iScope Technologies LLC — Privacy Policy

Effective Date: May 16, 2026
Last Updated: May 18, 2026

1. Introduction

This Privacy Policy ("Policy") explains how iScope Technologies LLC, a Delaware limited liability company registered to do business in Ohio ("iScope," "we," "us," or "our"), collects, uses, shares, retains, and protects information when you use the iScope mobile application and our website at iscope360.com (collectively, the "Platform").

By accessing or using the Platform, you agree to the practices described in this Policy. If you do not agree, do not use the Platform.

This Policy applies to all users of the Platform. The Platform is offered only in the United States. We use technical measures to block access from outside the United States, including the European Union and the United Kingdom.

2. Information We Collect

2.1 Account Information

When you create an account in the iScope mobile app:

• Full name
• Email address
• Phone number
• Account credentials (passwords are stored as cryptographic hashes; we cannot view your password)
• Authentication tokens used to keep you signed in
• Multi-factor authentication (MFA) method selection and configuration

2.2 Property Information

When you register a property:

• Property address
• Property characteristics (size, room count, structural details)
• Project history and project records
• Documentation you upload (permits, warranties, receipts, plans, inspection reports)
• Lead paint attestation (pre-1978 construction status)

2.3 Spatial Data (LiDAR Scans)

When you scan a room with a LiDAR-equipped device:

• Three-dimensional geometry of the scanned space (walls, ceilings, floors, openings)
• Dimensions and positions of detected objects (furniture, fixtures, doors, windows)
• Surface area calculations
• The scan file (typically in USDZ format) and an associated structured representation

We do not use spatial data for biometric identification or to track you across applications or devices.

2.4 Photographic and Video Documentation

When you upload or capture photos and videos:

• The media file
• Metadata embedded in the file, including timestamp, device model, capture settings, and geographic coordinates (GPS) where available
• Captions, notes, or tags you associate with the media

User responsibility: Photos and videos of your home may incidentally capture other people, sensitive documents, family photos, valuables, or other content. You are responsible for ensuring you have authority to capture and upload images of your property.

2.5 Voice Recordings and Audio Data

When you use voice-based features:

• Audio recordings of your spoken input — deleted immediately after transcription
• Text transcriptions of your speech — retained as part of the project record
• Timestamps marking voice activity
• Metadata about your voice session (duration, language detected)

We do not retain voice audio after transcription. We do not perform voice biometric identification, speaker recognition, or voiceprint matching.

State-law notices for residents of Illinois, Texas, and Washington appear in Section 9.3.

2.6 SMS Communications (for MFA)

If you choose SMS as your multi-factor authentication method:

• Mobile phone number you provide
• SMS verification codes (transient, not stored after use)
• Timestamps of authentication events
• Consent record (when you selected SMS as your MFA method)

Standard message and data rates may apply. You may opt out at any time by changing your MFA method in account settings or replying STOP to any SMS message from iScope.

2.7 Precise Geographic Location

iScope collects precise GPS location from your device to:

• Verify property addresses you register
• Tag scans and photographs to the correct property
• Confirm scan locations match the registered property

Precise geolocation is "Sensitive Personal Information" under California law (CPRA). California residents have the right to limit our use of this information to that which is necessary to perform Platform services. See Section 8.2.

2.8 Payment Information

When you authorize a paid Project on the Platform, payment is processed by Stripe, Inc. through Stripe Connect Express. Information processed includes:

• For Customers: Payment card or bank account information you provide for Project pre-funding. iScope does not store full card numbers, CVV codes, or bank account numbers; these are tokenized and held by Stripe.
• For Contractors: Bank account information for receiving Project payments, as well as identity verification information collected by Stripe to satisfy Know-Your-Customer (KYC) and anti-money-laundering requirements.

Stripe is a licensed money transmitter and is the entity that receives, holds, and transfers Project funds. iScope provides transfer-timing instructions to Stripe in accordance with each Project's milestone draw schedule. Funds are held within Stripe's payment infrastructure, not in iScope's bank account.

Stripe's privacy practices are governed by Stripe's privacy policy at stripe.com/privacy.

iScope's role in payment processing is described in the Platform-Controlled Payouts Policy. Stripe is listed in the Subprocessor List.

2.9 Platform Usage Information

• Login activity
• Features used and screens viewed
• System performance metrics
• Crash reports and error logs
• Anonymous usage analytics (cannot be linked to your account; see Section 11)

2.10 Device and Technical Information

• Device type, model, and unique device identifiers
• Operating system and version
• Application version
• IP address
• Approximate geographic location (derived from IP, in addition to precise GPS)
• Push notification tokens (APNs tokens)
• Network connection type

2.11 Information From Third Parties

• Public property records (from county assessors and similar sources) — used to verify the user's authority to register a property by comparing the registered name to public ownership records
• Address verification services
• Geocoding services
• Fraud prevention services

2.12 Website Information (iscope360.com)

If you visit our website to learn about iScope or sign up for email updates:

• Email address (if you submit it)
• Name (optional)
• Browser type and device information
• Pages viewed and time spent
• Referring source (how you found us)

The website does not allow account creation. To use the Platform, install the iOS app.

3. How We Use Artificial Intelligence

3.1 AI Features

AI features support:

• Analyzing photographs to identify visible features (fixtures, obstructions, condition indicators)
• Converting voice input into text and interpreting spoken requests
• Generating draft project scopes and Requests for Proposal (RFPs)
• Estimating areas, quantities, and project requirements
• Automatically injecting lead-safe work practice requirements into RFPs for pre-1978 properties

3.2 Third-Party AI Subprocessors

Some AI features require sending your data to third-party providers. We currently use, or may use:

A current Subprocessor List is at iscope360.com/legal/subprocessors.

3.3 AI Provider Training Practices

As of the Effective Date:

• Anthropic does not use data submitted via its API to train its models
• OpenAI does not use data submitted via its API to train its models
• Google does not use data submitted via its Gemini API to train its consumer models

We monitor these practices and will update this Policy if material changes occur.

3.4 Data Minimization

When data is sent to an AI subprocessor, we send only what is necessary for the specific task. We do not send account information, addresses, or unrelated documents alongside individual analysis requests.

3.5 No Automated Decision-Making With Legal Effects

The Platform's AI features support documentation and scoping. They do not produce automated decisions with legal or similarly significant effects on you. Project decisions, contractor selection, and project authorization remain entirely with you.

3.6 Limitations of AI Output

AI-generated outputs may be inaccurate, incomplete, or unsuitable for your situation. You are responsible for reviewing AI-generated content before relying on it. The Terms of Service contain additional disclaimers.

4. How We Use Your Information

• To operate the Platform and provide its features
• To create and maintain your account
• To generate and store property records
• To produce scopes of work, RFPs, and project documentation
• To verify your authority to register a property (using public records)
• To deliver multi-factor authentication codes via SMS, email, or authenticator app
• To send transactional notifications (account alerts, security alerts, RFP completion notifications)
• To send marketing communications only if you have separately opted in
• To improve Platform functionality, reliability, and security
• To detect, prevent, and respond to fraud, abuse, and unauthorized access
• To comply with legal obligations and respond to lawful requests
• To enforce our Terms of Service and other Platform agreements

We do not sell your personal information. We do not use your personal information for cross-context behavioral advertising.

5. How We Share Your Information

5.1 With Service Providers and Subprocessors

We share information with vendors who help us operate the Platform. See our Subprocessor List at iscope360.com/legal/subprocessors. Service providers are contractually limited to using your information only as needed to provide services to iScope.

5.2 For Legal and Safety Reasons

We may disclose information when we believe in good faith disclosure is necessary to:

• Comply with applicable law, regulation, subpoena, court order, or other lawful legal process
• Enforce our Terms of Service or other agreements
• Protect the rights, property, or safety of iScope, our users, or others
• Detect, prevent, or respond to fraud, security incidents, or technical issues

5.3 With Your Consent

We may share information for other purposes when you direct or consent to that sharing.

5.4 In a Business Transition

If iScope is involved in a merger, acquisition, financing, sale of assets, bankruptcy, or similar event, your information may be transferred. We will notify you by email and prominent in-Platform notice before your information becomes subject to a different privacy policy.

5.5 What We Do Not Do

• We do not sell your personal information
• We do not share your personal information for cross-context behavioral advertising
• We do not provide your personal information to third parties for their independent marketing purposes

6. Data Retention

6.1 Property Records and Right to Delete

The Platform maintains property records associated with a physical address as a long-term documentation system. When you exercise a deletion right (Section 8), we will:

1. Remove personally identifying information from records associated with you (de-identification)
2. Retain the de-identified property record as part of the property's historical record
3. Where required by law to fully delete, do so notwithstanding our preference for de-identification

7. Data Security

We implement administrative, technical, and physical safeguards to protect your information:

• Encryption in transit using TLS 1.2 or higher
• Encryption at rest using AES-256 or equivalent industry-standard cryptography
• Required multi-factor authentication for all user accounts (authenticator app, SMS, or email)
• Optional biometric authentication (Face ID or Touch ID) for additional convenience
• Role-based access controls limiting employee access to data on a need-to-know basis
• Cryptographic hashing of passwords (we cannot view your password)
• Logging and monitoring of system access and unusual activity
• Regular software updates and security patching
• Reputable cloud infrastructure providers with their own security certifications

No security system is impenetrable. We cannot and do not guarantee that your information will always be secure. If you believe your account has been compromised, contact us immediately at Info@iscope360.com.

8. Your Privacy Rights

8.1 Rights of All Users

All users may:

• Access the personal information associated with your account
• Correct inaccurate personal information through account settings or by request
• Close your account at any time through the app or by emailing Info@iscope360.com
• Delete your account and request data deletion, subject to the property records provision in Section 6.1
• Export your personal data in a portable format by emailing Info@iscope360.com (45-day fulfillment)
• Opt out of marketing communications at any time (transactional communications cannot be opted out of while you have an active account)

8.2 Rights of California Residents (CCPA / CPRA)

If you are a California resident, you have the following additional rights:

Right to Know. You may request that we disclose:
- Categories and specific pieces of personal information we have collected about you
- Categories of sources
- Business or commercial purposes for collecting
- Categories of third parties with whom we share it

Right to Delete. Subject to exceptions, including Section 6.1 (de-identification of permanent property records).

Right to Correct. You may request correction of inaccurate personal information.

Right to Opt Out of Sale or Sharing. We do not sell or share your personal information for cross-context behavioral advertising.

Right to Limit Use of Sensitive Personal Information. The following data we collect qualifies as Sensitive Personal Information under CPRA:
- Precise geolocation (GPS coordinates)

You may request that we limit our use of this information to that which is necessary to perform Platform services. Submit a request to Info@iscope360.com with subject "Limit Sensitive Information Use."

Right to Data Portability. You may request a copy of your personal information in a portable, machine-readable format. We fulfill these requests manually within 45 days. Email Info@iscope360.com with subject "Data Export Request."

Right to Non-Discrimination. We will not discriminate against you for exercising your privacy rights.

Response Timeframe. We will respond within 45 days; this may be extended by an additional 45 days when reasonably necessary, with notice to you.

Verification. We will verify your identity before fulfilling rights requests by confirming information already in our records.

Authorized Agents. You may designate an authorized agent to submit requests on your behalf. The agent must provide proof of authorization.

8.3 Notice for Illinois, Texas, and Washington Residents (Voice Data)

We do not collect, capture, purchase, receive through trade, or otherwise obtain biometric identifiers or biometric information within the meaning of the Illinois Biometric Information Privacy Act (740 ILCS 14), the Texas Capture or Use of Biometric Identifier Act (Tex. Bus. & Com. Code § 503.001), or comparable Washington law.

Voice recordings are processed solely for speech recognition. Audio files are deleted immediately after transcription. Transcriptions are retained for project documentation purposes and do not constitute biometric information.

If you are an Illinois resident with concerns about voice processing, contact us at Info@iscope360.com.

8.4 California "Shine the Light" Disclosure

California Civil Code § 1798.83 entitles California residents to request information regarding our disclosure of personal information to third parties for direct marketing purposes. We do not share personal information with third parties for their direct marketing purposes.

8.5 Marketing Email Opt-Out

You may unsubscribe from marketing emails by:

• Clicking the unsubscribe link in any marketing email
• Emailing Info@iscope360.com with subject "Unsubscribe"
• Disabling marketing communications in your account settings

We honor opt-out requests within 10 business days, in compliance with CAN-SPAM.

Transactional communications (account notifications, security alerts, RFP delivery) cannot be disabled while you have an active account.

9. Children's Privacy

The Platform is not directed to children under 13. We do not knowingly collect personal information from children under 13.

If you are under 13, do not use the Platform or provide any personal information.

The Platform's Terms of Service require users to be at least 18 years of age.

10. International Users

The Platform is offered only in the United States. We use technical measures including geo-IP filtering to block access from outside the United States, including the European Union and the United Kingdom.

If you are located outside the United States and have somehow accessed the Platform, please do not provide us with any personal information.

11. Cookies and Tracking Technologies

For details, see our Cookies and Tracking Technologies Policy at iscope360.com/legal/cookies.

In summary:

• The iOS app uses Apple's Identifier for Vendors (IDFV) for internal analytics
• The app uses Apple Push Notification Service tokens (with your permission) for notifications
• The app uses crash reporting tools that collect anonymous diagnostic data
• The app uses analytics SDKs that collect always-on, anonymous usage data — not linked to your account
• The app does not track you across other apps or websites
• The app does not request Apple's App Tracking Transparency permission
• The iscope360.com website uses standard web cookies for the email signup form and basic analytics

12. Third-Party Services

The Platform integrates with services operated by third parties (Apple, AI providers). Those services have their own privacy practices. Review their privacy policies for any service you use through the Platform.

13. Data Breach Notification

In the event of a confirmed security incident affecting your personal information:

• We will assess the scope and impact promptly, generally within 24 hours of confirmation
• We will notify regulatory authorities as required by applicable law (CCPA: without unreasonable delay; state laws: per applicable timeframe)
• We will notify affected users by email and in-app notification without unreasonable delay following confirmation
• We will cooperate with law enforcement and regulatory authorities as appropriate

Our breach notification will include: the categories of information affected, the steps we have taken in response, and the steps you can take to protect yourself.

14. DMCA Copyright Policy

iScope DMCA Designated Agent
Jason S. Clarke
iScope Technologies LLC
8 The Green, Suite B
Dover, Delaware 19901
Email: Info@iscope360.com (subject line: "DMCA Notice")

Our full DMCA takedown procedure is set forth in the Terms of Service.

15. Customer Support and Inquiries

We aim to respond to customer support inquiries within 5 business days.

Send inquiries to Info@iscope360.com.

16. Changes to This Policy

We may update this Policy. When we make material changes, we will:

• Post the updated Policy at iscope360.com/legal/privacy with a new "Last Updated" date
• Send you an email notification
• Display an in-Platform notice

Your continued use of the Platform after the effective date of an updated Policy constitutes acceptance.

17. How to Contact Us

iScope Technologies LLC
8 The Green, Suite B
Dover, Delaware 19901
Email: Info@iscope360.com

For privacy rights requests: use the subject line "Privacy Rights Request"
For security concerns: use the subject line "Security"
For DMCA notices: use the subject line "DMCA Notice"
For data export: use the subject line "Data Export Request"
For unsubscribe: use the subject line "Unsubscribe"

Privacy Officer: Jason S. Clarke

18. Governing Law

This Privacy Policy is governed by the laws of the State of Delaware, without regard to its conflict of laws principles.