Privacy Policy

This Privacy Policy explains how ScopeCommandHQ ("we") collects, uses, and shares information when you use our website and Service.

1. Information We Collect

Account data: name, email, company, phone (optional).
Payment data: processed by Stripe. We do not store card numbers or CVCs. We store only a Stripe customer/subscription/charge reference.
Claim content: project info, measurements, photos, carrier scopes, and documents you upload or enter. Stored on our hosting provider's infrastructure (Vercel) and processed by AI providers (Anthropic).
Device + usage data: browser, OS, IP, pages viewed, actions taken — collected via standard analytics.

2. How We Use It

Operate and provide the Service (draft generation, PDF export, share links).
Process payments and issue receipts (via Stripe).
Improve the Service (aggregate usage metrics, error tracking).
Send operational emails (receipts, critical updates).
Respond to support requests.

3. AI Processing

When you generate an estimate or supplement, your project information, measurements, and notes are sent to our AI provider (Anthropic) via a server-side API call to produce the draft. Anthropic's data-use policy governs that provider-side processing. We do not use your content to train public models.

4. Sharing

We share information only with:

Stripe (payment processing)
Anthropic (AI draft generation)
Vercel (hosting)
Law enforcement when legally required
A successor entity in a merger, acquisition, or asset sale

We do not sell your personal information.

5. Cookies

We use minimal cookies + localStorage for session state, account persistence, and draft storage on your device. No third-party advertising cookies are set by us.

6. Data Retention

Account data is retained while your account is active. Generated documents are stored on your device (localStorage) by default. You may delete drafts at any time from the app. Stripe records follow Stripe's retention schedule. Support and billing records are retained up to 7 years.

7. Your Rights

Depending on your jurisdiction (CCPA, GDPR, etc.), you may have rights to access, delete, correct, or port your personal data. Contact us at privacy@scopecommandhq.com to make a request. We respond within 30 days.

8. Security

We use HTTPS for all data in transit, server-side secrets stored encrypted at rest (Vercel env vars), and industry-standard authentication for access to our infrastructure. Payment data never touches our servers (Stripe handles it entirely).

9. Children

The Service is for professional contractors and is not directed at children under 16. We do not knowingly collect data from children.

10. International Users

The Service is operated in the United States. If you access it from outside the U.S., you consent to your data being transferred to and processed in the U.S.

11. Changes

We may update this Policy. Material changes will be posted here with a new "Last updated" date.

12. Contact

Privacy questions: privacy@scopecommandhq.com.