Privacy Policy

ScopePaid helps freelancers and small agencies document approved project scope, analyse change requests, prepare client options and record decisions. This policy describes what we collect today, why we collect it, and the choices available to you.

ScopePaid is operated by the business entity that will be identified in the operator information section once production legal fields are configured. Until then, contact us through the Contact page or the privacy email listed at the end of this policy.

• Account holders who create and manage a ScopePaid workspace
• People who open a public approval link and optionally provide a name, email or comment when responding
• People who submit the public contact form

Workspace team roles beyond the account owner are not generally available in the current product. Studio team features remain planned.

• Account name and email (via our authentication provider, Clerk)
• Workspace name and related onboarding details you enter
• Client names and client email addresses you choose to store on projects
• Support messages you send through the contact form

• Selected decision option on a published approval page
• Optional participant name and email
• Optional comment or clarification message
• Timestamps associated with views and decisions

Participants do not need a ScopePaid account. They interact through a secure no-login link provided by the project owner.

• Project names, platforms, values, deadlines and related metadata
• Scope baselines and scope items
• Client-request text and owner notes
• Classifications, price and time estimates
• Public approval page content prepared by the owner
• Activity events, notification records and email-delivery records

ScopePaid does not currently provide uploaded-document storage. Do not rely on this product as a file archive.

When an authorized workspace owner explicitly runs an AI-assisted analysis, ScopePaid may process:

• Relevant request text and related project or baseline excerpts
• Structured suggestion outputs (for example classification, effort ranges, draft copy)
• Limited usage metadata such as analysis counts and, where recorded, token or cost estimates

AI is optional. Manual classification and drafting remain available. AI does not publish approval pages, email clients, set final prices or change request lifecycle status on its own.

• IP address and user agent where needed for security, rate limiting or email delivery
• Rate-limit and abuse-prevention metadata
• Authentication and session data managed by Clerk
• Application preference storage in your browser (see the Cookie Policy)

ScopePaid does not currently load third-party product analytics scripts. In-product “analytics” views show scope-change summaries derived from your workspace records, not an external tracking suite.

Contact form submissions (name, email, optional business name, topic and message) are stored so we can respond. When email delivery is configured, a copy may be sent to the support inbox.

Paid ScopePaid checkout is not active. We do not currently collect payment card details for ScopePaid subscriptions. When billing launches, payment details will be handled by the designated merchant of record; ScopePaid still will not process your clients’ project invoices.

• Provide authentication, workspaces, projects, baselines and change-request workflows
• Publish and record client approval decisions at the owner’s direction
• Send owner notifications and optional owner-triggered client emails
• Provide optional AI suggestions when explicitly requested
• Enforce plan limits and prevent abuse
• Respond to support and privacy requests
• Maintain security, integrity and service reliability

Where data-protection laws such as the GDPR apply, we rely on appropriate bases such as contract performance, legitimate interests (for example securing the service and preventing abuse), consent where required, and legal obligation. The specific basis depends on your location and the processing activity.

• AI runs only when an authorized owner explicitly requests analysis
• Relevant request, project and baseline text may be sent to the configured AI provider (currently OpenAI when enabled)
• Outputs are suggestions and may be inaccurate or incomplete
• Owners must review and explicitly apply any classification, estimate or copy
• AI does not make final project decisions and does not automatically contact clients
• ScopePaid does not claim that prompts or outputs have zero provider retention. Retention follows the operator’s AI provider account settings and applicable provider policies

Current and planned processors used to operate ScopePaid:

Lemon Squeezy is listed as planned only. It is not an active merchant of record for ScopePaid while checkout is inactive.

A structured list is also available on the Subprocessors page.

Your information may be processed in the regions where our subprocessors operate, including the United States and other locations. Where required, appropriate transfer safeguards will be applied under applicable law.

• Active account data — retained while the workspace/account remains active so you can use the product
• Approval and decision history — retained as part of the project record; decided snapshots are designed to remain immutable for audit integrity
• AI analyses — retained with the related request/workspace while needed for history, limits and owner review
• Notifications and email delivery records — retained to show delivery status and support troubleshooting
• Contact submissions — retained as needed to handle your enquiry and for reasonable follow-up
• Security logs and rate-limit metadata — retained for a limited period for security and abuse prevention
• Future payment records — when billing launches, billing records will be retained as required by the merchant of record and applicable law

We do not promise instantaneous deletion from all backups. Some information may be retained where necessary for security, fraud prevention, disputes, legal claims or legal obligations.

We use technical and organisational measures appropriate to the service, including authenticated access, server-side authorization, workspace isolation controls, hashed approval tokens and encryption in transit. No method of transmission or storage is completely secure. See the Security page for a high-level summary.

Depending on where you live, you may have rights to request access, correction, deletion, restriction, portability or objection, and to withdraw consent where processing is consent-based. Rights are not absolute and may be limited by law or competing obligations (for example preserving security or dispute records).

To submit a request, use the Contact form with topic “Privacy/data request” or email the privacy contact below. We may need to verify your identity before acting. You may also have the right to complain to a supervisory authority where applicable.

If you interacted only through an approval link, contact the project owner first for corrections to the commercial discussion. You may also contact ScopePaid using the privacy channel. We may need information that helps us locate the relevant workspace record and will not disclose another customer’s confidential project data inappropriately.

Self-serve account export and deletion are not currently available in the product. You can request assistance through the Contact form. Downgrading a plan does not delete existing projects, requests, approvals or audit history; new creation may be limited while over plan capacity.

ScopePaid uses essential authentication cookies (Clerk) and limited browser storage for redirects and UI preferences. We do not currently show an analytics consent banner because optional analytics cookies are not active. Details are on the Cookie Policy.

ScopePaid is intended for business use by adults. It is not directed to children, and we do not knowingly collect personal information from children.

ScopePaid does not make solely automated decisions that produce legal or similarly significant effects about individuals. AI suggestions require owner review before any client-facing publication or commercial decision is confirmed in the product.

We may update this policy as the product changes. Material changes will be communicated to account holders by reasonable means (for example email or in-product notice) before they take effect where required.

Privacy contact: privacy@scopepaid.com

Support contact: support@scopepaid.com