Introduction
This Privacy Policy explains how we process your personal data when you use Scopture’s services. Some processing is necessary for us to provide you with our services (see Section 3A), while other processing may be based on your explicit consent, which you can give or withdraw at any time (see Section 3B). By using Scopture, you acknowledge that you have read and understood this Privacy Policy.
1. Important Information and Who We Are
Purpose of This Privacy Policy
This policy provides information about how Scopture, a product of Ducflair, collects, processes, and safeguards your personal data when you use our services, including this website and our CAD tools.
Data Controller
Ducflair, based in Portugal, is the controller responsible for your personal data. For the purposes of this Privacy Policy, references to “Scopture,” “we,” “us,” or “our” refer to Ducflair.
Contact Information
If you have any questions or concerns about this Privacy Policy or your personal data, please contact us:
- Email: [email protected]
2. The Data We Collect About You
We collect and process various types of data to provide and improve our services. The categories of personal data we may collect include:
- Identity Data: First name, last name, username, or similar identifiers.
- Contact Data: Email address, telephone number, billing address, and delivery address.
- Payment Data: Payment processing is handled by third-party providers like Stripe, which may collect payment card details and other financial data.
- Technical Data: IP address, login credentials, browser type and version, time zone setting, location data, device information, and operating system.
- Usage Data: Information about how you use our services, including interaction with features and user behavior.
- Design Data: Drafts and models you create using Scopture’s CAD tools.
Providing your Identity and Contact Data is a contractual requirement necessary to create an account and access Scopture’s services. If you do not provide this data, we will be unable to register your account or provide access to the platform. Providing Payment Data is required only if you subscribe to a paid plan. All other data collection is either technically necessary for the functioning of the service or entirely voluntary.
3. How We Use Your Personal Data
We only process your personal data when we have a valid legal basis to do so. Most commonly, we use your data under the following categories:
A. Performance of a Contract
We process the following data because it is necessary to perform the contract we have with you (i.e., our Terms of Service) or to take steps at your request before entering into such a contract:
- Account Creation: To register you as a new user and manage your secure profile.
- Service Delivery: To provide access to Scopture’s CAD tools, project management features, and technical support.
- Payment Processing: To facilitate secure billing and transactions through our third-party provider, Stripe.
B. Consent
We rely on your explicit, freely given consent for the following activities:
- Marketing Communications: To send you newsletters, promotional offers, or updates about new features where you have opted in to receive them.
C. Legitimate Interests
We process your data when it is necessary for our legitimate interests (or those of a third party), provided your fundamental rights do not override those interests:
- Platform Security: To detect and prevent fraud, unauthorized access, or malicious activity.
- Service Analytics: To analyze how users interact with our interface so we can fix bugs and improve the user experience.
All third-party providers are bound by Data Processing Agreements and are required to process your data in accordance with the GDPR.
D. Legal Obligation
We may process your data where it is necessary for compliance with a legal obligation to which we are subject, such as:
- Tax & Accounting: Keeping records of financial transactions for Portuguese tax authorities.
- Regulatory Requests: Responding to valid legal requests from government or law enforcement bodies.
4. Disclosures of Your Personal Data
We share your data only with trusted third-party providers to the extent necessary for the purposes described in this Privacy Policy. These providers include Stripe for payment processing, Amazon Web Services (AWS) for cloud infrastructure and hosting, Grafana Cloud for system monitoring and performance analytics, and a self-hosted version of Umami for cookieless website analytics (page views, referrer, browser type, and screen resolution — no personally identifiable information is collected by us).
5. Data Retention
We retain your personal data for as long as you have an active account. If you delete your account, we will delete your personal data within 30 days.
6. Your Legal Rights
Under GDPR and other applicable laws, you have the following rights:
- Access: Request a copy of the personal data we hold about you.
- Correction: Correct any inaccuracies in your data.
- Erasure: Request the deletion of your data where applicable.
- Restriction: Restrict the processing of your data in certain circumstances.
- Portability: Request a copy of your data in a structured, commonly used format.
- Objection: Object to the processing of your data for specific purposes, such as direct marketing.
To exercise your rights, contact us at [email protected].
You also have the right to lodge a complaint with a data protection supervisory authority. In Portugal, this is the Comissão Nacional de Proteção de Dados (CNPD). You can find their contact details at www.cnpd.pt.
7. Third-Party Links
Our website and services may contain links to external sites or third-party applications. We are not responsible for the privacy practices of these entities. Please review their privacy policies before providing personal data.
8. Cookies
Scopture uses only strictly necessary cookies to ensure the proper functioning of the platform. These cookies are essential for features such as user authentication. They are temporary, session-based, and are not used to track, profile, or collect any personal data for marketing or analytical purposes. No third-party cookies are used on the platform.
For website analytics, we use Umami, a privacy-friendly, cookieless analytics tool. Umami does not use cookies, does not collect personally identifiable information, and does not track users across sessions or websites. The aggregate analytics data collected (page views, referrer, browser type, screen resolution) cannot be used to identify you individually.
9. Children’s Privacy
Scopture’s services are not directed at individuals under the age of 13. We do not knowingly collect personal data from children under 13. If you are a parent or guardian and believe that your child has provided us with personal data, please contact us at [email protected]. If we become aware that we have collected personal data from a child under 13 without appropriate parental consent, we will take steps to delete that data promptly.
10. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or operational needs. For any material changes, we will provide you with at least 30 days’ notice via email or a prominent notice on our platform before the changes take effect. The latest version will always be available on our website with the effective date clearly indicated.
11. Contact Us
If you have any questions, concerns, or wish to exercise your rights, you can reach us at:
- Email: [email protected]
Alternatively, you may write to us at:
Ducflair
Paço de Sousa, Rua de Rebordim (Fraction D)
Porto, Portugal