Privacy Policy

1. What we collect

Account data: your name, email, company name, and password (stored as a one-way hash, never in plain text).

Business data you enter: job records, client names and contact information, cost estimates, payment records, change orders, and subcontractor contact information. This is your data and your clients'/subs' data, entered by you.

AI drafting inputs: when you use a drafting feature (client updates, sub scope summaries, walkthrough summarization), the relevant job details are sent to Anthropic's API to generate a draft. See Section 4.

Billing data: payment card details are handled entirely by Stripe — we never see or store your card number. We retain your Stripe customer ID and subscription status.

Card issuing-country: to confirm eligibility for the Service (currently limited to customers with a US-issued card), we check the issuing country of your payment card against Stripe's own records — both when you subscribe and if you ever update your card afterward. This check happens live each time; we don't store the country code in our own systems, and we never see or store the card number itself.

Usage data: basic logs (timestamps, IP address, browser type) for security and debugging.

2. What we don't do

We do not sell your data. We do not use your business data or your clients' data to train AI models. We do not share your data with third parties except the service providers listed in Section 4, who process it solely to help operate the Service.

3. How we use it

To operate the Service, respond to support requests, send billing and account-related emails, confirm eligibility for the Service based on your payment card's issuing country, and improve the product. We do not send marketing email without a clear opt-in.

4. Subprocessors (third parties who process data on our behalf)

• Anthropic (api.anthropic.com) — processes the text you submit to AI drafting features, solely to generate the requested draft. Anthropic retains API inputs and outputs for 30 days by default, after which they are automatically and permanently deleted. Under standard commercial API terms, this data is never used to train Anthropic's models.
• Supabase — stores all account and business data.
• Vercel — runs the application.
• Stripe — processes payments and stores payment methods.
• Resend — sends transactional email (account welcome, password reset) on our behalf.
• Cloudflare (R2 object storage) — stores the files you attach to a job, and holds our nightly backup of the whole database, which includes a copy of those files. These are two separate buckets, and neither one is publicly accessible: every file is served only through an authenticated request to the Service. Cloudflare holds these objects as a storage provider only; it does not read them or use them for any other purpose.
• Sentry — receives error reports from the application so we can find and fix faults. An error report is built from a fixed set of technical fields — the route pattern, the HTTP method, the status code, and the stack trace — and any free text in it is passed through a redactor before it is sent. Sentry's own default collection of personal data is switched off. We do not send customer names, email addresses, phone numbers, addresses, job names, money figures, photographs, or document names in an error report.

5. Data retention, backups, and deletion

Business data is retained for as long as your account is active — canceling your subscription alone doesn't delete anything; it just locks access until you reactivate or delete the account yourself. If you delete your account from Settings, your job, client, and sub data is deleted immediately, not after a waiting period. The underlying account and billing records (kept for payment recordkeeping) are retained for 30 days after that before being permanently purged — that window exists for our records, not as a recovery or export option for you. You can request deletion at any time by contacting support@scopeflow.pro.

Backups keep copies for a while after you delete. Deletion takes effect in the live database straight away, but it cannot reach backups that were already taken, so copies of your data go on existing in them until each one ages out. There are two kinds. Supabase, our database host, keeps point-in-time recovery for the last 7 days, written every 2 minutes, so until a moment passes out of that window the database can be restored to it. We also take our own nightly backup of the whole database, encrypted, and keep the most recent 30 nights in Cloudflare R2 — so a copy of your data is gone from those once the last night holding it has aged out, which is up to 30 days after you delete. Backups exist only to bring the Service back after a failure. We do not use them to look at an individual account, and we do not restore from them at one customer's request.

Where your data is stored. Everything is held in North America, and everything except the two file buckets is in a named United States region. The database is hosted by Supabase in us-east-2 (Ohio), which is also where its point-in-time recovery is kept. The application runs on Vercel in cle1 (Cleveland, in that same us-east-2 region). Transactional email goes through Resend in us-east-1. Error reports are received by Sentry in the United States. The files you attach to a job and the nightly backups are stored by Cloudflare R2 in two buckets, the documents bucket set to Cloudflare's Eastern North America location and the backups bucket to its Western North America location. Cloudflare treats those settings as a preference for where it places a bucket rather than a commitment to a particular country, so for those two we can tell you the region — North America, which also covers Canada and Mexico — and not the United States specifically. If you need a contractual guarantee that a given file never leaves the United States, write to support@scopeflow.pro before you upload it.

6. Security

We use industry-standard practices — encrypted connections (HTTPS), hashed passwords, tenant-isolated data access, and single-use, time-limited tokens for password resets (each one expires automatically and stops working the moment it's used) — but no system is perfectly secure, and we can't guarantee absolute security of information you transmit to us.

7. Your rights

Depending on your location, you may have rights to access, correct, or delete your personal data, or to receive a copy of it. Contact support@scopeflow.pro to exercise these rights.

8. Children's privacy

The Service is intended for business use by adults and is not directed at children. We do not knowingly collect data from anyone under 18.

9. Changes to this policy

We'll notify you by email or in-app notice of material changes before they take effect.

10. Contact

support@scopeflow.pro

Last updated: September 19, 2026.