Under developmentthis site is a work in progress and the app isn't open for sign-in yet.See what's coming
ScopeSense
Privacy policy · GDPR

How we handle your data

Last updated 6 Jul 2026

Overview

ScopeSense is a bid-preparation tool for EU electrical and MEP contractors. This policy explains what personal data we collect, why we collect it, where we store it, and your rights under the EU General Data Protection Regulation (GDPR).

Data controller

ScopeSense GmbH (i.G.), Musterstraße 1, 10115 Berlin, Germany. Contact: privacy@scopesense.io.

What we collect

  • Account data: name, work email, company, hashed password.
  • Project data: uploaded PDFs, drawings, specifications, BOQs, vendor quotes and the analysis outputs derived from them.
  • Usage data: which pages you visit, timing, IP address. We use a privacy-friendly analytics provider (Plausible) that does not set cookies and does not track across sites.
  • Billing data: processed by our payment provider (Stripe). We do not store card numbers.

Where your data lives

All data is stored in Germany on Hetzner Cloud infrastructure (Nürnberg / Falkenstein). Backups are kept in the same jurisdiction. We do not transfer personal data outside the EU without explicit consent and standard contractual clauses.

AI processing

Some analyses use large language models operated by Anthropic. When this happens, the relevant excerpts of your project text are sent to Anthropic's API endpoints. Anthropic does not train on API traffic by default. We do not send you data to third-party AI providers other than Anthropic without written notice.

Cookies

We use one essential cookie to keep you logged in. We do not use advertising or tracking cookies.

Your rights

Under GDPR you have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate data.
  • Delete your data (right to be forgotten), unless we have a legal obligation to retain it.
  • Restrict or object to processing.
  • Portability — receive a copy of your data in a machine-readable format.
  • Lodge a complaint with a supervisory authority (e.g. Berliner Beauftragte für Datenschutz).

Retention

Account data is retained while your account is active and for 30 days after cancellation, then permanently deleted. Project audit logs are retained for 7 years, aligned with EU public procurement audit requirements.

Contact

For any privacy request, write to privacy@scopesense.io. We respond within 30 days.