Privacy

Because you gave it to us: your name, your initials, your email address, your company's name, and the party type you registered as. When a company registers we also keep what was submitted for verification.

Because you used the product: the projects, scope lines, quantities, prices, questions, answers and documents you enter or upload, and a record of who entered them and when.

Automatically: ordinary server and security logs from our hosting provider. We do not use advertising trackers, and there is no analytics script on these pages.

Access is enforced in the database itself, not only in the interface. In practice:

People at your company see your company's projects and bids. A bidder sees the scope they were invited to price and their own bid only — never another bidder's prices. The owner or architect who published the scope sees the bids submitted to them. Questions asked by bidders are shown to other bidders with the asker's identity removed, so that one answer can serve everyone without revealing who asked.

ScopeLine staff can access data where necessary to run the service, verify a company, or respond to a request for help.

We use these providers. Each one only receives what it needs to do its job.

Supabase — the database, authentication and file storage. Everything you enter or upload is stored there.
Vercel — hosting for the application.
Resend — sending the emails this product sends you.
Anthropic — the AI features described in clause 4.
Brave Search — used when you search for a product; it receives the search words, not your project.

Three features in ScopeLine send data to Anthropic's API. We are naming them individually because one of them sends more than people expect.

Reading a project's documents. When an administrator starts a reading run, the full contents of every document attached to that project — drawings, reports, specifications — are sent to Anthropic so their scope can be proposed. This only happens when somebody presses the button. It never runs on upload, on a schedule, or by itself.

Drafting a note on a scope line sends that line and its surrounding context. Searching for a product sends the search words and the line it relates to.

Nothing the AI produces becomes scope on its own. Every proposal is reviewed and accepted by a person before it is published to anybody.

Removing someone from a company deactivates them; it does not delete their work. Prices they entered, questions they answered and scope they authored stay recorded against their name. This is deliberate: ScopeLine is a record of a tender, and rewriting who submitted a price would make that record untrue. It is also why removal is reversible.

Project data is kept while the account exists, because a tender is often referred to long after it closes. If you close your account, contact us and we will explain what can be deleted and what must be retained to keep the tender record intact for the other parties to it.

Under Canadian privacy law (PIPEDA) you can ask what personal information we hold about you, ask for it to be corrected, and withdraw consent. Your name and initials are editable by you at any time on the team screen.

Some requests interact with clause 5: we cannot remove your name from a bid another company relied on when awarding work. Where that applies we will say so plainly rather than quietly doing nothing.

Ask us anything about this at help@scopeline.ca.

Access rules are enforced in the database, so a mistake in the interface cannot expose another company's bid. Uploaded documents are held in private storage and reached through short-lived links, not public URLs. Connections are encrypted.

No system is perfect. If you believe you can see something you should not, please tell us before telling anybody else, and we will act on it.

If this policy changes in a way that affects you, we will tell you rather than quietly changing the date at the top.