All depends on what you need it to do. Assuming that scan-backup-data.sh should be executed, you'll probably want something like 750.

644 would mean no-one can execute the script (not even root).