ScopeMesa privacy notice

Information used by the service

Steadyforth LLC operates ScopeMesa. The service uses:

• Your email, account identity, company membership and role.
• Business records and files you provide, including customer details, projects, plans, estimates, costs and contractor invoices.
• PocketMind messages, saved notes, selected files, generated outputs and usage history.
• Subscription and payment status, billing identifiers, support requests, feedback and optional follow-up choices.

We use this information to sign you in, operate your workspace, handle subscriptions, provide requested AI assistance, apply usage limits and safety checks, review support requests and maintain necessary billing and security records.

Service providers and access

• Cloudflare hosts the app and stores business, account and assistant records and private files.
• Supabase handles email/password sign-in.
• Stripe processes subscription checkout, payment methods, invoices and billing-portal activity. ScopeMesa stores billing references and status rather than your full payment-card details.
• Cloudflare Workers AI processes the messages and selected context needed for your requested AI operation.
• Configured email-delivery providers, such as Resend, process recipient addresses and message content.

Company business records are accessible to authorized members according to their roles. Personal PocketMind content is scoped to its company and user rather than shared with teammates. The service operator and necessary providers can access stored data; the service is not end-to-end encrypted.

AI requests can include your submitted message, bounded recent conversation history, saved notes you choose to use and explicitly selected file content or estimate context. Normal retrieves relevant text excerpts; Pro can send selected photos or PDFs for analysis. Upload only information you have permission to use with these providers. Selected conversation files remain active for follow-up messages until you remove them. Provider retention is separate from deletion in ScopeMesa; this service does not promise zero provider retention.

Your device and messages

Necessary cookies maintain sign-in and selected-company access. Normal sign-in sessions last up to seven days; password-recovery sessions last ten minutes. Some unsent drafts use temporary browser-tab storage, which is cleared on sign-out. Company pages, private files and API data are not cached for offline use. Draft recovery is not a cross-device backup.

Optional walkthrough follow-ups require a separate consent choice, and any such emails have an unsubscribe route. Saving an in-app support request saves it for manual owner review; it is separate from email delivery. Testimonial publication requires the specific quote and name permission shown in the feedback form.

Downloads and deletion controls

The company ZIP download includes ordinary business records, settings and business documents, up to 24 MiB combined. It excludes personal PocketMind content and saved plan-analysis/proposal data. Conversations have individual JSON exports; personal files, generated outputs and supported plan-review exports are downloaded separately. Contact support for export needs beyond those controls.

You can clear saved personal notes and delete personal conversations, files and Pro results. Deleting a Pro result does not delete its separately saved file; delete that file separately. Usage and audit records remain, and deletion does not restore allowances.

Account or company deletion requires a manual request to TJ@steadyforthllc.com. We verify identity, company authority and the requested scope before handling it. A company and a person's login have different scopes, especially when that person belongs to several companies. There is no automatic self-service company/account deletion.

Retained records

Cancellation does not automatically delete records. Records remain available for reading and export while retained. We retain data needed to provide the service, handle requested exports and support, and keep necessary billing, security and audit records for legal and operational needs. There is no current fixed automatic purge schedule or promise of indefinite free storage.

Deleted content can remain in retained backup copies, and providers maintain their own records under their notices and obligations. A deletion request does not promise immediate removal from all backups or provider records. Email support for privacy, access, correction, export or deletion questions and the scope of records involved.

Contact

TJ@steadyforthllc.com