This Privacy Policy explains how ScopeBot collects, uses, and protects your personal data in compliance with the General Data Protection Regulation (GDPR) and applicable Czech law.
1. Data Controller
The data controller responsible for your personal data is ScopeBot, operated by Tomáš Grásl, based in the Czech Republic. For questions regarding your data, contact us at support@tomasgrasl.cz.
2. Data We Collect
We collect the following categories of personal data:
- Account data: email address, name (if provided), and authentication provider information (GitHub, Google)
- Interview data: messages and responses you provide during project scoping interviews
- Usage data: pages visited, interaction patterns, and technical information (browser type, device) collected via cookies with your consent
3. How We Use Your Data
Your personal data is processed for the following purposes:
- To provide and operate the interview and brief generation service
- To authenticate your identity and manage your account
- To communicate with you about your interviews and the service
- To analyze and improve the service (with your consent for analytics cookies)
4. Third-Party Services
We share data with the following third-party processors:
- Anthropic (Claude API): interview messages are sent to the Claude AI model for processing. Anthropic processes this data under their terms of service and does not use API inputs for model training.
- Google Analytics: with your consent, anonymized usage data is collected to help us understand how the service is used.
- Authentication providers: GitHub and Google process authentication data according to their respective privacy policies.
5. Data Retention
Interview data is retained for the duration of the interview and project relationship. Expired interviews are retained for a reasonable period to allow brief access, after which data may be deleted. Account data is retained for as long as your account is active.
6. Your Rights
Under the GDPR, you have the right to:
- Access the personal data we hold about you
- Rectify inaccurate or incomplete personal data
- Request erasure of your personal data
- Restrict or object to processing of your data
- Data portability — receive your data in a structured, machine-readable format
- Withdraw consent at any time for consent-based processing
- Lodge a complaint with the Czech Data Protection Authority (UOOU)
To exercise any of these rights, contact us at support@tomasgrasl.cz.
7. Cookies
We use cookies and similar technologies as described in our Cookie Policy. You can manage your cookie preferences at any time through the cookie settings available in the site footer.
8. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including encryption in transit (TLS), secure authentication, and access controls.
9. Contact
For any questions or concerns about this Privacy Policy or your personal data, contact us at support@tomasgrasl.cz.