Privacy Policy

Last updated: 13 July 2026

This Privacy Policy explains how ScopeDeck ("ScopeDeck", "we", "us", "our") collects, uses and protects personal data when you use the ScopeDeck website and application (the "Service").

1. Who we are

ScopeDeck is the data controller for personal data we collect about you as a user of the Service, such as your account details. Our data protection contact is dpo@scopedeck.app.

For personal data that you upload about your own clients when scoping work, you are the controller and we are the processor. Our obligations for that data are set out in our Data Processing Agreement.

2. The data we collect

• Account data: name, email address, password (stored hashed), and Space name.
• Billing data: your plan, billing contact and transaction records. Card payments are handled by

our payment provider, Stripe. We do not store full card numbers.

• Content data: the scopes, quotes, specifications, snippets, documents and client details you

create in the Service.

• Usage data: log data, device and browser information, and actions taken in the Service, used to

run, secure and improve it.

• Communications: messages you send us at hello@scopedeck.app, support@scopedeck.app or through a

contact form.

3. How we use your data and our lawful bases

• To provide the Service (contract): creating your account, running the app, generating PDFs and

enabling e-signature and collaboration.

• To take payment (contract): billing your chosen plan.
• To secure and improve the Service (legitimate interests): diagnostics, preventing abuse and

product improvement.

• To communicate with you (contract and legitimate interests): service messages. Marketing only

where you have consented, with an easy opt-out.

• To meet legal obligations (legal obligation): tax, accounting and lawful requests.

4. Sharing and sub-processors

We do not sell your personal data. We share it only with service providers who help us run ScopeDeck, under contract and only as needed. These currently include Stripe for subscription billing, and cloud hosting and infrastructure providers used to run and secure the Service. Our hosting is located in the EU and UK. A current list of sub-processors is kept in the Data Processing Agreement. Where data is transferred outside the UK or EEA, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or Addendum.

5. How long we keep it

We keep account and content data for as long as your account is active. After you close your account, we delete or anonymise personal data within a reasonable period, except where we must retain records to meet legal obligations such as billing records for tax purposes. You can export your work before you leave. See security.

6. Security

We use technical and organisational measures to protect personal data, including encryption in transit and at rest, tenant isolation between Spaces, access controls and regular backups. More detail is on our security page. No system can be guaranteed perfectly secure, but we work to protect your data and to notify you of any breach as required by law.

7. Your rights

Under UK GDPR you have the right to access, rectify, erase, restrict or object to processing, to data portability, and to withdraw consent where processing relies on it. To exercise any right, contact dpo@scopedeck.app. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

8. Cookies

We use only cookies that are strictly necessary to run the Service and keep you signed in. We do not currently use advertising cookies. If we add analytics or preference cookies, we will update this policy and provide a way to manage them.

9. Children

The Service is not intended for individuals under 18, and we do not knowingly collect their data.

10. Changes to this policy

We may update this policy from time to time. We will post the updated version here and, for material changes, notify you through the Service or by email.

11. Contact

Questions about this policy or your data: dpo@scopedeck.app or hello@scopedeck.app.