Privacy, in plain language.

Scandum is a small studio based in Hyderabad, India, building AI agents and automations for businesses. We are the people responsible for the data described here. The one address that reaches us is contact@scandum.com.

Nothing at all until you type something. There is no advertising pixel, no tracking cookie, and no cross-site profiling anywhere on this site. Concretely:

• The contact form. Your name, and whichever of email, mobile number, company and message you fill in. We also record which page or component the enquiry came from, so we know what you were reading when you wrote.
• The demo front desk. If you add an entry to the live booking board, we store the name you type, the slot, an optional note, and the IP address of the request. The IP is used for one thing: capping how many entries a single visitor can put on a public demo board. Other visitors only ever see your first name and last initial — never a phone number, never an IP.
• The demo waitlist. If you ask us to call you back, we record the mobile number you enter, the industry you picked, and which page you asked from. Nothing on this site places a call today — a person from our team does the calling, and the form says so. Where our own code writes a number to a log, it is masked to its first three and last two digits.
• Ordinary server logs. Our host records the usual request data — IP address, user agent, the URL asked for, the time — as every web server does.
• Aggregate page analytics. We use Vercel Analytics to count page views and see which pages people find useful. It is cookie-free and does not build a profile of you across sites.

We set no cookies. Two small items are stored locally on your device and never sent to us as identifiers: a flag under scandum-curtain that remembers you've already seen the opening animation, and, if you use the demo desk, a cancellation token under scandum-desk so that you — and only you — can remove the entry you made. Clearing your browser storage removes both.

To reply to you, to run the discovery call you asked for, and to keep a public demo from being flooded. That is the entire list. We do not sell data, we do not share it with advertisers, and we do not add you to a marketing list because you once filled in a form. If we ever want to send you something you didn't ask for, we'll ask first.

• Enquiries— for as long as we're in conversation, and afterwards in our email and enquiry records unless you ask us to delete them.
• Demo desk entries— these are a sandbox, not a system of record. An entry fades from the board about three hours after it's made, and the underlying record is dropped from storage within 48 hours.
• Server logs — kept for the retention window our hosting provider applies, which is a matter of days, not years.

We keep the list of third parties as short as we can. Today it is:

• Vercel — hosts this site and runs the analytics described above.
• Our email provider — because a reply to your enquiry is an email.
• Cal.com— only if you use the scheduling calendar embedded on the contact section. That is a third-party frame; what you enter there is governed by Cal.com's own privacy notice as well as this one. If you'd rather not, use the form.

Some of these providers process data outside India. We will also disclose information if a law or a court in a competent jurisdiction requires it.

Everything between your browser and this site travels over HTTPS. Access to enquiries is limited to the handful of people at Scandum who need it, and our hosting and email accounts are protected with multi-factor authentication.

Equally important is what we are not telling you. We hold no security certification — no ISO 27001, no SOC 2. Demo-desk records are stored by this application without application-level encryption at rest; encrypted-at-rest storage, formal audit logging, and documented backups are on our roadmap and are not in place today. Where the rest of this site mentions those, it marks them as planned. No system is perfectly secure, and we would rather set an honest expectation than a comfortable one.

Please don't send us anything sensitive — health records, identity documents, card numbers, passwords — through this website. Nothing here is designed to receive it.

Write to contact@scandum.comand ask us to show you what we hold, correct it, or delete it. We'll act on deletion requests within 30 days and confirm when it's done. You never have to give a reason. If you used the demo desk, you can also remove your own entry from the board yourself, from the same browser you made it in.

If we get this wrong and you're not satisfied with how we've handled it, tell us plainly — we'd much rather hear it from you than not.

This site is meant for people running businesses. We don't knowingly collect information from anyone under 18. If you believe a child has sent us something, write to contact@scandum.comand we'll delete it.

When this notice changes we'll change the date at the top. If a change materially affects what we do with information you've already given us, we'll tell the people it affects rather than leave it to be discovered.

One address, a real person on the other end: contact@scandum.com. We're in Hyderabad, India. Our terms of use sit alongside this notice.