Effective August 1, 2026

Privacy Policy

This policy explains how ScopeLock processes information when contractors document and request approval for change-order work.

Information we process

Depending on the features used, ScopeLock may process account and workspace details; project, customer, and contact details; scope descriptions and pricing; photos, audio field notes, documents, signatures, and approval events; and limited device, diagnostic, security, and usage information.

How we use information

We use information to provide and secure the service, save and synchronize records, deliver approval requests and notifications, generate requested documents, provide support, detect abuse, comply with law, and improve reliability.

AI-assisted features

AI assistance is optional and is disclosed before enabled content is processed. It may help transcribe field notes or draft editable descriptions. ScopeLock does not let AI set a final price, make legal conclusions, silently send content, or modify a signed document. When a user enables an AI feature, the minimum necessary content may be sent to a contracted AI service provider for that request.

Sharing and service providers

We do not sell personal information. We may share information with infrastructure, storage, security, analytics, communication, payment, and AI service providers that process it on our instructions; with workspace members and intended approval recipients; or when required for legal, safety, or fraud-prevention reasons.

Retention and deletion

We retain information while an account or workspace is active and as reasonably needed for documented business records, security, dispute resolution, and legal obligations. Users may request account deletion, export, correction, or access. Some audit and signed-record information may need to be retained when required by law or legitimate recordkeeping obligations.

Security

We use reasonable administrative, technical, and organizational safeguards, including access controls, encrypted transport, private storage, short-lived approval links, and audit events. No system can guarantee absolute security.

Children

ScopeLock is a business service and is not directed to children under 13.

International processing

Information may be processed in countries where our service providers operate. We use appropriate contractual and technical safeguards where required.

Changes

We may update this policy as the product or applicable requirements change. The effective date above will be updated when material changes are published.

Contact

For privacy questions or requests, email info@madahzadeh.com with “ScopeLock privacy request” in the subject.