Privacy Policy
Last updated: 11 August 2026
1. Who we areneeds legal review
This policy covers scopeleads.com.au and the ScopeFound product, operated by [Scope Systems Pty Ltd, ABN [ABN], of [registered address/state]] ("Scope Systems", "we", "us"). ScopeFound is one product of Scope Systems, alongside ScopeFlow and ScopeTender — each has its own privacy policy for its own site.
2. What we collect
Running a free audit: the website URL you submit, and the business name, phone number, and contact details you enter to receive the results. Creating an account: name, email address, business name, and business details used to generate your audit, website, and ad copy. Using the product: leads captured through your published site or ads, content and photos you upload, and usage data (pages visited, features used, error logs) to keep the product working. Billing: payment card brand and last four digits, subscription status — full card details are held by Stripe and never touch our servers.
3. How we use it
To run your audit and generate your website, ad copy, and content. To operate your lead inbox and dashboard. To process billing through Stripe. To send transactional email (audit results, account access links, lead notifications). To improve the product and fix issues. We do not sell your data, and we do not use your business's leads or client data for our own advertising.
4. Third-party services we rely on
ScopeFound is built on: Supabase (database and authentication hosting), Stripe (payment processing), Vercel (application hosting), Anthropic (the AI models that draft your audit findings and content), and, where you connect them, Google and Meta APIs (for Google Business Profile and ad account features). Each processes only what's needed to deliver its part of the service.
5. Analytics and advertising cookies
We use Google Analytics (GA4) to understand how visitors use scopeleads.com.au, and, on pages funded by paid advertising, the Meta Pixel and Google Ads conversion tracking to measure whether an ad led to a real signup, trial, or subscription — this is standard practice for any business running paid ads, and without it we can't tell Meta or Google which ads are actually working, so we'd be paying for guesses instead of results. These set third-party cookies or similar identifiers from Google and Meta. We only send them the fact that a conversion event happened (e.g. "a trial started") and standard browser/device information — never your name, email, phone number, or anything from inside your dashboard. You can block these using your browser's cookie or tracking-protection settings; the product itself works the same either way, since this is measurement only, not a feature dependency.
6. Data retention
Your account, audit, and lead data is retained for the life of your account. If you cancel, we retain data for 90 days to support account recovery, then delete it. You may request earlier deletion by contacting us. Data submitted for a free audit without creating an account is retained only as long as needed to show you the result and follow up once, then deleted if no account is created.
7. Your rightsneeds legal review
You can request a copy of your data, correction, or deletion at any time by contacting [support email/contact address]. If you're not satisfied with how we've handled a privacy request, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).
8. Security
We use HTTPS, signed session cookies, and role-based access control so customers can only see their own data. Passwords are never stored in plain text. Payment data is handled entirely by Stripe.
9. Changes
We may update this policy as the service evolves. Material changes will be communicated by email or an in-app notice before they take effect.
10. Contactneeds legal review
Privacy questions or requests: [support email/contact address].