrastructure, security, communications, analytics, customer support, CRM integration, payment, and AI-model processing; to advisers and authorities; or in a business transaction subject to appropriate protection.
We do not sell personal information for money or use it for cross-context behavioral advertising or sensitive-data targeting. Because some US laws define "sale" broadly, you may still opt out of any qualifying disclosure through Privacy Choices.
Recipients may process data outside your country. Where required, we use an approved mechanism such as adequacy decisions, the 2021 EU Standard Contractual Clauses, or the UK transfer addendum, plus appropriate supplementary safeguards. Exact locations and mechanisms require validation. See Subprocessors and Data Sources.
6. Retention and accuracy
This section explains how long we keep professional data.
We retain professional information while reasonably useful for the purposes above, subject to source-refresh cycles, customer instructions, account terms, data sensitivity, legal obligations, disputes, and suppression needs. Exact schedules require operational validation.
Scryon does not create or independently verify every record. Business information changes frequently, and records may be inaccurate, incomplete, duplicated, or stale. Customers must independently verify information before acting. You can help us correct or remove a record using the process below.
7. Your rights, correction, and suppression
This section summarizes your rights and how to request suppression.
Depending on your location and subject to exceptions, you may request access, source information, correction, deletion, restriction, portability, or human review; object to legitimate-interest processing, direct marketing, or profiling; opt out of qualifying sale, sharing, targeted advertising, or profiling; withdraw consent; and appeal a denial. You may complain to your local data-protection authority.
Email privacy@scryon.io with your name, professional email or profile URL, the request, and enough context to locate the record. Do not send sensitive identity documents unless requested through a secure method. We may reasonably verify identity and authority before acting.
If we uphold an objection or deletion request, we may retain a minimal suppression record, such as a hashed or normalized identifier and request date, solely to prevent your information from being reintroduced from another source. We will also take reasonable steps regarding recipients where required by law. Suppression cannot guarantee removal from independent public websites, customer systems, or third-party sources that Scryon does not control.
If we deny a request, reply with "Privacy Appeal" and explain why you believe the decision should be reconsidered. Authorized agents may submit requests where permitted, subject to proof of authority and identity verification.
8. Controller contact and updates
This section explains how to contact Scryon about this notice.
Controller: Scryon
Privacy email: privacy@scryon.io
General email: hello@scryon.io
Scryon's complete legal entity name, physical address, and any required EU or UK representative are not yet stated because they require confirmation. This notice must be updated before those details are legally required for reliance.
We may revise this notice and will update its effective date and version. For broader information, see our Privacy Notice, Privacy Choices, Acceptable Use Policy, and Subprocessors and Data Sources.