Operational draft: This notice is intended for publication but should be reviewed by qualified US and EU privacy counsel before commercial reliance. In particular, Scryon's legal entity name, address, vendor list, transfer mechanism, retention schedule, and data-broker obligations require validation.
This Privacy Notice explains how Scryon ("Scryon," "we," "us," or "our") handles personal information through scryon.io, app.scryon.io, and the related B2B event-intelligence services (collectively, the "Service"). The Service is for business users aged 18 or older.
1. Scope and our roles
This section explains when Scryon is a controller versus a processor.
Scryon acts as a controller when it determines why and how to process account, website, product-usage, prospect, and independently sourced professional information. Scryon generally acts as a processor or service provider when it processes CRM records, CSV files, organizer attendee files, or other data submitted by a customer under that customer's instructions. Our Data Processing Addendum governs that customer data.
If a customer supplied your information, that customer is responsible for its instructions and privacy obligations. Contact the customer first when practical; we will support valid requests as required by contract and law.
2. Information we collect
This section lists the main categories of personal information we handle.
- Account and business information: name, business email, company, title, account credentials or authentication identifiers, preferences, and subscription or credit information.
- Customer content: target-account lists, contacts, opportunities, pipeline information, ideal-customer criteria, notes, organizer attendee files, and records imported from Salesforce, HubSpot, APIs, or CSV files.
- Professional and event information: business contact details, employer, title, public professional profile, company attributes, event participation, sponsorship, exhibitor, speaker, and organizer information.
- Technical and usage information: IP address, device and browser details, timestamps, pages and features used, searches, interactions, diagnostics, and security logs.
- Communications: support requests, feedback, sales communications, and other correspondence.
We do not intend the Service for consumer, health, biometric, precise-geolocation, financial-account, government-identifier, or other sensitive personal information. Customers must not submit such information unless Scryon expressly agrees in writing and appropriate safeguards are in place.
3. Sources of information
This section describes where personal information can come from.
Scryon aggregates information from customers, event organizers and event sources, public websites and professional profiles, company websites, public directories, APIs, and third-party business-data providers. We may infer likely event relevance, company fit, role, or professional interests from those records. Public availability does not eliminate privacy rights or our legal obligations.
Scryon does not create or independently verify every source record. Source attribution may be unavailable or impracticable when multiple sources contribute to a record. For indirect collection details, see our Business Data Notice.
4. How and why we use information
This section explains why we process data and the legal bases we rely on.
- Provide, authenticate, secure, support, and administer the Service and customer accounts.
- Import, match, deduplicate, classify, enrich, score, summarize, and export customer and business records.
- Identify relevant events, companies, and professional contacts and produce event intelligence.
- Process purchases, credits, requests, and service communications.
- Monitor performance, prevent abuse, troubleshoot, analyze optional website usage, and improve the Service.
- Comply with law, enforce agreements, resolve disputes, and protect rights, safety, and security.
Where the GDPR or UK GDPR applies, our legal bases may include performance of a contract; legitimate interests in providing and improving a secure B2B service, maintaining professional business data, preventing fraud, and communicating with business prospects; consent for non-essential analytics where required; and compliance with legal obligations. We balance our interests against the rights and reasonable expectations of affected people. You may object to legitimate-interest processing as described below.
5. AI, machine learning, scoring, and profiling
This section covers AI, scoring, and profiling used in the Service.
Scryon uses artificial intelligence and machine-learning models to classify, match, score, summarize, enrich, and otherwise process customer-provided and aggregated data. Inputs may be sent to model providers acting for Scryon. Provider retention and training treatment depends on the applicable provider, product, settings, and contract; Scryon does not promise that every provider has zero retention or excludes all training unless confirmed in writing for the applicable Service.
Scores, predictions, summaries, and inferred attributes may be inaccurate, incomplete, duplicated, stale, unavailable, or biased. They are intended to support business research, not to make decisions producing legal or similarly significant effects about individuals. Customers must independently verify outputs and must not use them for employment, credit, housing, insurance, healthcare, eligibility, or other high-impact decisions. Where applicable, you may object to profiling or request human review by emailing us.
6. How we disclose information
This section lists who may receive personal information.
We may disclose information to hosting, infrastructure, security, communications, analytics, CRM-integration, payment, support, professional-adviser, and AI-model providers that help operate the Service; to a customer that directed the processing; as required by law or to protect rights and security; or in connection with a financing, merger, acquisition, reorganization, or sale of assets subject to appropriate protections.
Current confirmed integrations and website providers include Salesforce, HubSpot, Slack, Google Analytics, and AWS-hosted deployment services. Inclusion as an integration does not necessarily mean the provider receives every category of information. See Subprocessors and Data Sources for the operational list.
Scryon does not sell personal information for money and does not use personal information for cross-context behavioral advertising or sensitive-data targeting. We do not knowingly share personal information for those purposes. Some US laws define "sale" or "sharing" more broadly; you may submit an opt-out request through Privacy Choices.
7. International transfers
This section covers transfers of personal information across borders.
Scryon and its providers may process information in countries other than where it was collected. Where required, Scryon will use an approved transfer mechanism, such as the 2021 EU Standard Contractual Clauses and the UK International Data Transfer Addendum, and supplementary safeguards appropriate to the transfer. The exact exporter, importer, data locations, and transfer mechanism must be confirmed for the applicable relationship. Contact us to request relevant transfer information.
8. Retention and security
This section explains how long we keep data and how we protect it.
We retain information only as reasonably necessary for the purposes described here, customer instructions, contractual requirements, legal obligations, dispute resolution, security, and suppression of opted-out records. Criteria include the account term, type and sensitivity of the data, source refresh cycles, customer deletion settings, backup cycles, applicable limitation periods, and legal requirements. Exact schedules vary and must be validated operationally.
We use reasonable administrative, technical, and organizational safeguards designed for the nature of the information and risks. No storage or transmission method is completely secure, and we do not guarantee absolute security.
9. Privacy rights
This section summarizes privacy rights and how to exercise them.
Depending on your location and subject to exceptions, you may request access, confirmation, correction, deletion, restriction, portability, or withdrawal of consent; object to processing, including direct marketing and certain profiling; opt out of sale, sharing, targeted advertising, or qualifying profiling; and appeal a denied request. You may also complain to your local supervisory authority. EEA authorities are listed by the European Data Protection Board, and the UK authority is the Information Commissioner's Office.
Submit requests to privacy@scryon.io using the instructions on Privacy Choices. We may reasonably verify your identity and authority. Authorized agents may act where permitted, but we may request proof of authorization and direct identity confirmation. We will not discriminate against you for exercising applicable rights. If we deny a request, reply to our decision with "Privacy Appeal" and the reasons for your appeal.
When we honor an objection or deletion request concerning independently sourced business data, we may retain limited information on a suppression list so the record is not reintroduced from another source.
10. Contact, children, and updates
This section explains how to reach us and how we update this notice.
The Service is not directed to children or anyone under 18, and we do not knowingly collect their personal information. Contact us if you believe such information was submitted.
Privacy questions and requests: privacy@scryon.io
General inquiries: hello@scryon.io
Scryon's complete legal entity name and physical address are not yet stated because they require confirmation. We will update this notice before relying on it where an address or representative is legally required.
We may revise this notice. We will update the effective date and version and provide additional notice when required. Related documents include our Terms of Service, Cookie Policy, Acceptable Use Policy, and Subprocessors and Data Sources.