Your data.
In plain language.

Summary

ScopeSift LLC (“ScopeSift,” “we,” “us,” “our”) provides a takeoff drafting and review service for construction estimators. This Privacy Policy explains what we collect, why we collect it, how we use it, and the choices you have.

We collect information to run your account, draft takeoffs from the plan sets you upload, bill your subscription, and keep the service secure. Where advertising measurement is enabled under the regional choices described below, we use Meta Pixel and server-side reporting to measure public page visits, pricing views, account creation, checkout starts, completed purchases, and completed takeoffs. We do not use your project files to train third-party AI models.

Information we collect

We collect information in three main ways: information you give us directly, information generated when you use the service, and information from a small set of service providers we rely on.

How we use information

We use the information we collect to:

We do not use your uploaded plan sets, project files, or the quantities you produce to train third-party AI models. Where we use AI providers to assist with classification or measurement, we send only what is needed for that specific task, under data-processing terms that prohibit training on your content.

Legal bases for processing

If you are in the European Economic Area, the United Kingdom, or another region with similar laws, we rely on the following legal bases: performance of a contract (to deliver the service you signed up for), legitimate interests (to keep the service secure, prevent abuse of free trials, improve the service, and communicate with users), consent (where required, for example for optional marketing communications), and legal obligation (for tax, accounting, and compliance records).

How we share information

We share information in the ways described below. Where advertising measurement is enabled under the regional choices below, public page visits, pricing views, account creation, checkout starts, completed purchases and purchase value and currency, completed takeoffs, browser identifiers, and a hashed email for matching are also shared with Meta for advertising measurement, as described under Cookies.

Sub-processors

We rely on the third-party sub-processors below to operate the service. They process data to provide the functions listed below. The AI services used for plan processing are commercial APIs subject to their applicable data-processing terms; infrastructure, payment, and email providers have their own retention and legal obligations.

When we add or change a sub-processor we update this list, and material changes are reflected in the effective date above.

Data retention

Optional website analytics uses pseudonymous browser and tab-session identifiers. We record public page categories, broad traffic channels, device category, approximate country and state or region, scroll depth, and pricing, demo, and takeoff preparation activity after explicit acceptance. Takeoff preparation events indicate PDF selection, preview readiness, or whether a draft was saved; they do not contain file names or file contents. Approximate location comes from a lookup on our own server, without storing the IP address or requesting precise device location. We do not store IP addresses, form contents, emails, full URLs, or project details in these records or link the visitor identifier to an account. Tab sessions expire after 30 idle minutes. Raw records older than 90 days are removed during subsequent collection; records may remain longer while collection is idle.

We retain account information for as long as your account is active and for a reasonable period after closure to handle billing, legal, and support needs.

We retain email follow-up requests until you ask us to delete them at support@scopesift.com. You can withdraw permission for follow-up at that address without deleting the record; we retain the request and its withdrawal status to suppress future contact, including if the address is submitted again. To limit form abuse, we use keyed identifiers derived from connection IP addresses and hourly counters; the form does not store raw IP addresses. These counters are removed after 48 hours during later submissions and can remain longer while collection is idle.

We retain account email consent and its withdrawal history while your account exists. Unconfirmed email choices are ineligible for marketing. Account deletion removes the consent and signup receipt, including the link to your identity. We retain a minimal keyed email identifier and suppression reason to prevent accidental re-enrollment after withdrawal, unsubscribe, bounce, complaint or deletion; this contains no plaintext email or account identifier. A new explicit choice from a verified account can reverse an ordinary withdrawal, while bounce, complaint and deletion suppressions require support review. Email consent collection does not add IP-address collection.

When you prepare a takeoff before signing in, the PDF preview stays in your browser until you submit the PDF. We then save your PDF privately so it can continue through signup and email confirmation. These temporary plans expire after 24 hours and are removed by background cleanup. Plans added to your project follow the project retention policy below. A necessary browser cookie helps recover your temporary plans; it is separate from advertising choices.

Uploaded plan sets, project content, and takeoff results have no scheduled expiration. We keep them until you delete the project or your account, or ask us to delete them. You can delete individual projects from the dashboard at any time. You can request account deletion from Account settings or by contacting us. If you have unused purchased takeoffs, you may keep your account and use them, contact support about a refund, or explicitly give them up without a refund as part of account deletion. Limited records may remain as described below.

To prevent repeated free-trial abuse after account deletion, we retain a keyed, pseudonymous identifier derived from the email address of an account that has started free-trial processing. It contains no plaintext email or name, but lets us recognize the same address if it is used again. This is an anti-abuse record, not anonymous data. We also retain minimal deletion receipts and storage-location identifiers to complete and verify cleanup; billing providers may retain transaction records.

For longer AI processing tasks, we store responses with OpenAI so interrupted work can resume without generating the same result again. When you delete the project or account, our cleanup process requests cancellation of active stored responses and deletion of the stored responses before completing project deletion. Minimal response identifiers and usage receipts may remain to verify cleanup and reconcile processing charges; provider backup, security, and legal retention policies still apply.

Backups and logs may persist for a limited period after deletion as part of normal operations and security practices, after which they are overwritten on a routine schedule.

Security

We use industry-standard safeguards to protect your information: encryption in transit, encryption at rest for uploaded files and database records, access controls on internal systems, and audit logging for sensitive operations.

No system is perfectly secure. If you believe your account has been compromised, contact us immediately at support@scopesift.com.

Your rights and choices

Depending on where you live, you may have the right to access, correct, export, or delete the personal information we hold about you, and to object to or restrict certain processing.

We will respond within the timeframe required by applicable law. We may need to verify your identity before acting on a request.

Cookies

After explicit acceptance, ScopeSift keeps permitted campaign tags and ad-click identifiers for up to 30 days to preserve the signup source through reloads and email confirmation. After signup, this record is linked to the new account. Confirmation in another browser may use the original permission while it remains valid; a decline, Global Privacy Control or Do Not Track blocks recovery. Browser recovery also requires that browser’s current explicit acceptance. Account withdrawal removes the signup-source record and its queued advertising event, and blocks later signup retries and delivery attempts. A delivery already being processed may still be sent or finish if withdrawal occurs after its last permission check, including before the request starts. Withdrawal cannot recall an event already sent to Meta. A minimal account withdrawal record is retained until account deletion to honor that choice. Expiry returns acquisition to unknown in internal reports. These identifiers are excluded from authentication metadata, email links, redirects and owner reports.

Google Analytics user and event data retention is configured for 14 months without resetting the retention period on new activity. Most standard reports use aggregated data and may remain available longer. ScopeSift's separate pseudonymous visitor records use the shorter collection cleanup period described under Data retention.

Google Analytics 4 is optional and starts only after you accept optional cookies through our cookie banner or Cookie preferences. Earlier advertising permissions do not enable Analytics. We use it to measure visitors, sessions, public page views, traffic sources, engagement, and confirmed paid purchases. Google receives browser and cookie identifiers, IP information, public page categories, campaign attribution tags, and purchase value, currency and an opaque transaction identifier. We exclude private app pages, auth URLs, emails, drawings, quantities, project names and account details. Google signals, personalized advertising and automatic form, search, download and history tracking are disabled. Your Analytics choice expires after 180 days and can be withdrawn through Privacy choices; Global Privacy Control and Do Not Track override acceptance. Reports cover consenting browsers, not every person, and cannot recover visits from before Analytics was installed. Google describes its processing at https://policies.google.com/privacy.

Google Ads measurement is optional and stays off until you explicitly accept the updated advertising choice. An earlier Meta-only permission does not enable Google. After acceptance, Google receives browser, IP, ad-click and cookie information to attribute advertising visits and confirmed paid purchases. Purchase events contain purchase value, currency and a hashed purchase identifier for deduplication, not your email, Stripe checkout ID, drawings or project details. We disable enhanced conversions and personalized advertising. Google is described at https://policies.google.com/privacy. Your Google choice expires after 180 days and can be withdrawn through Privacy choices; browser opt-out signals override it. Google purchase reporting requires an eligible, verified checkout and may be unavailable if you leave the confirmation page before verification finishes or block the tag.

Separately from advertising tracking, we count public page loads in daily totals to understand whether the website works for visitors. These counters do not use tracking cookies, visitor IDs, or fingerprinting. A local preference is stored only to remember your choice to disable these statistics. They store only the page category, a broad traffic-source category, and mobile or desktop category; no IP addresses, full URLs, query parameters, emails, or project content are stored in these counters or sent to Meta. They operate independently of your Meta advertising choice. You can disable these statistics using the control above. We also use existing account and payment records to count registrations and completed checkouts internally.

We use essential cookies to keep you signed in and help protect your account against abuse. Where advertising measurement is enabled, Meta Pixel and our server-side Conversions API report visits to public marketing pages, pricing views, account creation, checkout starts, completed subscription or prepaid overage purchases, and completed takeoffs. For purchases, Meta also receives purchase value and currency. Meta receives browser information, cookie identifiers and a SHA-256 hashed version of your email for matching; its browser integration also receives your IP address. Hashing does not make this information anonymous. Meta may associate these events with your Facebook or Instagram account. We do not send passwords, project files, drawings, quantities, project names or other takeoff details through this integration.

Server-side delivery uses confirmed Stripe checkout status and can finish after you leave the website. Pending deliveries check the applicable permission record again before sending. Regional permissions are rechecked against the current request location when new activity is captured. We clear hashed email and browser identifiers from delivery records after acceptance, suppression or expiry. Delivery records retain event status and, for purchases reported under an applicable advertising permission, the verified purchase value and currency. Explicit-choice records last up to 180 days; regional advertising permissions expire after one day unless revalidated. Your payment and takeoff allowance do not depend on advertising tracking.

For visitors identified in the United States outside California, we use Meta advertising measurement under a notice-and-opt-out approach. You can stop this sharing at any time using Privacy choices or Do not sell or share my personal information. In California, outside the United States, and where location cannot be reliably determined, Meta stays off until you accept. Existing declines and browser opt-out signals take priority. A regional permission is recorded separately from an explicit acceptance. Meta describes its processing at https://www.facebook.com/privacy/policy/.

We use an approximate country and state lookup on our own server to select these privacy controls. The lookup uses the connection IP already received by our hosting provider; it does not send your IP to a geolocation service, store the IP in the advertising-permission record, or request your device’s precise location. IP location can be inaccurate; you can always decline advertising regardless of the displayed regional controls.

We honor Global Privacy Control and Do Not Track browser signals by keeping optional advertising tracking disabled, including when this browser previously accepted optional cookies. Essential sign-in and security functions remain available.

You can control cookies through your browser settings, but disabling essential cookies may prevent you from signing in or using parts of the service.

International transfers

We are based in the United States, and our service providers may process information in the United States and other countries. Where required, we rely on appropriate safeguards such as standard contractual clauses to protect personal information when it moves between jurisdictions.

Children

ScopeSift is built for professional construction estimating workflows and is not directed to anyone under 16. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us information, contact us and we will remove it.

Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date at the top of this page and, where appropriate, notify you by email or through the product.

Contact us

Questions about this policy, how we handle your information, or security disclosures? Email support@scopesift.com.