SCOPECITE PRIVACY POLICY
Last updated: November 13, 2026
This Privacy Policy explains how MaselliTech LLC ("MaselliTech," "we," "us") collects, uses, shares and protects information through our website scopecite.com and our ScopeCite software platform (the "Service"). The Service is built for businesses: roofing, restoration and exterior contractors ("Customers") and their employees ("Users").
1. Two kinds of information
A. Information we control. Information about Customers, Users and website visitors: accounts, billing, support, and how the Service is used. This policy governs it.
B. Information we process for Customers ("Customer Data"). Job, claim, homeowner, document, photo, email and financial information that Customers put into the Service or connect to it. We process Customer Data on our Customers' behalf and on their instructions, under our Terms of Service and Data Processing Addendum. The Customer decides what is collected and why, and the Customer's own privacy notice applies to it. If you are a homeowner and want to access, correct or delete your information, contact the contractor you worked with. If you contact us, we will pass your request to them and help them respond.
2. Information we collect
| Category | Examples | Source |
|---|---|---|
| Account and contact | Name, business name, email, phone, role, sign-in identifiers (for example, your Google account email) | You |
| Billing | Billing contact, plan, and payment details, which are processed by our payment processor; we keep only limited details such as card type and last four digits | You, our payment processor |
| Usage and device | Pages and features used, actions, timestamps, IP address, browser and device type, error logs | Automatically |
| Communications | Support requests, feedback, survey answers | You |
| Website | Pages visited, referring site, and cookies (see §7) | Automatically |
| Connected accounts | Data from services a Customer connects, such as Google (Gmail), CompanyCam or measurement-report providers, only for the features the Customer turns on | Third-party services, with authorization |
| E-signature records | Signer name, email or phone, signature image, date and time, IP address and device information, and the signed document | Signers, on the Customer's behalf |
We do not knowingly collect information from children under 13, and the Service is not directed to them.
3. How we use information
- To provide, operate, maintain and secure the Service, including AI features the Customer requests.
- To create accounts, authenticate Users and provide support.
- To bill, collect payment and prevent fraud.
- To send service, security, billing and policy notices, and, with the option to unsubscribe, product updates.
- To understand and improve the Service, using usage information and de-identified, aggregated statistics that do not identify any Customer, User, homeowner, property or claim.
- To comply with law, enforce our Terms, and protect our rights and the safety of others.
We do not sell personal information. We do not share it for cross-context behavioral advertising. We do not use Customer Data to train generalized AI models.
4. AI features
When a Customer uses AI features (for example, reading a carrier estimate, reviewing job photos or drafting a supplement), the Service sends the documents, photos and job details needed for that task to our AI model provider for processing. Our AI provider processes it under commercial terms that do not permit it to train its models on that data. AI output is a draft for the Customer to review, and the Customer is responsible for what it sends.
5. Google user data (Gmail)
If a Customer connects a Google account, the Service may request permission to:
- read email (
gmail.readonly), to find carrier and job emails and receipts and attach them to the right job, and - create drafts (
gmail.compose), to place supplement and follow-up emails, with attachments, in the User's Gmail Drafts for review. The Service does not send email without the User's action.
We use Google user data only to provide these user-facing features. We do not use it for advertising, sell it, use it to train generalized AI models, or let people read it, except (a) with the User's consent for specific messages, (b) for security purposes, such as investigating abuse, (c) to comply with law, or (d) in aggregated, anonymized form for internal operations. Refresh tokens are stored encrypted on our servers. Users can disconnect at any time in the Service or in their Google Account settings.
ScopeCite's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
6. How we share information
We share information only:
- With service providers ("subprocessors") who help us run the Service, under contracts that require confidentiality and security and limit their use of the data. These include cloud hosting and database (Supabase), web hosting (Netlify), AI model processing (Anthropic), payment processing (Stripe), email delivery, and error monitoring. The current list is available on request at privacy@scopecite.com.
- With the Customer who owns the account, including its administrators.
- With services a Customer connects, at the Customer's direction (for example, saving a photo report to its CompanyCam project).
- For legal reasons: to comply with law or legal process, or to protect rights, property or safety.
- In a business transfer, such as a merger, acquisition or sale of assets, subject to this Policy.
7. Cookies
Our website and app use necessary cookies and local storage to keep you signed in, remember preferences and keep the Service secure. We may use privacy-respecting analytics on our marketing website. We do not use advertising cookies or sell browsing data. You can control cookies in your browser, but the Service may not work without necessary ones.
8. Your choices and rights
- Account information: Users can view and update their profile in the Service, and Customers can update account and billing details.
- Marketing email: use the unsubscribe link at any time.
- Access, correction, deletion and portability: depending on where you live, you may have the right to know what personal information we hold about you, correct it, delete it, get a copy, and opt out of certain processing. We honor these requests for information we control no matter where you live. Email privacy@scopecite.com. We will verify your identity and respond within 45 days. If we deny a request, you may appeal by replying to our decision, and we will respond within 60 days.
- Customer Data: requests about Customer Data, such as homeowner information, go to the Customer that controls it (see §1B).
- We will not discriminate against you for exercising your rights.
9. Security
We use administrative, technical and physical safeguards, including encryption in transit (TLS), encryption of stored credentials and tokens, access controls, separation of each Customer's data at the database level, least-privilege staff access, and logging. No system is perfectly secure. If a breach affects your personal information, we will notify you and the affected Customer as required by law and our agreements.
10. Retention
We keep account and billing information while the account is active and as needed for legal, tax and accounting purposes (generally up to 7 years for billing records). Customer Data is kept for the Customer's subscription, available for export for 30 days after it ends, then deleted. Backups roll off within 35 days. E-signature records are kept as long as the Customer keeps them.
11. Where data is processed
We store and process data in the United States. The Service is intended for U.S. businesses.
12. Changes
We will post changes here and update the "Last updated" date. For material changes, we will notify Customers by email or in the Service at least 30 days before they take effect.
13. Contact
MaselliTech LLC privacy@scopecite.com