Privacy Policy

Account information. When you create an account, we collect your email address and, optionally, your agency name, service type, and logo. If you sign in via Google, we receive your name and email from Google's OAuth service.

Project and SOW data. We store the project information, intake form responses, Statement of Work content, and change order details you create while using the product. This data is associated with your account and is never shared with third parties.

Scope Guardian emails. When you forward client emails to your guardian address, we receive, process, and store the email content to generate scope check verdicts. Raw email text is stored in association with your project for audit purposes.

Signing data. When a client signs a document through the portal, we collect their name, email address, and IP address as part of the audit trail.

Usage data. We collect standard server logs including IP addresses, browser type, pages visited, and timestamps. This data is used for security monitoring and product improvement.

Your data is stored on Supabase infrastructure (PostgreSQL database and file storage). All data is encrypted at rest and in transit using industry-standard TLS. Row-level security policies ensure that each user can only access their own data.

Generated PDFs are stored in private storage buckets and accessed only via time-limited signed URLs. No PDF is publicly accessible without a valid token.

We retain your account data for as long as your account is active. If you cancel your subscription, your data remains accessible during any remaining paid period and is retained for 90 days thereafter, after which it is permanently deleted.

Signed SOW documents and change orders are retained indefinitely while your account is active, as they may be required for legal or contractual purposes. You may request deletion at any time by contacting privacy@scopeshieldapp.com.