Privacy & Subprocessors Notice

This notice explains how ScopeHarbor handles personal information when you use our website, customer workspace, quote-review tools, project-planning features, and paid services.

1. Information we collect

Depending on how you use ScopeHarbor, we may collect account information such as your name, email address, login and verification records; project information such as quotes, images, notes, budgets, tasks and confirmed source text; service-use information such as feature activity, report status and technical logs; and customer-support communications.

For paid services, our commerce and payment providers may process billing information. ScopeHarbor does not store your complete payment-card number.

2. Why we use information

We use information to create and secure accounts, receive and scan files, extract and analyze quote content, generate reports, operate project workspaces, process purchases and subscriptions, send service messages, troubleshoot problems, prevent abuse, maintain records, and comply with applicable legal obligations.

3. Quote and project documents

Customer documents are stored in a dedicated non-public server location and encrypted by ScopeHarbor before storage. Files are not intentionally placed in the public WordPress Media Library.

Before a supported upload is processed, ScopeHarbor requires a clean antivirus result. Customer files may therefore be transmitted to our file-scanning provider for malware analysis.

4. AI processing

ScopeHarbor uses OpenAI API services to support document extraction and AI-assisted quote analysis. When AI processing is requested, relevant document content may be transmitted to OpenAI for that purpose. ScopeHarbor’s integration requests that responses are not stored for model-response retrieval by setting store: false; this setting does not override OpenAI’s applicable API data-handling, security, abuse-monitoring, or legal-retention practices.

Do not upload information that is unnecessary for your renovation-planning purpose.

5. Service providers and subprocessors

ScopeHarbor uses third parties to operate portions of the service. Depending on the feature used, these may include:

• Bluehost / hosting infrastructure — website and server hosting.
• Cloudmersive — malware scanning for uploaded files.
• OpenAI — AI-assisted document extraction and report generation.
• SureCart — commerce, checkout, customer and subscription infrastructure.
• Automattic / Jetpack — enabled website security, account-protection, site-operation and backup features.
• Payment processor shown at checkout — payment authorization and settlement.
• Google Workspace / Gmail SMTP — transactional account, recovery and report notifications.

Providers may process information in jurisdictions outside your province or country and may be subject to the laws of those jurisdictions.

6. Retention

ScopeHarbor’s current default retention period for uploaded quote files and generated report data is 90 days unless you delete eligible data sooner, a feature requires a different disclosed period, or we must retain information longer for security, fraud prevention, accounting, dispute handling, or legal obligations.

Account, transaction, consent, and audit records may be retained separately where reasonably necessary for those purposes.

7. Cookies, logs and analytics

ScopeHarbor and its WordPress, security, commerce and hosting components may use essential cookies or similar technologies for sign-in, session management, fraud prevention, checkout, and site operation. We may also collect standard technical information such as IP address, browser type, device information, timestamps, referring pages and error logs.

If optional analytics or advertising technologies are enabled, we will use them subject to applicable consent and disclosure requirements.

8. Security

We use safeguards intended to reduce unauthorized access, including encrypted private document storage, account access controls, malware scanning, HTTPS, and restricted processing workflows. No internet service can guarantee absolute security.

9. Your choices and rights

You may request access to, correction of, or deletion of personal information we control, subject to identity verification and legal exceptions. Certain project documents can also be deleted through supported account features. You may cancel a subscription separately from deleting your account or data.

10. Children

ScopeHarbor is intended for adults and is not designed for children under 18.

11. Changes to this notice

We may update this notice as ScopeHarbor’s services, providers, or legal obligations change. The effective date above will be updated when material changes are made.

12. Contact

Privacy or data requests can be sent to info@scopeharbor.com. Please do not send renovation documents or sensitive information by ordinary email unless requested through a secure workflow.