ScopeFence Privacy Policy

Last updated: August 1, 2026

This Privacy Policy explains how ScopeFence ("ScopeFence," "we," "us," or "our") collects, uses, and shares information when you use our website and application (the "Service"). By using the Service, you agree to the collection and use of information as described here. This Policy should be read together with our Terms of Service.

1. Information We Collect

Account information. When you sign up, we collect your email address and any name you provide, and store it via our authentication provider (Supabase).

Content you provide. This includes project names, scope documents, change request titles and descriptions, prices you set, notes to clients, and any client names or client email addresses you choose to enter into the Service ("Your Content"). You are the one who decides what client information to enter — see Section 5 of our Terms of Service regarding your responsibility for that data.

Billing information. Subscription and payment details are collected and processed by our billing provider, Polar. We do not directly collect or store your full payment card details.

Usage data. We automatically collect limited technical information such as log data, device/browser information, and usage patterns (e.g., feature usage counts used to enforce plan limits), to operate, secure, and improve the Service.

Cookies. We use only the minimal cookies necessary for authentication and core functionality (e.g., keeping you signed in). We do not use advertising or third-party tracking cookies.

2. How We Use Information

We use the information described above to:

• Provide, operate, and maintain the Service, including enforcing plan usage limits
• Process subscription billing through Polar
• Send transactional emails (e.g., signups, invites, change request notifications, payment/plan updates) via Resend
• Generate AI-assisted content (scope documents, price suggestions, message rewrites) by sending relevant text to our AI provider
• Respond to support requests sent to admin@scopefence.com
• Detect, investigate, and prevent fraud, abuse, or violations of our Terms of Service
• Comply with legal obligations

We do not sell your information, and we do not use Your Content to train third-party AI models beyond what is necessary to generate the specific output you requested in that moment, to the extent our AI provider's policies allow us to control that.

3. Who We Share Information With

We share information only with the following categories of third-party service providers, solely as necessary to operate the Service:

These providers are contractually or by policy restricted to using your information only to provide services to us, not for their own independent purposes, except as their own privacy policies may separately disclose.

We may also disclose information if required by law, subpoena, or legal process, or if necessary to protect the rights, safety, or property of ScopeFence, our users, or the public.

If ScopeFence is acquired, merges with another company, or transfers assets (including upon formation of a business entity to operate the Service), your information may be transferred as part of that transaction, subject to this Policy or a policy at least as protective.

4. International Data Transfers

Our service providers may process and store data in the United States and other countries. By using the Service, you acknowledge that your information may be transferred to and processed in countries other than your own, which may have different data protection laws than your country of residence.

5. Data Retention

We retain your account information and Your Content for as long as your account is active. If you delete your account or request deletion by emailing admin@scopefence.com, we will delete or anonymize your personal data within a reasonable time, except where we are required to retain certain information for legal, billing, or fraud-prevention purposes.

6. Your Rights

Depending on your location, you may have rights to access, correct, export, or delete the personal information we hold about you. To exercise any of these rights, contact us at admin@scopefence.com. We will respond to verified requests within a reasonable time. We make a good-faith effort to honor these rights for all users regardless of location, though as an early-stage service we do not yet certify compliance with any specific regional framework (such as GDPR or CCPA) and recommend contacting us directly with any specific regulatory request.

7. Children's Privacy

The Service is not directed to, and we do not knowingly collect personal information from, anyone under 18. If we learn we have collected information from someone under 18, we will delete it.

8. Security

We take reasonable technical and organizational measures to protect your information, including relying on our infrastructure providers' security controls (e.g., Supabase's database security and row-level access policies). However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security of your information.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated "Last updated" date, and where practicable we will provide notice via email or in-app notification.

10. Contact

Questions about this Privacy Policy can be sent to admin@scopefence.com.

This document is a template drafted for ScopeFence's current pre-incorporation stage and does not constitute legal advice. It should be reviewed by a qualified attorney, particularly before ScopeFence actively markets to users in jurisdictions with specific data protection regimes (e.g., EU/GDPR, California/CCPA), and revisited once ScopeFence completes formal business entity registration.