Legal

Privacy Policy

Last updated 27 September 2026

Plain-language draft. Written to describe what the software actually does. Not legal advice, and not reviewed by a lawyer — have it checked before relying on it for a compliance requirement.

The short version

No analytics, no advertising pixels, no third-party trackers — on the site or in the app.
We store your email, a hashed password, your business profile and the proposals you choose to save.
Card details never reach us. Stripe handles payment and holds that data.
Nothing is sold, rented or used for advertising, and nothing is used to train machine-learning models.
Email us and your account and data get deleted.

What we collect

If you never make an account

Nothing is sent to us. Your draft proposal, your business profile and your preferences live in your own browser's local storage on your own device. We cannot see them.

Our server does write ordinary request logs (IP address, time, requested path) as any web server does, which are used for debugging and abuse prevention.

If you create an account

Email address — your identifier for signing in and how we contact you.
Password — stored only as a PBKDF2-SHA512 hash with a per-account random salt. We cannot read your password and could not tell you what it is.
Business profile — business name, reply-to email, positioning line.
Saved proposals — client name, project details, line items, prices and terms you chose to save.
Session tokens — stored as hashes so a leaked database cannot be replayed as a live login.
Timestamps — when the account and each proposal were created and updated.

If you subscribe to Pro

Stripe collects and processes your payment details directly. We receive and store only: a Stripe customer ID, a Stripe subscription ID, the subscription status, whether it is set to cancel, and the current period end date. We never receive your full card number.

What we do not collect

No analytics or behavioural tracking of any kind.
No advertising or social media pixels.
No cookies for tracking. The app keeps your login token in local storage, not in a tracking cookie.
No contact list, calendar, file or device access.
No data about your clients beyond what you personally type into a proposal.

Who we share it with

Three processors, all necessary to run the product:

Stripe — payment processing and subscription billing. Receives your email address and payment details. See Stripe's own privacy policy.
Railway — hosting. Stores the application and its database on our behalf.
Resend — sends password reset emails. Receives your email address and the reset link, only when you ask for one.

Beyond those, we share data only if legally compelled by a valid legal process, or if it is genuinely necessary to prevent fraud or a security incident. We do not sell or rent your data to anyone, for any purpose.

Where it is stored, and for how long

Data is held on servers operated by our hosting provider. It is retained while your account is open. When you delete your account, the account record and its proposals are removed. Automatic backups of the database are kept for up to 14 days, so a deleted account can remain in a backup for that long before it ages out. Billing records are retained by Stripe as long as their own legal obligations require, which is outside our control.

Security

All traffic is served over HTTPS.
Passwords are hashed with PBKDF2-SHA512, 210,000 iterations, unique salt per account.
Session tokens are random 256-bit values, stored only as SHA-256 hashes, expiring after 30 days.
Login attempts and password reset requests are rate limited, and the limits survive a server restart.
Password reset links are single-use, expire after one hour, and are stored only as hashes. Using one signs out every other session.
Stripe webhooks are verified by HMAC signature before being acted on.

Being straight with you: saved proposals are stored in plain text so they can be synced back to you, and are not end-to-end encrypted. An administrator with server access could technically read them. Do not put anything in a proposal that you would not put in an ordinary email.

Your rights

Whatever jurisdiction you are in, you can ask us to:

Access — get a copy of the data held about you.
Correct — fix anything inaccurate (most of it is editable in the app already).
Delete — remove your account and its proposals.
Export — receive your proposals in a machine-readable format.
Object — tell us to stop processing, which in practice means closing the account.

Email support@usescopepilot.com from the address on the account. Requests are handled within 30 days, usually much faster.

Children

ScopePilot is a business tool and is not intended for anyone under 16. We do not knowingly collect data from children.

International transfers

Our hosting and payment providers operate internationally, so your data may be processed outside your own country, including in the United States.

Changes

If this policy changes, the date at the top changes. Material changes affecting account holders will be emailed.

Contact

Privacy questions, requests or complaints: support@usescopepilot.com.