Privacy Policy

1. Who we are

This website, scadable.com, is operated by Ali Rahbar, carrying on business as SCADABLE(“SCADABLE,” “we,” or “us”), a sole proprietorship based in Ontario, Canada. Our mailing address and Privacy Officer contact details are at the bottom of this policy.

This policy covers the marketing website only. Our product services at app.scadable.com and docs.scadable.com have their own privacy terms linked from those properties.

2. What we collect

This site is a static marketing page. We collect very little:

• Server access logs. When your browser requests a page from scadable.com, our hosting infrastructure records the IP address, user-agent string, timestamp, URL requested, and HTTP referrer. This is standard web-server behaviour and is used for security, abuse prevention, and debugging.
• Cloudflare bot-mitigation cookie. Cloudflare sets a short-lived cookie named __cf_bm (about 30 minutes) to distinguish humans from automated bots. This cookie is strictly necessary for site security. It is not used for advertising or analytics.
• Email content. If you email us at any SCADABLE address (for example, [email protected]), we store your message and email address to reply and to keep a record of our correspondence.
• Google Analytics 4. We use Google Analytics 4 to understand how people use the site, what content lands, and where visits come from. Your IP address is anonymized before storage (the last octet is truncated). Two cookies are set: _ga (about 14 months) and _gid (about 24 hours). We do not use Google Ads, advertising pixels, session-replay tools, or behavioural retargeting.

3. Why we collect it (lawful basis)

Our lawful basis for processing (for readers in the EU, UK, or Quebec) is our legitimate interests in operating a secure website, preventing abuse, and corresponding with people who contact us.

4. Third parties who process your data

We keep this list short and honest. The following third parties may process information about your visit:

• Cloudflare, Inc. (United States) — CDN, DDoS protection, and bot mitigation. Cloudflare receives your IP address, user-agent, and the URL you request, and sets the strictly-necessary __cf_bm cookie. Cloudflare’s privacy notice.
• DigitalOcean, LLC (United States) — hosting. Our origin web server runs on DigitalOcean App Platform and writes standard HTTP access logs. DigitalOcean’s privacy policy.
• Brandfetch AG (Switzerland / EU) — serves our logo image from cdn.brandfetch.io. Loading the logo sends your IP address, user-agent, and referrer to Brandfetch. Brandfetch’s privacy policy.
• Google Workspace (Google Ireland Limited / Google LLC) — email. Messages sent to any SCADABLE address are received and stored via Google Workspace. Google’s privacy policy.
• Cal.com, Inc. (United States) — external scheduling. When you click the “Let’s talk” link you leave our website and book directly on Cal.com, which becomes the controller of any information you submit there. Cal.com’s privacy policy.
• Google Analytics (Google LLC / Google Ireland Limited) — site analytics. Receives your anonymized IP, page views, referrer, and the custom events listed in section 2. We do not enable Google Signals, cross-device identity, or advertising features. Google’s privacy policy.

Fonts. We use the Roboto typeface. Font files are downloaded at build time and served from our own servers. Your browser does not contact Google to load fonts.

Cross-border notice (PIPEDA). Several of the processors above are located in the United States. While your data is in the United States it may be accessible to US authorities under US law, including national-security and law-enforcement processes.

5. How long we keep it

• Server access logs: up to 90 days.
• Cloudflare __cf_bm cookie: about 30 minutes, on your device.
• Email correspondence: for as long as reasonably needed to respond to you and keep a record of the conversation.

6. Your rights

Depending on where you live, you have the right to:

• Access the personal information we hold about you.
• Ask us to correct inaccurate information.
• Ask us to delete information (where applicable law allows).
• Withdraw consent to ongoing processing.
• Ask us to transfer your information (where portability rights apply under Quebec Law 25 or GDPR).
• Lodge a complaint with your data-protection authority: the Office of the Privacy Commissioner of Canada, the Commission d’accès à l’information du Québec, or your national supervisory authority in the EU or UK.

To exercise any of these rights, email our Privacy Officer at the address below. We respond within 30 days (PIPEDA and Law 25) or one month (GDPR).

7. Security

We use HTTPS everywhere, keep our dependencies up to date, and follow common-sense operational practices. No system is perfectly secure, and we don’t claim otherwise.

8. Children

This site is not directed at children under 16, and we do not knowingly collect information from them.

9. Changes to this policy

If we change this policy, we will update the “Last updated” date at the top. Material changes will be flagged by a banner on the site for at least 30 days.

10. Contact us

Questions, requests, or complaints about this policy or your personal information:

• Privacy Officer: Ali Rahbar
• Email: [email protected] (subject line: “Privacy”)
• Mailing address: Ali Rahbar, c/o SCADABLE, 706 Brookmill Pl, Waterloo, Ontario N2V 2P1, Canada

This policy is provided for transparency. It is not a contract and does not create any rights beyond those granted by applicable law.