Score
Features Pricing Services
Log in Book a Demo
Legal

Privacy Policy

Effective date: April 1, 2026  ยท  Last updated: April 11, 2026

Contents

  • Overview
  • Who We Are
  • Data We Collect
  • How We Use Your Data
  • Legal Basis
  • Data Sharing
  • Data Retention
  • Your Rights
  • International Transfers
  • Cookies & Tracking
  • Security
  • California Rights (CCPA)
  • Children's Privacy
  • Policy Changes
  • Contact Us
Section 01

Overview

Score ("Score", "we", "us", or "our") operates the sending control platform available at scorehq.co and related subdomains (the "Platform"). This Privacy Policy describes how we collect, use, disclose, and protect personal information when you visit our website, sign up for an account, or use our services.

By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please discontinue use of the Platform.

Score acts as a data controller for information we collect about visitors and account holders. For email recipient data that customers upload to send through our platform, Score acts as a data processor on behalf of the customer.

Section 02

Who We Are

Score is a sending control plane that helps high-volume teams manage email campaigns, provider routing, and deliverability from a single system. Our registered business address and primary point of contact for privacy-related matters is:

Score Digital LLC
Email: connect@scorehq.co
Website: scorehq.co

Section 03

Data We Collect

We collect information in the following ways:

Information You Provide Directly

  • Account registration: name, work email address, company name, role, and password when you create an account.
  • Billing information: payment method details, billing address, and invoicing preferences. Payment card data is handled by our PCI-compliant payment processor and is never stored on our servers.
  • Communications: messages sent to our support team, demo requests, and survey responses.
  • Platform configuration: SMTP provider credentials, sending domain settings, API keys, and routing rules you configure within the Platform.

Information Collected Automatically

  • Usage data: pages visited, features used, click patterns, session duration, and in-product actions taken.
  • Log data: IP addresses, browser type and version, operating system, referring URLs, and timestamps of requests.
  • Device identifiers: hardware model, unique device IDs, and network information.
  • Email delivery data: send volumes, delivery rates, bounce rates, open events, click events, spam complaint rates, and provider-level performance metrics.

Customer-Uploaded Data (Processor Role)

When you upload contact lists or recipient data to send campaigns through our Platform, Score processes that data solely on your behalf. This may include names, email addresses, and any custom attributes you attach. We do not sell or independently use this data for our own marketing purposes.

Data We Do Not Collect

We do not intentionally collect government identification numbers, financial account numbers, medical or health information, or other sensitive personal data. Please do not submit such information through our Platform.

Section 04

How We Use Your Data

We use personal information collected through the Platform for the following purposes:

Purpose Description
Service delivery Provisioning and operating your account, processing email sends, managing provider routing logic, and maintaining deliverability monitoring.
Billing & payments Processing subscription fees, generating invoices, and handling payment disputes.
Customer support Responding to help requests, diagnosing technical issues, and improving our support quality.
Product improvement Analyzing aggregated usage patterns to improve platform features, routing logic, and deliverability tools.
Security & fraud prevention Detecting and preventing abuse, unauthorized access, spam, and other harmful activity on the Platform.
Communications Sending transactional notifications (password resets, billing alerts) and, where you have opted in, product updates and newsletters.
Legal compliance Meeting obligations under applicable laws, responding to lawful requests, and enforcing our Terms of Service.
Section 05

Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, we rely on the following legal bases to process your personal data:

  • Contractual necessity: Processing required to deliver the services you have subscribed to, including account management, billing, and email delivery operations.
  • Legitimate interests: Analytics and product improvement, fraud detection, security monitoring, and business communications where our interests are not overridden by your rights.
  • Consent: Marketing emails and optional analytics cookies, where you have given clear and specific consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.
  • Legal obligation: Retaining records as required by applicable tax, financial, or regulatory law.
Section 06

Data Sharing & Disclosure

We do not sell personal information. We share data only in the following circumstances:

Service Providers & Sub-processors

We engage trusted third-party vendors to help operate the Platform. These providers have access only to the data needed to perform specific functions and are bound by contractual obligations to protect it. Categories include:

  • Cloud infrastructure and hosting providers
  • Payment processors (PCI-DSS compliant)
  • Customer support and helpdesk platforms
  • Product analytics and error monitoring tools
  • Email SMTP relay providers (as directed by your routing configuration)

Business Transfers

In the event of a merger, acquisition, asset sale, or restructuring, personal data may be transferred as part of that transaction. We will notify affected users before data becomes subject to a materially different privacy policy.

Legal Requirements

We may disclose personal information when required to do so by law, court order, regulatory authority, or in good faith belief that disclosure is necessary to protect the rights, property, or safety of Score, our customers, or the public.

With Your Consent

We may share information for other purposes where you have given explicit, informed consent.

Section 07

Data Retention

We retain personal data for as long as necessary to fulfil the purposes outlined in this policy, unless a longer period is required by law. Our general retention guidelines are:

Data Type Retention Period
Account and profile data Duration of account, plus 90 days after account closure
Billing and transaction records 7 years (legal and tax obligation)
Email delivery logs 90 days (rolling)
Support communications 3 years from last interaction
Usage and analytics data 24 months in identifiable form, then aggregated indefinitely
Customer-uploaded contact data Retained while account is active; deleted within 30 days of account closure or earlier upon written request

After retention periods expire, data is securely deleted or irreversibly anonymised.

Section 08

Your Privacy Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

  • Right of access: Request a copy of the personal data we hold about you.
  • Right to rectification: Ask us to correct inaccurate or incomplete data.
  • Right to erasure: Request deletion of your personal data where there is no overriding legal basis for us to retain it.
  • Right to restrict processing: Ask us to pause processing of your data in specific circumstances.
  • Right to data portability: Receive your data in a structured, commonly used, machine-readable format.
  • Right to object: Object to processing based on legitimate interests or for direct marketing purposes.
  • Right to withdraw consent: Where processing is based on consent, withdraw it at any time without affecting prior lawful processing.

To exercise any of these rights, email us at connect@scorehq.co. We will respond within 30 days. In some cases we may need to verify your identity before fulfilling a request. You also have the right to lodge a complaint with your local data protection authority.

Section 09

International Data Transfers

Score's infrastructure is primarily operated from the United States. If you access the Platform from the EEA, the UK, Switzerland, or other regions with data transfer restrictions, your personal data may be transferred to and processed in countries that may have different data protection standards than your home jurisdiction.

Where such transfers occur, we apply appropriate safeguards including:

  • Standard Contractual Clauses (SCCs) approved by the European Commission
  • Data Processing Agreements with all sub-processors
  • Adequacy decisions where applicable

You may request a copy of the safeguards in place for cross-border transfers by contacting us at connect@scorehq.co.

Section 10

Cookies & Tracking Technologies

Our website and Platform use cookies and similar technologies to provide functionality, measure performance, and improve your experience. The main categories we use are:

Category Purpose Required?
Essential Authentication, session management, security tokens, and load balancing. The Platform cannot function without these. Yes
Functional Remembering your preferences, language settings, and dashboard configuration. No
Analytics Understanding how users interact with our website and Platform to improve features and identify issues. No
Marketing Measuring the effectiveness of our ads and personalising content where applicable. No

You can manage non-essential cookies through your browser settings or our cookie consent tool. Disabling certain cookies may affect the functionality of the Platform.

Section 11

Security

We implement industry-standard technical and organisational measures to protect personal data against unauthorised access, loss, alteration, or disclosure. These include:

  • Encryption of data in transit (TLS 1.2+) and at rest (AES-256)
  • Role-based access controls and least-privilege principles
  • Regular security assessments and penetration testing
  • Audit logging of access to sensitive systems
  • Employee security training and confidentiality obligations

No method of transmission over the internet or electronic storage is completely secure. While we strive to protect your data, we cannot guarantee absolute security. If you suspect a security incident involving your account, contact us immediately at connect@scorehq.co.

Section 12

California Privacy Rights (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) grant you additional rights over your personal information:

  • Right to know: Request disclosure of the categories and specific pieces of personal information collected about you in the past 12 months.
  • Right to delete: Request deletion of personal information we have collected, subject to certain exceptions.
  • Right to correct: Request correction of inaccurate personal information.
  • Right to opt out of sale or sharing: Score does not sell or share personal information with third parties for cross-context behavioural advertising.
  • Right to limit use of sensitive information: Where applicable, limit how we use sensitive personal data.
  • Non-discrimination: You will not receive discriminatory treatment for exercising any of these rights.

To submit a California privacy request, email connect@scorehq.co with the subject line "California Privacy Request". We will respond within 45 days as required by law.

Section 13

Children's Privacy

The Score Platform is intended for business use by adults and is not directed at children under the age of 16. We do not knowingly collect personal information from minors. If you believe we have inadvertently received data from a child under 16, please contact us immediately and we will take prompt steps to delete it.

Section 14

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or Platform features. When we make material changes, we will:

  • Update the "Last updated" date at the top of this page
  • Notify active account holders by email at least 14 days before changes take effect
  • Display a prominent notice within the Platform dashboard where appropriate

Continued use of the Platform after changes take effect constitutes acceptance of the revised policy. We encourage you to review this page regularly.

Section 15

Contact Us

If you have questions, concerns, or requests related to this Privacy Policy or how we handle your personal data, please reach out:

Score Digital LLC โ€” Privacy
Email: connect@scorehq.co
Website: scorehq.co

We aim to respond to all privacy-related inquiries within 5 business days. For formal data subject requests under GDPR or CCPA, our response window is 30 days and 45 days respectively.

Score

Score helps high-volume teams manage campaigns, provider routing, and deliverability from one control layer.

Product

Features Pricing

Company

About Us Contact Us

Resources

Knowledge Base Blogs

© 2026 Score. All rights reserved.

Privacy Policy Terms of Service GDPR