Website Privacy Policy

ShapeScale

Website Privacy Policy

Effective March 16, 2026 | Applies to shapescale.com and related web properties

1. Scope of This Policy

This Website Privacy Policy explains how Shape Labs, Inc. (doing business as "ShapeScale") handles personal information collected through our websites — including shapescale.com, business.shapescale.com, and related subdomains and landing pages — when you visit, browse, make a purchase, or contact us.

If you have a ShapeScale account or take a body composition scan using a ShapeScale device, additional practices apply. Those are covered in our App & User Privacy Policy at shapescale.com/legal/app-privacy, which governs all account and scanning activity.

This Website Policy and the App & User Privacy Policy together cover all of ShapeScale's personal information practices. For account holders, both policies apply.

Privacy contact:privacy@shapescale.com | shapescale.com/legal/privacy-request

2. Who We Are

Shape Labs, Inc. (dba ShapeScale) is a Delaware corporation at 179 11th St, San Francisco, CA 94103. We make the ShapeScale body composition scanner and the software and cloud services that accompany it.

3. Information We Collect on the Website

3.1 Information You Provide

We collect information you give us directly through our website, including:

  • Contact and inquiry information: name, email address, phone number, and the content of messages sent through contact forms or our sales team;
  • Newsletter and marketing sign-ups: email address and communication preferences;
  • Purchase and checkout information: billing name, shipping address, email, and order details. Payment card data is processed directly by Stripe, Inc. and is not stored on ShapeScale systems;
  • SMS communications: if you provide a mobile phone number at checkout, we may send order status and delivery notification messages by SMS. You may opt out at any time by replying STOP to any message;
  • Business inquiry information: company name, role, and the details of any sales or demo request you submit.

3.2 Information Collected Automatically

When you visit our website we automatically collect:

  • Device and network data: IP address, browser type and version, operating system, referring URL, and device type;
  • Usage and analytics data: pages visited, time on page, links clicked, and navigation paths;
  • Cookies and similar technologies: see Section 5 for details.

4. How We Use Website Information

We use the information collected through our website to:

  • Respond to contact and sales inquiries;
  • Process purchases and send order confirmations and delivery notifications (including by SMS where you have provided a mobile number);
  • Send marketing and promotional emails to subscribers (you may opt out at any time);
  • Understand how visitors use our website and improve its content and navigation;
  • Detect and prevent fraud and unauthorized access;
  • Comply with applicable legal obligations.

We do not use website visitor data for decisions that have legal or similarly significant effects on individuals without a separate legal basis to do so.

5. Cookies and Tracking Technologies

We use cookies and similar technologies on our websites for the following purposes:

  • Essential cookies: required for checkout sessions, form submissions, and core site functionality. These cannot be disabled without impairing basic site features.
  • Analytics cookies: help us understand visitor behavior, such as page views, session duration, and navigation paths. We currently use analytics tools including those provided by third-party analytics providers.
  • Marketing and advertising cookies: used to measure the effectiveness of advertising campaigns and, where applicable, to serve relevant advertising. We do not use body scan data or health-adjacent metrics for advertising targeting.

You can manage cookie preferences through your browser settings. Most browsers allow you to refuse or delete cookies. Disabling essential cookies may impair site functionality. ShapeScale will honor Global Privacy Control (GPC) signals where required by applicable law.

6. How We Share Website Information

We do not sell personal information collected through our website.

We share website visitor information with:

  • Analytics providers: to understand site traffic and usage patterns;
  • Marketing and email platforms, including ActiveCampaign: to send newsletters and manage marketing communications to subscribers;
  • Payment processors, including Stripe, Inc.: to process checkout transactions;
  • CRM and sales tools: to manage business inquiries and sales relationships;
  • Advertising platforms: to measure campaign performance, subject to your opt-out rights under Section 7;
  • Professional advisors and authorities: where required by law or to protect rights and safety.

Where applicable law treats sharing with advertising or analytics partners as "sharing" or "sale" of personal information, you have the right to opt out. See Section 7.

7. Your Privacy Rights

Depending on your state of residence and applicable law, you may have rights to access, correct, delete, or obtain a copy of your personal information, and to opt out of certain uses and disclosures.

7.1 Do Not Sell or Share

ShapeScale does not sell personal information for money. To the extent that sharing with advertising or analytics partners constitutes "sharing" of personal information under applicable law, you may opt out via shapescale.com/legal/privacy-request or by emailing privacy@shapescale.com with subject line "Do Not Sell or Share Request." ShapeScale will also honor Global Privacy Control signals where legally required.

7.2 Other Rights

To exercise rights of access, correction, deletion, portability, or to limit use of sensitive personal information, visit shapescale.com/legal/privacy-request or email privacy@shapescale.com. Include your name, contact email, state of residence, and type of request. We respond within the timeframe required by applicable law.

7.3 California Residents

California residents have additional rights under the CPRA. Detailed California disclosures, including categories of personal information collected, purposes, and third-party recipients, are set out in our App & User Privacy Policy at shapescale.com/legal/app-privacy. The California consumer rights notice under Civil Code § 1789.3: the Complaint Assistance Unit of the Division of Consumer Services of the California Department of Consumer Affairs may be contacted at 1625 North Market Blvd., Suite N 112, Sacramento, CA 95834, or at (800) 952-5210.

8. Account Holders and Scan Users

If you have a ShapeScale account or use a ShapeScale scanner, your scan data, biometric data, account information, and associated privacy rights — including BIPA/CUBI state notices, CPRA sensitive PI disclosures, and retention schedules — are governed by our App & User Privacy Policy at shapescale.com/legal/app-privacy. Please read that policy in addition to this one.

9. Data Retention

We retain website visitor information only as long as necessary for the purposes described above:

  • Contact and inquiry records: up to 3 years after the inquiry closes, unless required longer for legal purposes;
  • Marketing subscriber data: until you unsubscribe or request deletion;
  • Purchase records: as required for tax, financial, and legal compliance, typically up to 7 years;
  • Analytics data: per the retention settings of our analytics tools, generally up to 26 months.

10. Children

Our website is not directed to children under 13. We do not knowingly collect personal information from children under 13 through our website. If you believe we have inadvertently collected such information, contact privacy@shapescale.com and we will delete it.

11. Security

We use appropriate technical and organizational measures to protect website visitor information against unauthorized access and disclosure. Payment transactions are secured by Stripe and transmitted using TLS encryption. No system is completely secure; we cannot guarantee absolute security.

12. Links to Other Sites

Our website may contain links to third-party websites and services. This Policy does not apply to those sites. We are not responsible for the privacy practices of third parties and encourage you to review their privacy policies before providing personal information.

13. Changes to This Policy

We may update this Website Privacy Policy from time to time. We will post the revised version and update the effective date. For material changes, we may provide additional notice on our website or by email. Your continued use of our website after the effective date constitutes acceptance of the updated Policy.

14. Contact Us

Shape Labs, Inc. (dba ShapeScale)

179 11th St, San Francisco, CA 94103

Privacy inquiries and rights requests: privacy@shapescale.com

Privacy request form: shapescale.com/legal/privacy-request

General: hello@shapescale.com

App & User Privacy Policy (account holders and scan users): shapescale.com/legal/app-privacy

Effective March 16, 2026.