Privacy Policy

1. Data we collect

• Account data: your name, email address and a one-way hash of your password. We never store the password itself.
• Abuse-prevention data: the IP address and device fingerprint used at sign-up. We use them to stop the free trial from being restarted repeatedly on the same device. If phone verification is requested, we store a one-way hash of the phone number, not the number in plain text.
• Workspace data: the domains, brands, competitors, keywords, personas and similar inputs you track, and the reports generated from them.
• Usage records: login times and counts, credit and quota usage, error logs.
• Data from accounts you connect: described in detail in the "Google user data" section below.
• Payment data: payments are handled by payment service providers. Your card details are not stored on Scope Trends servers.
• Analytics data: only if you consent, Google Analytics measurements of how you use the site and the app. Details in section 8.

2. Google user data

We request access to a Google account only when you choose to connect it, and only for the service you choose to connect. The permissions requested and the data we access for each service are:

• Google Search Console (webmasters.readonly, read-only): the list of properties you can access and, for the property you select, search queries, pages, clicks, impressions, click-through rate and average position.
• Google Analytics (analytics.readonly, read-only): the list of properties you can access and, for the property you select, aggregated traffic and engagement metrics by session, user, traffic source and page.
• Google Ads (adwords): the ad accounts you can access and their campaign, ad group, keyword, ad and performance data. Scope Trends does not make changes to your ad account without your explicit approval.
• Google Sheets and Google Drive (spreadsheets, drive.file): only when you choose to export your reports to a Google Sheet, to write data to the sheet used for that export. We do not read your other Drive files.
• Basic profile (openid, email): the email address of the connected Google account, so we can show you which account is connected.

3. How we use Google user data

• We use Google user data only to provide the user-facing features you see in the product: dashboards, reports, opportunity and issue detection, agent findings, AI commentary and the exports you start.
• We do not sell Google user data, and we do not use or transfer it for serving ads, retargeting, or determining creditworthiness.
• We do not use or transfer Google user data to develop, improve or train generalized AI or machine learning models.
• Our staff can view this data only with your explicit consent (for example in a support request), for security purposes (such as investigating abuse), to comply with applicable law, or in aggregated, non-identifying form for internal operations.

4. AI processing

Some features (commentary, agent findings, content suggestions) send the relevant part of your data to AI processing providers in order to produce the output you asked for. This is done only to run the feature provided to you. The rule above applies here as well: Google user data is not used or transferred to train generalized AI models.

5. Storage and security

• Your data is stored on servers hosted by a cloud infrastructure provider. Traffic between your browser and our servers is encrypted with HTTPS.
• Access tokens for connected accounts are kept on the server side only and are used only to fetch data on behalf of your workspace.
• Access to servers and the database is limited to the people who need it.
• No system is perfect. If we become aware of a security incident affecting your data, we will notify you as required by applicable law.

6. Sharing and service providers

We do not sell your personal data or your Google user data. Your data is shared only with the following parties, and only as far as needed to provide the service:

• Hosting and cloud infrastructure providers.
• AI processing providers (for the purpose described in section 4).
• Payment service providers.
• Email delivery providers (for account and notification emails).
• Google as our analytics provider (Google Analytics; only if you consent, described in section 8).
• Team members you invite to your workspace, who can see the data in that workspace.
• Authorities, where required by law or a valid request from a competent authority.

For the keywords and domains you track, we query publicly available data such as search results and AI answers through data providers. These queries contain keywords and domains, not your personal data.

7. Retention and deletion

• We keep your data for as long as your account is open.
• You can disconnect a Google service at any time from the integrations section of the Settings page in the app. When you disconnect, the access tokens for that service are deleted from our systems immediately and the access you granted Google is revoked. If another active connection uses the same Google account, access is not revoked so that connection keeps working; only the tokens of the connection you removed are deleted.
• After you disconnect, data previously imported from that service is kept for 30 days and then permanently deleted automatically unless you reconnect within that period.
• You can also remove Scope Trends’ access at any time from your Google account’s third-party access settings.
• You can delete your account and data yourself from the “Delete account and data” section of the Settings page: your connections and Google access are removed immediately, data imported from Google is permanently deleted within 24 hours, and the remaining account data within 30 days. You can also send a deletion request to [email protected]; we will complete it within 30 days after verifying your identity. Records we are legally required to keep (such as invoices) are retained for the required period.

8. Cookies and Google Analytics

We use strictly necessary cookies and browser storage to keep you signed in and to remember your workspace selection and language preference. These are required for the service to work. We do not use advertising cookies or ad tags.

To understand how you use the site and the app, we use Google Analytics 4, only if you consent. The service is provided by Google (Google LLC; Google Ireland Limited for the European Economic Area and Switzerland). Google Analytics is not loaded unless you consent:

• Purpose: to see aggregated usage statistics, such as which pages are visited, where visitors come from and which devices and browsers they use, and to improve the site accordingly. We do not use this data for advertising, retargeting or personalized ads; Google signals and ad personalization are turned off.
• Data sent: the address of the page visited, the referring page, page title, browser, operating system, device type, screen resolution, language, approximate location (country and city level) and on-page interactions. Before sending the page address we remove query parameters (except campaign tags) and link parts that could contain identifiers. We do not send your name, email address or workspace data to Google Analytics, and Google Analytics is not loaded at all on admin and sharing links.
• IP address: Google Analytics 4 does not log or store IP addresses; the IP address is used only to derive approximate location.
• Cookies: _ga (to distinguish visitors, 2 years) and _ga_5TSM599WSQ (to keep session state, 2 years). These cookies are set on the scopetrends.com domain.
• Retention: event-level data in Google Analytics is deleted automatically at the end of the period set in our account settings (at most 14 months). Reports are built from aggregated data.
• Consent: on your first visit you can choose Accept or Reject in the card that appears. Until you accept, or if you reject, the Google Analytics code is not loaded, no measurement request is sent to Google and no analytics cookie is set. Your choice is stored in your browser for 6 months, after which we ask again.
• Withdrawal: you can change your choice at any time from the “Cookie preferences” link at the bottom of the page or on the Settings page in the app, or here. When you reject, measurement stops, the _ga cookies in your browser are deleted and no new ones are set.
• Google Analytics data may be processed on Google's servers outside your country, including in the United States. You can read how Google uses this data on Google's partner sites page. To block Google Analytics on all sites you can also use Google's browser add-on.

9. Your rights

You have the right to access your data, ask for it to be corrected or deleted, and object to its processing. If you are in the European Economic Area, our GDPR notice describes your rights in detail; if you are in Türkiye, see the KVKK notice. Send requests to [email protected].

10. Children

Scope Trends is a service for businesses and is not directed at anyone under 18.

11. Changes

We may update this policy. We will announce material changes on this page and, where appropriate, by email. The date at the top of this page is the date of the last update.

12. Google API Services

Scope Trends' use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

13. Early access list

When you fill in the early access form, we store your email address and, if you provide them, your name, your company or website, your note on what you want to use the product for, your language preference and the page you sent the form from. We do not store your IP address in this list.

We use this information only to let you know when access opens. We do not sell it or use it for any other purpose. Entries are kept until access opens and you have been notified, or until you ask us to delete them. You can send a deletion request to [email protected].