1. What we collect

We collect the minimum data necessary to provide the service:

Email address - when you sign in or voluntarily provide it to save your work.
Scope inputs - the text you paste or upload (client briefs, emails, RFPs) while using ScopeIQ. These are sent to Anthropic's API to generate the analysis and are not stored beyond what's needed to return results to you.
Usage counts - a fingerprint (hashed IP + user-agent) used to enforce the free-tier limit. No personal data is stored in this record beyond your email if you provide it.
Saved scopes - if you create an account, your scope analyses, FRDs, and TRDs are stored in our database so you can retrieve them later.
Payment data - we do not store card numbers. Payments are processed by Lemon Squeezy; we receive only order confirmation metadata (email, plan, order ID).

2. How we use your data

To provide, operate, and improve ScopeIQ.
To enforce usage limits and manage subscriptions.
To send transactional emails (magic login links, receipts) - no marketing without explicit consent.
To detect abuse or misuse of the service.

3. AI processing - important

We do not use your inputs to train AI models.

Your client briefs and documents are processed by Anthropic's Claude API to generate scope analyses. This processing is subject to Anthropic's Privacy Policy. Anthropic does not use API inputs to train their models under their current commercial terms.

4. Third-party services

Anthropic API - processes your scope inputs to generate analysis output.
Supabase - hosts our database and authentication. Data is stored in the ap-northeast-1 region.
Lemon Squeezy - handles payment processing. We receive order metadata only.
Vercel - hosts the web application.

5. Data retention

Scope inputs sent for analysis are not persistently stored - only the structured output is saved (if you have an account).
Saved scopes (analyses, FRDs, TRDs) are retained for as long as you maintain an account.
Usage fingerprint records are retained for 90 days.
Payment records are retained for 7 years for accounting purposes.

6. Your rights (GDPR)

If you are in the EU or UK, you have the right to:

Access - request a copy of your data.
Rectification - correct inaccurate data.
Erasure - request deletion of your account and data.
Portability - receive your data in a machine-readable format.
Object - object to processing based on legitimate interests.

To exercise any right, email hello@getscopeiq.com. We will respond within 30 days.

7. Cookies

We use only functional cookies necessary for authentication (session tokens). We do not use tracking, advertising, or analytics cookies.

8. Contact

Questions about this policy: hello@getscopeiq.com

Data controller: Evoluz Global Solutions