Privacy Policy

This policy explains how Mir Taki Tazwar ("ScopeVanta", "we") collects, uses and protects personal information when you use ScopeVanta. We handle personal information in line with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws.

1. What we collect

• Account information: your name, email address and sign-in details, and the workspaces you belong to.
• Workspace content: what you and your team put into ScopeVanta — company profile and logo, client records, briefs, proposals, rates, uploaded documents and support conversations. This can include personal information about your clients, which you control.
• Billing information: your plan and subscription status. Card details are entered directly into our payment processor's (Square's) secure form — we never receive or store your full card number.
• Share-link responses: when your client responds through a share link, the name, email and answers they provide.
• Usage information: basic records of how the Service is used, such as feature usage and error logs.

2. How we use it

• to provide, secure and support the Service, including generating AI output for your workspace;
• to process payments and manage your subscription;
• to prevent abuse and enforce usage limits;
• to communicate with you about your account and important changes.

We don't sell personal information, and we don't use your workspace content to advertise to you.

3. Service providers

We share information only with providers that help us run the Service, under agreements that protect it:

• Clerk — sign-in and team management;
• Square — payments and subscriptions;
• Anthropic — AI processing of the content you ask us to analyze or generate from;
• Vercel — hosting and file storage;
• Supabase — database hosting.

Some of these providers store or process information outside Canada, including in the United States, where it may be accessible to authorities under local law. Our database is hosted in Canada; hosting, sign-in and AI processing providers may process information in the United States.

4. How long we keep it

We keep workspace content while your account is active. When a workspace is deleted, we delete its content, including uploaded files, within 30 days, except where we must keep records (for example, billing records) for legal or tax reasons. Backups are overwritten on a rolling basis.

5. Security

We protect information with measures such as encrypted connections, access controls that keep each workspace's data separate, private storage for uploaded documents, and two-factor authentication for staff access. No system is perfectly secure, and we'll notify you of a breach affecting your information as required by law.

6. Your choices and rights

You can access and update most of your information in the app. You can ask us to access, correct or delete your personal information, or withdraw consent (which may mean you can no longer use the Service), by contacting mirtaki123@gmail.com. If you're not satisfied with our response, you can contact the Office of the Privacy Commissioner of Canada.

7. Your clients' information

When you add information about your clients, you're responsible for having the right to share it with us, and we process it on your behalf only to provide the Service.

8. Changes

We'll post updates here and notify you of significant changes.

9. Contact

Privacy questions or requests: mirtaki123@gmail.com, Toronto, Ontario, Canada. Our privacy officer is Mir Taki Tazwar.