This Privacy Policy describes how HardHat Scaling ("HardHat Scaling," "we," "us," or "our") collects, uses, and protects your information when you use our websites and services, including hardhatscaling.com and our client application at app.hardhatscaling.com (together, the "Services").
By using the Services, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Services.
Who We Are
Both hardhatscaling.com and app.hardhatscaling.com are owned and operated by the same company. HardHat Scaling is owned by Imperial Worldwide Assets Holding Limited ("Imperial Worldwide"), a holding company. Imperial Worldwide does not collect, share, sell, or distribute any data related to HardHat Scaling or its users — it exists solely as a holding company, and all data handling described in this policy is carried out by HardHat Scaling under this single ownership.
Information We Collect
We collect only the information we need to provide the Services:
- Contact information you provide directly, such as your name, email address, phone number, and business details when you fill out a form, book a call, or create an account.
- Account information used to sign in to app.hardhatscaling.com, including credentials and profile details.
- Google user data, described in detail in the section below, when you choose to connect your Google account.
- Usage information, such as basic technical logs (browser type, device, pages visited) used to keep the Services running reliably and securely.
Google User Data
Our application at app.hardhatscaling.com offers the option to connect your Google account. When you do, we request only the following scopes:
https://www.googleapis.com/auth/calendar.events— to view and manage events on your Google Calendar.openid— to securely verify your identity when you sign in with Google.email— to identify your account by its email address.
How we use Google Calendar data: we access your Google Calendar events solely to create bookings and appointments on your calendar and, where applicable, to generate Google Meet links for those events on the hosting person's calendar. That is the full extent of our use. We do not read, analyze, or process your calendar data for any other purpose.
We do not share, sell, rent, transfer, or disclose your Google user data to any third parties. We do not use it for advertising, and no humans read your data except with your explicit permission, where required for security purposes, or to comply with applicable law. Your Google data will always be handled securely, as described in the Data Security section below.
Limited Use disclosure: HardHat Scaling's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
You can revoke our access to your Google account at any time via your Google Account security settings. When you revoke access or delete your account, we delete the associated Google user data from our systems.
How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the Services;
- Create bookings, appointments, and meeting links you request;
- Communicate with you about your account, bookings, and support requests;
- Improve, secure, and troubleshoot the Services; and
- Comply with legal obligations.
Sharing of Information
We do not sell your personal data. We do not share your personal data with third parties for their own marketing purposes. Information is only disclosed to service providers strictly as necessary to operate the Services (for example, hosting infrastructure), under obligations of confidentiality, or where required by law.
Data Security
We take the security of your data seriously. All data is transmitted over encrypted connections (HTTPS/TLS). Sensitive data — such as passwords, authentication tokens, and access credentials — is encrypted at rest. General contact details such as names, email addresses, and phone numbers are stored securely with access restricted to what is needed to operate the Services. No method of transmission or storage is 100% secure, but we work to protect your information using industry-standard safeguards at all times.
Data Retention & Deletion
We retain personal data only for as long as needed to provide the Services or as required by law. You may request deletion of your data at any time by contacting us at the email below, and we will delete it within a reasonable timeframe. Revoking Google access (see above) also results in deletion of stored Google user data.
Children's Privacy
The Services are intended for businesses and are not directed to anyone under the age of 18. We do not knowingly collect personal information from minors.
Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. Continued use of the Services after changes take effect constitutes acceptance of the revised policy.
Contact Us
If you have any questions about this Privacy Policy or how your data is handled, contact us at takedowns@imperialworldwide.se.