Privacy Policy
This Privacy Policy explains how 2BAIFEN LLC, doing business as ScopePilot (“ScopePilot,” “we,” “us”) collects, uses, discloses and retains personal information when you visit scopepilot.org (the “Site”), submit a project, or otherwise communicate with us, and describes the choices and rights available to you, including under California law.
ScopePilot provides construction estimating and scope documentation services to contractors. Our customers are businesses. When a contractor submits a project, the submission may also contain information about a property owner or insurance claim; Section 4 explains how we handle that information.
1. Information we collect
Information you provide
- Contact and business details: company name, your name, phone number, email address and preferred contact channel.
- Project details: property address, property owner or client name (optional), project type, water category, approximate square footage, date of loss, project description, requested service and deadline.
- Insurance details (optional): insurance carrier, claim number, policy number and adjuster name.
- Files: photos, PDFs, existing estimates and similar documents you upload. Files may show the interior or exterior of a property and, incidentally, people or personal belongings.
- Communications: messages you send us by email, Telegram, WhatsApp, Facebook Messenger or other channels, and our replies.
Please do not upload Social Security numbers, driver’s license numbers, bank or payment card numbers, medical information, or other sensitive personal information. Redact them from documents before uploading. We do not need this information to prepare an estimate.
Information collected automatically
- Technical data: IP address, browser type, device type, pages visited, referring page and time of visit, processed by our hosting provider for delivery and security. For spam prevention we store a one-way hash of your IP address with each submission, not the address itself.
- Bot-protection signals: when you submit the form, Cloudflare Turnstile evaluates browser and interaction signals to tell humans from automated traffic.
- Analytics: aggregate usage statistics, as described in Section 6.
2. How we use information
- To review your project, prepare and deliver the estimate, scope or review you requested, and communicate with you about it;
- To send you a confirmation of your submission and service-related messages;
- To invoice for and collect payment for services;
- To protect the Site and our services against spam, fraud and abuse, and to keep them secure;
- To understand how the Site is used and improve it;
- To comply with legal obligations and enforce our Terms of Service.
We do not use the contents of your files or project details to train artificial-intelligence models offered to third parties, and we do not sell your information.
3. How we disclose information
We disclose personal information only as described below:
- Service providers that process information on our behalf under contracts that limit their use of it:
- Cloudflare, Inc. — website hosting, database and file storage, bot protection (Turnstile) and cookieless web analytics;
- Resend — delivery of transactional email (submission confirmations and internal notifications);
- Telegram — internal notifications to our team about new submissions (company name, contact name, city, requested service and time-limited file links);
- Google LLC — website analytics (Google Analytics), if enabled, as described in Section 6;
- Email, messaging, accounting and payment providers we use to communicate with you and process payments.
- Our personnel and contracted estimators who need the information to prepare your deliverable and are bound by confidentiality obligations.
- Legal and safety: when required by law, subpoena or other legal process, or when we believe in good faith that disclosure is necessary to protect rights, property or safety.
- Business transfers: in connection with a merger, acquisition, financing or sale of all or part of our business, subject to this Privacy Policy.
- With your direction: for example, when you ask us to send a deliverable to your client or another party.
We do not sell personal information and do not share it for cross-context behavioral advertising, as those terms are defined in the California Consumer Privacy Act. We do not disclose personal information to third parties for their own direct-marketing purposes.
4. Information about property owners and claims
Contractors may submit information about a property owner, a property, or an insurance claim. If you submit such information, you confirm that you are authorized to share it with us for the purpose of obtaining an estimate or scope document, and that you have provided any notices or obtained any consents required by law. We use this information only to provide the services you request and for the other purposes described in this policy.
If you are a property owner and believe we hold information about you, you may contact us using the details in Section 11.
5. How long we keep information
| Information | Retention |
|---|---|
| Uploaded files (photos, PDFs, documents) | Automatically deleted from our storage 7 days after upload. Download links sent to our team expire after 10 days. |
| Submission records (contact, project and insurance details) | As long as needed to provide our services and as required or permitted by applicable California and federal law — generally up to 4 years after our last interaction with you, unless a longer period is required for legal, tax or dispute-resolution purposes. |
| Deliverables we prepare and related correspondence | Generally up to 4 years after delivery, consistent with applicable California law, or longer if needed for legal, tax or dispute-resolution purposes. |
| Invoices and payment records | As long as required by tax and accounting law (generally up to 7 years). |
| Technical and security logs | Generally no longer than 30 days. |
| Analytics data | Cloudflare Web Analytics stores aggregated, non-identifying statistics. If Google Analytics is enabled, event data is retained for no longer than 14 months. |
6. Cookies, analytics and Do Not Track
Cloudflare Web Analytics measures page views and site performance without cookies and without tracking you across other websites.
Google Analytics may be enabled to help us understand how visitors use the Site and the project form (for example, which form step people reach). It uses cookies and collects information such as pages visited, approximate location derived from IP address, device and browser information. We configure it with Google signals and ad personalization disabled, and we never send names, emails, phone numbers, addresses or claim details to it. Google may collect information about your online activities over time and across different websites. You can opt out with the Google Analytics Opt-out Browser Add-on.
Global Privacy Control: if your browser sends a Global Privacy Control (GPC) signal, we treat it as a request to opt out and do not load Google Analytics.
Do Not Track: because there is no common standard for “Do Not Track” browser signals, we do not respond to them. We do honor GPC as described above.
Cloudflare Turnstile may set or read technical data necessary to detect automated traffic; it is used only for security.
7. Security
We use reasonable administrative, technical and physical safeguards appropriate to the nature of the information, including encryption in transit (HTTPS), private file storage that is not publicly accessible, time-limited signed download links, automatic deletion of uploaded files, and access limited to people who need it. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
8. Your California privacy rights
If you are a California resident, you have the following rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA”), to the extent it applies to us. We extend these rights to all customers regardless of whether the CCPA applies.
Notice at collection
| Category (Cal. Civ. Code § 1798.140) | Examples | Purposes | Sold or shared? |
|---|---|---|---|
| Identifiers | Name, email, phone, IP address (hashed for spam prevention) | Providing services, communication, security | No |
| Customer records (§ 1798.80(e)) | Property address, insurance carrier, claim and policy numbers | Providing services | No |
| Commercial information | Services requested, project history, invoices | Providing services, billing | No |
| Professional information | Company name, role | Providing services, communication | No |
| Audio, electronic, visual information | Photos and documents you upload | Providing services | No |
| Internet or network activity | Pages visited, device and browser data | Security, analytics, improving the Site | No |
We do not intentionally collect sensitive personal information as defined by the CCPA, and we do not use or disclose sensitive personal information for purposes other than those permitted by Cal. Code Regs. tit. 11, § 7027(m). Retention periods are listed in Section 5.
Your rights
- Right to know / access: the categories and specific pieces of personal information we have collected about you, the sources, the purposes, and the categories of recipients.
- Right to delete personal information we collected from you, subject to legal exceptions.
- Right to correct inaccurate personal information.
- Right to opt out of sale or sharing. We do not sell or share personal information, so there is nothing to opt out of; we also honor GPC signals as described in Section 6.
- Right to limit use of sensitive personal information. We do not use sensitive personal information for purposes that would give rise to this right.
- Right to non-discrimination: we will not deny services, charge different prices, or provide a different quality of service because you exercised your rights.
How to exercise your rights
Email office@scopepilot.org with the subject “Privacy request” and describe your request. We will confirm receipt within 10 business days and respond within 45 calendar days (extendable by another 45 days when reasonably necessary, with notice). To protect your information, we will verify your identity by matching information you provide with information we hold, such as the email address and project reference used for a submission. You may use an authorized agent; we may require written permission signed by you and verification of your identity.
Shine the Light (Cal. Civ. Code § 1798.83)
We do not disclose personal information to third parties for their direct-marketing purposes. California residents may request information about such disclosures by contacting us as described below.
9. Children
The Site and our services are intended for businesses and are not directed to children under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us personal information, contact us and we will delete it.
10. Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated version on this page and change the “Last updated” date above. If we make material changes, we will provide additional notice, such as a notice on the Site or by email to customers with recent submissions, before the changes take effect.
11. Contact us
Questions or requests about this Privacy Policy or your information:
2BAIFEN LLC
1675 Whitwood Ln. 1, Campbell, CA 95008
Email: office@scopepilot.org