Privacy Policy — ScopeKit

ScopeKit ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application and related services (collectively, the "Service").

1. Information We Collect

Account Information

When you register for ScopeKit, we collect your name, email address, and password (stored in hashed form). If you update your consultant profile, we also store your company name, phone number, website, and address.

Project Data

When you use the Service to create projects, we collect and store the client information, business requirements, and analysis data you enter. This includes client names, industry details, regional information, and functional requirements.

Usage Data

We automatically collect certain information when you access the Service, including your IP address, browser type, operating system, referring URLs, and pages visited. This data helps us improve the Service.

2. How We Use Your Information

To provide, maintain, and improve the Service
To create and manage your account
To process and store your projects and analyses
To generate documents (reports, proposals) on your behalf
To send you service-related communications (e.g., email verification, password reset)
To respond to support requests
To detect and prevent fraud or abuse

3. AI Processing

ScopeKit uses third-party AI services (Anthropic Claude) to process client descriptions and generate requirement analyses. When you use the AI intake feature, your project description is sent to our AI provider for processing. We do not use your data to train AI models. Our AI provider's data handling is governed by their own privacy policies.

4. Data Sharing

We do not sell your personal information. We may share data with:

Service providers: Third-party companies that help us operate the Service (hosting, email delivery, AI processing). These providers are contractually obligated to protect your data.
Legal requirements: When required by law, subpoena, or other legal process, or to protect our rights, privacy, safety, or property.

5. Data Security

We implement industry-standard security measures to protect your data, including encrypted data transmission (TLS/SSL), hashed passwords, and access controls. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your account and project data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where we are required to retain it for legal or legitimate business purposes. Temporary files (generated documents) are automatically cleaned up within 2 hours of creation.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data
Object to or restrict certain processing
Export your data in a portable format

To exercise these rights, contact us at privacy@scopekit.com.

8. Cookies

ScopeKit uses essential cookies for authentication and session management. We do not use advertising or tracking cookies. Session cookies are automatically deleted when you close your browser or when your session expires.

9. Children's Privacy

The Service is not intended for individuals under the age of 16. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page with a revised "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy, please contact us at: privacy@scopekit.com