ScopeFlow

Privacy Policy

Last updated: 28 October 2026

1. Controller

Shahzaib Ali, ScopeFlow, Berlin, Germany. Email: hello@scopeflow.eu. Further details in the Impressum.

2. Summary

This website uses no cookies, no analytics and no advertising trackers. Fonts are served from our own domain. We process personal data only when you visit the site (technical logs) or when you contact us.

3. Hosting and server logs

The site is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you open a page, Vercel processes technical data such as your IP address, date and time, requested page, referrer and browser type to deliver the site and protect it against abuse. Legal basis: our legitimate interest in a secure, working website (Art. 6(1)(f) GDPR). Transfers to the USA rely on the EU-U.S. Data Privacy Framework and/or the EU Commission's standard contractual clauses. See Vercel's privacy policy.

4. Contact and pilot requests

If you use our contact or pilot form, we process your name, email address, organisation, role, sector, expected document volume and message to answer your request and prepare a possible engagement (Art. 6(1)(b) GDPR, pre-contractual measures). Please do not include personal data of applicants or customers in the form.

Form submissions are delivered to us by email through Resend (Resend, Inc., USA; see Resend's privacy policy). Emails to hello@scopeflow.eu are forwarded by our domain registrar Porkbun LLC (USA) to our mailbox. If the form cannot send, your own email program opens with the request pre-filled; nothing is stored on the website in that case.

We keep enquiries for as long as needed to handle them and delete them at the latest 12 months after our last contact, unless they lead to a contract, in which case statutory retention periods apply.

5. The in-browser forensic demo

Files you check in the live demo are analysed entirely inside your browser. They are not uploaded, transmitted or stored by us or by any third party.

6. Booking and purchases

Where we offer appointment booking (Cal.com) or digital product checkout (Lemon Squeezy as merchant of record), those providers process the data you enter under their own privacy policies. These features are only shown once they are active.

7. Your rights

You have the right to access, rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interests (Art. 15–21 GDPR). Write to hello@scopeflow.eu. You also have the right to lodge a complaint with a supervisory authority, for example the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit).

8. Our products

This policy covers this website only. Data processed by ScopeFlow's fraud detection platform for customers is governed by a separate data processing agreement, under which the customer is the controller and ScopeFlow the processor.