Privacy Policy

1. Overview

Fortress Apps ("we," "us," or "our") operates ScopeSnap. This Privacy Policy explains how we collect, use, store, and protect information when you use the ScopeSnap platform. By using ScopeSnap, you agree to the collection and use of information as described in this policy.

We take privacy seriously. ScopeSnap is used by construction professionals who may handle sensitive project and client data. We are committed to keeping that data secure, isolated by organization, and never sold to third parties.

2. Information We Collect

Account and identity information:

• Name, email address, and profile information provided at signup or through your identity provider
• Organization name and membership details
• Billing information processed through Stripe (we do not store raw card numbers)

Project and change order data:

• Project names, addresses, and descriptions you enter
• Change order details including cost estimates, schedule impacts, and status
• Client names and email addresses used for approval requests
• Photos, voice recordings, and blueprint files you upload
• Voice transcripts generated by our AI transcription service

Usage and technical data:

• Log data including IP addresses, browser type, and pages visited
• Session identifiers and authentication tokens
• An audit trail of key actions within your organization (e.g., change order sent, approved)

3. How We Use Your Information

• To provide, operate, and improve the ScopeSnap platform
• To send transactional emails such as change order approval requests and status notifications
• To process payments and manage subscriptions through Stripe
• To generate AI-assisted change order text and voice transcriptions
• To maintain security, detect fraud, and enforce our Terms of Use
• To respond to support requests and communicate service updates
• To comply with applicable laws and legal obligations

We do not use your project data or client information for advertising, data brokering, or training general AI models without your explicit consent.

4. Data Sharing and Third Parties

We share your data only with the following categories of service providers, strictly for operating the platform:

• Stripe — payment processing and subscription management
• Resend — transactional email delivery
• OpenAI / Whisper — voice note transcription (audio is transmitted, not stored by third parties)
• Replit / infrastructure providers — cloud hosting and object storage

We do not sell, rent, or trade your personal information with third parties. We may disclose information to law enforcement or legal authorities when required by applicable law or a valid legal order.

5. Data Isolation and Security

All project data in ScopeSnap is scoped to your organization. Users from other organizations cannot access your projects, change orders, or files. Organization membership is verified on every authenticated request.

We implement the following technical safeguards:

• All data is encrypted in transit using TLS
• Uploaded files (photos, voice notes) are stored in private, access-controlled object storage
• Session authentication via secure, HTTPOnly cookies
• An immutable audit log tracks all significant changes within each organization

Despite these measures, no system is perfectly secure. We encourage you to use strong passwords and report any suspected security issues to [email protected].

6. Client Data and Change Order Recipients

When you send a change order to a client, their email address and name are stored in our system to facilitate the approval workflow. Clients who receive approval links do not need to create an account. Their response (approved or disputed) is logged in your audit trail.

Contractors are responsible for obtaining any necessary consent from clients before submitting their contact information to ScopeSnap.

7. Data Retention

We retain your account and project data for as long as your account is active. If you delete your account, we will delete or anonymize your personal data within 90 days, except where we are required to retain it by law (such as billing records required for tax purposes).

Audit logs are retained for 3 years to support legal compliance and dispute resolution common in construction contracts.

8. Your Rights

Depending on your location, you may have rights including:

• Access to the personal data we hold about you
• Correction of inaccurate personal data
• Deletion of your personal data (subject to legal retention obligations)
• Portability of your data in a structured format
• Objection to certain processing activities

To exercise these rights, contact us at [email protected]. We will respond within 30 days.

9. Cookies and Tracking

ScopeSnap uses session cookies for authentication. We do not use third-party advertising cookies or cross-site tracking. Server-side logs may capture IP addresses and user agents for security and debugging purposes.

10. Children's Privacy

ScopeSnap is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal data, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a prominent notice in the application. The updated policy will include a revised "last updated" date.

12. Contact

For privacy-related questions, requests, or concerns, contact us at [email protected].