Legal

Privacy policy

Effective 22 August 2026

ScopeSignal is designed to help independent professionals identify and price work outside an agreed project scope. This policy explains the data the service processes and the choices available to you.

Information we collect

We collect account details, business preferences, project scopes, client requests, uploaded contract text, change orders, product usage events, billing status, and authentication records. If you sign in with Google, we receive the basic account identity you authorize. Payment card data is handled by Stripe and is not stored by ScopeSignal.

How we use information

We use this information to operate the product, analyze scope requests, create change orders, enforce plan limits, secure accounts, provide support, improve reliability, and meet legal obligations. Project content is sent to the configured AI provider only when AI is enabled; otherwise analysis uses the local deterministic engine.

Storage and separation

Application records are stored in the configured managed SQL database and keyed to the authenticated account. Uploaded files are processed in memory; extracted text and structured results are stored for the account, while the original file is not retained by the application.

Service providers

Depending on configuration, ScopeSignal uses Turso/libSQL for data storage, Stripe for billing, Google for optional authentication, and OpenRouter for optional AI processing. These providers process data under their own terms and privacy policies.

Retention and your choices

We retain account data while the account is active and as needed for security, billing, and legal records. You may request access, correction, export, or deletion by contacting the operator address configured for your deployment. Browser theme and authentication state may be stored locally on your device.

Security and changes

ScopeSignal uses password hashing, scoped authorization checks, rate limits, security headers, expiring sessions, validated uploads, and signed Stripe webhooks. No online system can guarantee absolute security. Material policy changes will be posted here with a revised effective date.