Privacy policy

Information we process

• Account and company information, such as names, email addresses, team membership, business profile details, and signing preferences.
• Project information entered or uploaded by users, including customer contacts, site information, photos, equipment, pricing, estimates, proposals, invoices, and attachments.
• Signing information, including signer name and email, typed or drawn signature, electronic-signing consent, timestamps, signing method, document versions, document hashes, and related status events.
• Limited browser and network information used for signing security, operational logs, and troubleshooting.

How information is used

We use this information to provide company and project workflows, generate documents, deliver emails and signing invitations, record signatures and completion, control access, maintain document history and signing evidence, troubleshoot problems, and support users.

Google Drive data and permissions

Google Drive is optional and is connected by the company owner. Scopevia requests https://www.googleapis.com/auth/drive.file, which limits access to files selected for use with Scopevia and files or folders created by Scopevia.

For this connection, we process the connected Google account's email address and account identifier; selected file IDs, names, types, version and modification metadata; authorized folder IDs; selected file contents and cached or exported copies; and authorization credentials needed to refresh access.

We use these data to link and refresh selected company email attachments, export selected Google Docs to PDF, display connection information, and archive completed signed PDFs when the owner enables that feature. Scopevia does not request unrestricted access to your entire Drive. Original linked source files are read for these features; archive copies are created in an authorized folder.

Google user data is used to provide these requested features. It is not sold, used for advertising, or used to train generalized artificial-intelligence models. Scopevia's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

Storage and security

Scopevia uses Supabase for backend processing, database records, authentication, and private document storage. Stored Google authorization credentials are encrypted on the backend. Access checks restrict company records, and signing links provide scoped access to the intended signing request.

Signed documents and audit records include source and completed-document hashes to support integrity checks. No method of storage or transmission can guarantee absolute security. Keep private signing links confidential.

When information is shared

Company members receive access according to their roles and permissions. Documents and emails are shared with recipients selected by the company, including signers and completed-copy recipients.

Service providers process information needed to operate the features: Supabase supports backend services and storage; Cloudflare hosts the signing website; Resend delivers automated signing emails; and Google processes optional Drive connections and archives. When users choose their device's mail or sharing apps, those services process the shared content under their own policies.

Information may also be disclosed when required by applicable law or to address security incidents. We do not sell Google user data or disclose it for advertising.

Retention and disconnecting Google Drive

Project documents, cached attachment versions, signed PDFs, and signing evidence may be retained to support document history and the business's records. Updating a project or removing a reusable attachment from future selection does not automatically erase historical versions.

The owner can disconnect Google Drive in Scopevia and can revoke Scopevia's access through the connected Google account's third-party connection settings. Disconnecting prevents future authorized refresh and archive operations until reconnected. It does not automatically delete previously cached attachments, saved project documents, or copies already archived to Google Drive.

Contact us to request deletion of retained Google-derived data, cached copies, or account information. We will verify the request and explain its scope, including any records that need to remain for security, contractual, or legal reasons. Copies already delivered to recipients or held by the subscribing business may require a separate request to that business.

Your choices and requests

Use Google Drive only if you want the optional features, review recipients before sending documents, and contact your company owner to correct business or project information. Customers can contact the business that sent a proposal about its records.

For access, correction, deletion, or privacy questions about Scopevia, email brad@alohasecure.com. Do not email passwords, API keys, or private signing tokens.

Policy updates

We may update this policy as the service changes. The effective date above identifies this version. Material changes to Google data use will be explained and additional consent obtained where required.