Skip to content
ScalePoint VenturesStart free Quick Scan

ScalePoint Ventures Oy

Privacy Policy — Venture Validation

Last updated: 11 November 2026

1. Controller

ScalePoint Ventures Oy, Almavägen 26, 65610 Mustasaari, Finland · Business ID 3620767-9 · info@scalepoint-ventures.com. This policy covers ideas.scalepoint-ventures.com ("ScalePoint Startup OS · Venture Validation"). The general privacy policy of scalepoint-ventures.com applies to our main website.

2. What we process

  • Quick Scan: your idea description and optional context (target market, country, stage), email address, optional name and phone number, your consent choices, date and time.
  • Validation Report: in addition, order and payment status, the amount paid, your name and email as provided at checkout, the generated report and your withdrawal-waiver confirmation. Card details are entered directly at Stripe; we never see them.
  • Technical data: IP address (processed by our hosting provider for delivery and security; we store only a one-way hashed value to prevent abuse), browser type, request time and error logs.

3. Purposes and legal bases

  • Providing the Quick Scan and the Validation Report, including emailing your results and report — Art. 6(1)(b) GDPR (contract).
  • Contacting you about your results, as agreed in the form — Art. 6(1)(a) GDPR (consent, revocable at any time).
  • Occasional founder insights by email, only if you ticked the optional box — Art. 6(1)(a) GDPR.
  • Abuse prevention, security, fair-use limits — Art. 6(1)(f) GDPR (legitimate interest in a secure, available service).
  • Accounting and tax obligations — Art. 6(1)(c) GDPR.

4. Recipients and processors

We use carefully selected service providers acting on our instructions under data processing agreements:

  • Website hosting and content delivery (Lovable / Cloudflare).
  • Database, file storage and server functions (Supabase).
  • AI research and analysis provider that generates the scans and reports from your idea using AI models and live public sources; its AI providers process data under API terms that exclude use for model training.
  • Email (Google Workspace) for sending your results and reports.
  • Payments: Stripe Payments Europe Ltd. processes payment data as an independent controller; see stripe.com/privacy.

Some providers may process data outside the EU/EEA; such transfers are safeguarded by the EU-U.S. Data Privacy Framework and/or EU Standard Contractual Clauses. We never sell your data.

5. Cookies and analytics

This site uses only technically necessary storage (for example, to remember your scan in this browser session). We use no analytics, advertising or tracking cookies and no third-party tracking scripts. Fonts are served from our own domain. If we ever introduce analytics, we will ask for your consent first.

6. Retention

Quick Scan data is kept for up to 24 months after your last interaction, unless you ask us to delete it earlier. Validation Reports and order data are kept for the duration of our contractual relationship and as long as required by Finnish accounting and tax law (generally up to 10 years for accounting records). Hashed abuse-prevention data is deleted after 30 days.

7. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and objection, and to withdraw consent at any time with effect for the future. Contact info@scalepoint-ventures.com. You may also lodge a complaint with a supervisory authority; in Finland: Office of the Data Protection Ombudsman, tietosuoja.fi.

8. Security

We use encryption in transit, access controls, row-level security and private, unguessable links for reports. Please keep your private report link confidential.

9. Changes

We will publish updates on this page with a new date.