This policy explains what personal data ScopeKit collects when you use ScopeKit, why, and the choices you have.
What we collect
- Account data: your email address and a password. Passwords are stored only as a secure hash by our authentication provider.
- Business profile: the business name, contact email, website and logo you choose to add.
- Proposal content: client briefs, scope, pricing and any client names you enter.
- Billing status: if you subscribe, we store your plan status and Paddle customer and subscription IDs. We never receive or store your card details.
- Technical data: standard server logs (such as IP address and request time) kept by our hosting provider for security and reliability.
How we use it
- To provide the service: sign you in, save your proposals and generate PDFs and share links.
- To manage your plan and enforce plan limits.
- To send essential account emails, such as sign-up confirmation and password resets.
- To keep the service secure and fix problems.
We do not sell your data, use it for advertising or use your proposal content to train AI models.
Cookies
ScopeKit uses only the cookies needed to keep you signed in. We do not use analytics or advertising cookies.
Sharing
Your proposals are private until you create a share link. Anyone with that link can view the proposal until you switch sharing off.
We use these service providers, who process data on our behalf:
- Supabase — database, authentication and file storage (hosted in Singapore).
- Vercel — application hosting.
- Paddle — payments, as merchant of record. Paddle collects payment details directly under its own privacy policy.
Retention and your rights
We keep your data while your account exists. Deleting a proposal removes it immediately. You can ask us to access, correct, export or delete your data at any time; deleting your account removes your profile, proposals and files. Billing records held by Paddle are retained as required by law.
Contact
Questions about privacy? Contact us.