Section 01Summary
ScopeSift LLC (“ScopeSift,” “we,” “us,” “our”) provides a takeoff drafting and review service for construction estimators. This Privacy Policy explains what we collect, why we collect it, how we use it, and the choices you have.
We collect only what we need to run your account, draft takeoffs from the plan sets you upload, bill your subscription, and keep the service secure. We do not sell your personal information, and we do not use your project files to train third-party AI models.
Section 02Information we collect
We collect information in three main ways: information you give us directly, information generated when you use the service, and information from a small set of service providers we rely on.
Information you provide
- Account information: name, email address, password (stored hashed), company name, and role.
- Plan sets and project content: PDF drawings, images, notes, scope selections, and any quantities you create, edit, or approve.
- Communications: messages you send to support or sales and any feedback you submit in the product.
- Billing details: handled by our payment processor; we receive limited records like the last four digits of a card, billing email, and subscription status, but not full card numbers.
Information generated by use
- Usage and event data: pages visited, features used, takeoff runs started and completed, errors, and timestamps.
- Device and connection data: IP address, browser type, operating system, and approximate location derived from IP.
- Cookies and similar technologies: used for sign-in sessions, security, and basic product analytics. See “Cookies” below.
Information from service providers
- Authentication and infrastructure providers may pass us identifiers needed to keep your session valid and protect against abuse.
- Stripe sends us subscription status and limited billing metadata so we can grant or restrict access to paid features.
Section 03How we use information
We use the information we collect to:
Operate the service
- Authenticate users and keep accounts secure.
- Process uploaded plan sets and generate draft takeoff quantities for your review.
- Provide drawing references, review status, and export files.
- Bill subscriptions, track included usage, and enforce plan limits.
Maintain and improve the service
- Debug errors, monitor performance, and prevent abuse.
- Improve measurement accuracy and review workflows in aggregate, using internal metrics and engineering review.
- Communicate with you about service updates, security notices, and your account.
We do not use your uploaded plan sets, project files, or the quantities you produce to train third-party AI models. Where we use AI providers to assist with classification or measurement, we send only what is needed for that specific task, under data-processing terms that prohibit training on your content.
Section 04Legal bases for processing
If you are in the European Economic Area, the United Kingdom, or another region with similar laws, we rely on the following legal bases: performance of a contract (to deliver the service you signed up for), legitimate interests (to keep the service secure, prevent abuse of free trials, improve the service, and communicate with users), consent (where required, for example for optional marketing communications), and legal obligation (for tax, accounting, and compliance records).
Section 05How we share information
We share information only in the limited ways described below. We do not sell personal information.
Service providers
- Cloud hosting and storage for the application and your uploaded plan files.
- Authentication and database providers used to run accounts and sessions.
- Stripe, for subscription billing and payment processing.
- AI and computation providers used to assist with specific measurement and classification tasks, under terms prohibiting training on your content.
- Analytics and error-monitoring tools used to keep the service running and improve reliability.
Your team
- If your account is part of a team or organization, account administrators may see usage and billing information for that team.
Legal and safety
- We may disclose information when required by law, to enforce our terms, or to protect the rights, property, or safety of users or the public.
- If we are involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction, subject to this policy.
Section 06Sub-processors
We rely on the third-party sub-processors below to operate the service. Each processes data only as needed to provide its function, under contractual terms that prohibit using your content to train their models.
Current sub-processors
- Supabase — authentication, application database, and encrypted storage of your uploaded plan files (United States).
- Railway — application and background-worker hosting (United States).
- OpenAI — AI assistance for plan classification and measurement; plan-page images and related text are sent for processing. This data is not used for model training; data retention is governed by our OpenAI organization and project settings.
- Google Cloud (Vertex AI) — AI assistance for plan-page geometry tracing; plan-page images are sent for processing under no-training terms.
- Anthropic (Claude API) — an alternative geometry-tracing provider that receives plan-page images only when we have enabled it for that purpose; when enabled, data is sent under no-training terms.
- Stripe — subscription billing and payment processing.
- Resend — transactional email delivery for account and billing notifications.
When we add or change a sub-processor we update this list, and material changes are reflected in the effective date above.
Section 07Data retention
We retain account information for as long as your account is active and for a reasonable period after closure to handle billing, legal, and support needs.
Uploaded plan sets and project content are retained while your account is active so you can revisit prior projects. You can delete individual projects from the dashboard at any time, and you can permanently delete your account and its data yourself from Account settings (or by contacting us).
To prevent repeated free-trial abuse after account deletion, we retain a keyed, pseudonymous identifier derived from the email address of an account that has started free-trial processing. It contains no plaintext email or name, but lets us recognize the same address if it is used again. This is an anti-abuse record, not anonymous data. We also retain minimal deletion receipts and storage-location identifiers to complete and verify cleanup; billing providers may retain transaction records.
For longer AI processing tasks, we store responses with OpenAI so interrupted work can resume without generating the same result again. When you delete the project or account, our cleanup process requests cancellation of active stored responses and deletion of the stored responses before completing project deletion. Minimal response identifiers and usage receipts may remain to verify cleanup and reconcile processing charges; provider backup, security, and legal retention policies still apply.
Backups and logs may persist for a limited period after deletion as part of normal operations and security practices, after which they are overwritten on a routine schedule.
Section 08Security
We use industry-standard safeguards to protect your information: encryption in transit, encryption at rest for uploaded files and database records, access controls on internal systems, and audit logging for sensitive operations.
No system is perfectly secure. If you believe your account has been compromised, contact us immediately at support@scopesift.com.
Section 09Your rights and choices
Depending on where you live, you may have the right to access, correct, export, or delete the personal information we hold about you, and to object to or restrict certain processing.
How to exercise your rights
- Projects and uploaded files can be deleted from the dashboard.
- You can permanently delete your account and its data from Account settings.
- For broader requests — access or export of your data — email support@scopesift.com from the address associated with your account.
We will respond within the timeframe required by applicable law. We may need to verify your identity before acting on a request.
Section 10Cookies
We use only essential cookies — the ones that keep you signed in and help protect your account against abuse. We do not use advertising cookies or third-party tracking cookies, and we do not engage in cross-site behavioral advertising.
You can control cookies through your browser settings, but disabling essential cookies may prevent you from signing in or using parts of the service.
Section 11International transfers
We are based in the United States, and our service providers may process information in the United States and other countries. Where required, we rely on appropriate safeguards such as standard contractual clauses to protect personal information when it moves between jurisdictions.
Section 12Children
ScopeSift is built for professional construction estimating workflows and is not directed to anyone under 16. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us information, contact us and we will remove it.
Section 13Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date at the top of this page and, where appropriate, notify you by email or through the product.
Section 14Contact us
Questions about this policy, how we handle your information, or security disclosures? Email support@scopesift.com.
Questions? Contact support@scopesift.com
Read the Terms of Service ↗