Privacy Policy

Architecture Intelligence Inc. ("ScopeGen," "we," "us") provides construction scoping, estimating, and project-planning tools, including Included homeowner tools (the "Services"). This policy covers information we handle to operate those Services and our websites, communications, and business. The Services are intended for adults and projects in the United States.

For information an organization provides on behalf of its clients, employees, or other people, that organization may control the purposes of processing and we may act as its service provider. In that case, direct requests to the organization first; we will assist as required. This policy does not govern independent third-party websites, cloud-storage accounts, contractors, or recipients of content you share.

• Account and business information: names, email addresses, workspace membership and permissions, authentication records, contact details you provide, and subscription or purchase records. Stripe processes payment details; we receive billing status and payment references rather than storing full payment card numbers.
• Project information: plans, PDFs, photos, quotes, descriptions, project addresses, notes, messages, clarification answers, generated scopes, estimates, concept images, and edits. These materials may contain information about you, your clients, contractors, or other people.
• Email and import information: messages and attachments you send or forward to us, sender and recipient addresses, message headers, supported links, delivery records, selected cloud-file contents and metadata, and authorization information needed to retrieve those files.
• Usage and device information: IP addresses, approximate location derived from them, browser and device details, referring pages, advertising click identifiers, pages viewed, actions taken, cookies and similar identifiers, error reports, and session-replay information about interactions with the interface.
• Communications: support requests, feedback, marketing preferences, and email delivery or engagement information, such as opens and link clicks where tracking is enabled. Email-client privacy features can affect those measurements.

We obtain this information directly from you, automatically when you use the Services, and from people or services you authorize, including workspace members, connected storage providers, payment processors, and project participants. Provide only information you are authorized to share and that is relevant to the project.

We use information to:

• Create and secure accounts, manage workspaces, process payments, and administer subscriptions.
• Import, store, prepare, and analyze files; generate and deliver project output; and enable requested collaboration.
• Answer support requests and send verification, service, billing, and project-status communications.
• Measure usage, troubleshoot errors, evaluate output quality, and improve the Services.
• Send marketing communications, measure campaigns, and support advertising as described below.
• Prevent abuse and fraud, enforce agreements, preserve records, and comply with legal obligations.

We may create aggregated or deidentified information for analytics, benchmarks, research, product development, and model evaluation or improvement. Before treating information as deidentified, we must take reasonable measures so it cannot reasonably identify a person or household; merely removing a name is not necessarily sufficient. We maintain such information in deidentified form and do not attempt to reidentify it, except to test the deidentification process where law permits. Google API data remains subject to the separate restrictions below, including data derived from it.

The Services send relevant project material, prompts, and context to AI providers to generate scopes, estimates, clarifications, comparisons, and images. Providers include OpenAI and, for some image features, OpenRouter and the model provider it routes the request to. Processing can include original files, extracted text, rendered pages, and images. It is not limited to anonymous statistics.

Authorized personnel and service providers may access information when needed for support, operations, quality evaluation, security, or legal requirements, subject to applicable restrictions. For Google API data, human access is limited as described in the next section. We do not promise that every submitted document is automatically stripped of personal information before processing. Do not submit unrelated sensitive information or documents you lack permission to share.

Permission to process project material to provide the Services is not an unrestricted license to disclose it publicly or use it for any purpose. Any use for model improvement must comply with this policy, applicable law, contractual commitments, and provider restrictions. We do not use Google API data to train generalized AI models.

When available, cloud import is optional. Google Drive uses Google's file picker and permission for files you select, rather than access to your entire Drive. We retrieve selected files and relevant metadata, such as names, types, sizes, and file identifiers, to import plans and generate your project output. Dropbox uses read-only account, file-listing, and file-content permissions to let you browse and choose existing files. Those Dropbox permissions can cover your Dropbox account, but our import workflow downloads the files you choose. We do not request permission to edit or delete your original cloud files.

Imported copies are stored in project storage and processed with our hosting and AI providers to deliver the requested features. Revoking cloud access stops future access through that authorization; it does not automatically delete copies already imported or output already generated. Delete the relevant project where available, or contact us to request deletion. You can also remove ScopeGen in your Google account connections or Dropbox connected apps.

Our use and transfer of information received from Google APIs will comply with the Google API Services User Data Policy, including its Limited Use requirements, and the applicable Google Workspace API policy. We use that information to provide the import and project features you request, not for advertising, sale to data brokers, or training generalized AI models. Human access is limited to your explicit permission for specific data, necessary security or legal purposes, or permitted aggregated and anonymized internal operations. These restrictions also apply to derived data and take priority over broader improvement language elsewhere.

Sending or replying with plans to your ScopeGen forwarding address instructs us to process the message, its attachments, and supported links for your account, subject to our verification and access checks. We may send service replies and completed documents to your account email. A reply workflow does not give us access to the rest of your inbox. Email delivery involves your email provider and ours.

Workspace members and people you invite or share with can receive the project data needed for that interaction. Included may share project details, contact information, quotes, or messages with contractors when you request or authorize that sharing. Public scope links can be opened by anyone who has the link. Recipients may keep or forward downloaded documents, including pricing documents you choose to send; we cannot recall their copies. Check recipients and sharing choices carefully.

• Service providers: providers of hosting and storage, AI processing, payments, transactional and marketing email, analytics, and operational monitoring. Examples include Amazon Web Services, OpenAI, OpenRouter and its selected model providers, Stripe, and PostHog. They receive information needed for their role.
• Recipients you authorize: your workspace, project collaborators, contractors, email recipients, and people using your sharing links.
• Advertising partners: Meta and similar partners, if used, may receive website interaction, device, identifier, and conversion information as described below. Google API data is excluded from advertising uses.
• Legal and business recipients: professional advisers, authorities, or other parties where reasonably necessary to comply with law, protect rights and safety, investigate abuse, or establish or defend claims; and parties to a financing, acquisition, merger, or asset transfer, subject to applicable confidentiality, legal, and provider restrictions. Where required, we obtain consent before a transfer.

We do not sell your private project files for money. That statement does not mean all advertising disclosures fall outside the broader legal definitions of "sale" or "sharing," which can include exchanges of identifiers and activity information.

We use essential cookies and similar storage for sign-in, security, and service functionality. Where enabled, PostHog helps us understand usage and diagnose problems, including through session replay. Replay is configured to mask form inputs and designated private elements, but other visible interface information may be captured.

Meta Pixel and server-side conversion events help measure advertising effectiveness and can support advertising or retargeting. Data can include IP address, browser details, page or event information, advertising identifiers, and hashed contact information used to match an account. Hashing does not make that information anonymous. These providers may collect information across other websites and services under their own policies. We do not intentionally send uploaded plan contents to advertising providers.

Browser settings and blocking tools can limit cookies and tracking scripts, although blocking essential storage can affect sign-in and some features. Browser controls do not necessarily stop server-side processing. Our current implementation does not automatically change all tracking in response to a browser's "Do Not Track" signal. For requests concerning sale, sharing, or targeted advertising, use the contact method in Your choices and privacy rights below.

We retain information for as long as reasonably needed for the purposes described here. We consider the life of your account or project, the information's sensitivity, customer instructions, support needs, security, billing and tax obligations, dispute periods, and backup cycles. Project files and output may remain while a project is active; temporary import copies and inbound-message storage have shorter operational lifetimes. Deleting a source email or revoking a cloud connection does not delete the corresponding ScopeGen project.

When deletion is appropriate, we delete or deidentify information, subject to lawful exceptions. Limited records may remain for fraud prevention, legal compliance, accounting, or claims. Backup copies may remain until their normal replacement cycle and should not be restored to active use except for recovery or a legal need. We may retain properly deidentified information where law and provider terms allow. We do not promise instantaneous deletion from every system or from recipients' copies.

We use administrative, technical, and organizational safeguards designed to protect information. No storage or transmission method is perfectly secure. The Services operate in the United States, and our providers may process information in the United States or other countries where they operate, subject to applicable requirements.

You can update available account details, manage workspace access, delete eligible projects, revoke connected-provider access, and unsubscribe from marketing email using its unsubscribe link. Essential account, security, billing, and requested project messages may still be sent. Subscription cancellation and privacy deletion are separate requests; tell us if you want both.

Depending on where you live and which laws apply to us, you may have rights to access or obtain a copy of personal information, correct it, delete it, learn about disclosures, or opt out of sale, sharing, targeted advertising, or certain profiling. You may also have rights concerning sensitive information, authorized agents, or an appeal of a denied request. These rights are subject to applicable exceptions; we do not ask you to waive them by using the Services.

Send a request to hello@scopegen.ai with the subject "Privacy request," your account email, and what you want us to do. For an advertising opt-out, say "Do not sell or share my personal information or use it for targeted advertising." Please do not send government identification or other sensitive documents in the initial request. We may need proportionate information to verify an access or deletion request or an agent's authority. We will respond within applicable legal deadlines and will not unlawfully discriminate against you for exercising your rights.

If we deny a request and an appeal right applies, reply with "Privacy appeal" so we can review the decision. You may also contact your state attorney general or other applicable privacy regulator. If your information belongs to a customer's workspace, we may refer the request to that customer and help them respond.

The Services are not directed to anyone under 18. We do not knowingly collect personal information from children under 13. If you believe a child has provided information to us, contact us so we can investigate and take appropriate steps, including deletion where required.

We may update this policy as our Services or requirements change. We will post the updated date and provide additional notice of material changes, such as an email or notice in the Services, where appropriate or required. We will obtain consent where required before materially changing how we use previously collected information, including Google API data. A policy update does not itself supply that consent.

For questions or requests, contact Architecture Intelligence Inc., doing business as ScopeGen, at hello@scopegen.ai. Our Terms of Service cover use of the Services.