Privacy Policy

This policy explains how Scoper collects, uses, and stores your personal information. Depending on your jurisdiction, your privacy obligations may be governed by Australia's Privacy Act 1988 (Cth), the European Union's GDPR, the UK's Data Protection Act 2018, California's CCPA, or other regional regimes. We do not provide legal advice — consult a lawyer for your specific privacy obligations.

What we collect

When you submit a contact or scoping form, we may collect:

• Name (first and last)
• Email address
• Business name
• ABN, if you provide it
• Phone number, if you provide it
• Your responses to scope-form text fields (use case description, workflow details)

We also collect the following automatically:

• IP address (server logs)
• Basic browser metadata (user agent string)

Cookies: We use only essential session cookies required for the site to function. We do not use tracking cookies, analytics cookies, or advertising cookies.

Why we collect it

We collect this information to:

• Respond to your enquiry
• Match your workflow to a kit archetype and customise your kit
• Deliver your starter kit by email
• Provide email-tier or call-tier support per the package you bought

We do not use submitted data for marketing purposes without your separate consent.

Where we store it

Your data is stored and processed using the following infrastructure:

• Neon Postgres — primary database, Sydney region (ap-southeast-2). Data is encrypted at rest.
• Resend — US-based, transactional email only (e.g. confirmation messages). Personal data passed to Resend is limited to what is required to send that email.
• Vercel — US/Europe-based, application hosting. Handles web requests and server logs. Vercel may process data across multiple regions.

All data in transit is protected by HTTPS.

How long we keep it

Submissions are retained for 24 months from the date of receipt unless you request earlier deletion. If we have not had further contact with you within 24 months, we will delete or anonymise your record.

Sharing with third parties

We do not sell your personal information. We do not share it with third parties except the subprocessors listed above (Neon, Resend, Vercel), which are necessary to operate the service.

We do not use Google Analytics, Meta Pixel, or any other third-party tracker on this site.

Your privacy rights

You have the right to:

• Request access to the personal information we hold about you
• Request correction of inaccurate or out-of-date information
• Request deletion of your personal information

These rights are available to all users. In some jurisdictions (including Australia, the EU, the UK, and California), these rights are reinforced by law. To exercise any of these rights, email hello@scoper.pro. We will respond within 30 days.

Data breaches and security incidents

If we become aware of a data breach that is likely to result in serious harm to any individual, we will notify affected individuals promptly. For Australian operations, we will also notify the Office of the Australian Information Commissioner (OAIC) as required under the Notifiable Data Breaches Scheme. International users are protected by equivalent breach notification regimes in their jurisdiction, including GDPR (EU), DPA 2018 (UK), and CCPA (California).

AI processing note

When we use AI tools (Claude or ChatGPT) to assist with a response or brief, the prompt we send does not include your personal information unless you have explicitly asked us to process specific content that contains it. We use generic, anonymised context by default.

Updates to this policy

We will update the date at the top of this page when changes are made. If a change is material, we will notify you by email if we have one on file for you.

Contact

For privacy enquiries, email hello@scoper.pro.