Legal

Privacy Policy

Last Updated: August 2026 · Effective: August 2026 · Reviewed quarterly

ℹ️ How This Policy Was Developed

This Privacy Policy was informed by review of comparable AI SaaS products: ChatPRD, Notion AI (no training on customer data by default, 30-day retention), OpenAI ChatGPT, Anthropic Claude, Jasper AI, and Aha!. Key provisions reflect 2026 requirements under the EU AI Act, GDPR, CCPA/CPRA, and FTC AI disclosure guidelines. This policy is reviewed quarterly as required by AI SaaS best practices.

01 Introduction and Scope 02 Information We Collect 03 How We Use Your Information 04 AI-Specific Data Practices 05 Third-Party Service Providers 06 Data Retention 07 Your Privacy Rights 08 International Data Transfers 09 Data Security 10 Children's Privacy 11 Do Not Sell or Share 12 Changes to This Policy 13 Contact Information

1Introduction and Scope

Prescope LLC ("Company," "we," "us," or "our") operates the Prescope™ AI-powered work decomposition platform at prescopesolutions.com (the "Service"). This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you access or use the Service.

What makes this policy different from a standard SaaS privacy policy: Prescope™ uses artificial intelligence to process your inputs and generate outputs. This introduces data handling practices that do not exist in traditional software — including AI input processing, third-party AI API transmission, and AI-generated output ownership. Each of these is addressed explicitly in this Policy.

This Policy applies to all users of the Service, including free tier users, paid subscribers, and visitors to prescopesolutions.com. By using the Service, you agree to the collection and use of information as described in this Policy.

Contact: Prescope LLC · Tuxedo Park, New York · info@prescopesolutions.com

2Information We Collect

2.1 Account and Registration Information

When you create a Prescope™ account using Google Sign-In (via Clerk), we receive the following from Google:

Your name as registered with Google
Your Google email address
Your Google profile picture (optional, display only)
A Google authentication token (not your Google password)

We do not receive or store your Google password. Authentication is handled entirely by Clerk, our third-party identity provider. You may also create an account using your email address directly, in which case we collect your name and email address.

2.2 Payment Information

Payment processing is handled entirely by Stripe Inc. When you subscribe to a paid plan:

We receive from Stripe: your subscription status, subscription tier, and billing email
We do not receive, store, or have access to your credit card number, bank account details, or payment card CVV
All payment data is governed by Stripe's Privacy Policy at stripe.com/privacy

2.3 AI Inputs and Outputs

🔑 Most Important Section for AI Users

This section explains what happens to the business requests, requirements, and planning content you enter into Prescope™. Read it carefully.

Your input text (business requests, requirements, stakeholder descriptions) is transmitted to the Anthropic Claude API for processing
AI-generated outputs (classifications, user stories, process flows, business rules) are returned to you through the Service
Your inputs are not stored in Prescope's databases beyond the active session unless you explicitly save a session
Saved sessions are stored in association with your account to provide the session history feature
Prescope LLC does not use your inputs or outputs to train AI models
Your inputs are transmitted to Anthropic PBC for processing — see Section 4 for Anthropic's data practices

2.4 Usage and Analytics Data

We collect information about how you use the Service through Google Analytics 4 and standard web server logs:

Pages visited and features used within the Service
Generation counts (for free tier usage enforcement via Vercel KV)
Session duration and frequency of use
Browser type, operating system, and device type
IP address (anonymized in analytics)
Referral source (how you found the Service)

2.5 Contact Form Submissions

When you submit the contact form at prescopesolutions.com/contact, we collect your name, email address, and the content of your message. Contact form data is processed by Formspree and delivered to info@prescopesolutions.com. We do not share contact form submissions with third parties.

2.6 Cookies and Tracking Technologies

Cookie Type	Purpose	Category	Retention
Authentication (Clerk)	Keep you signed in	Essential	Session or 30 days
Usage tracking (Vercel KV)	Free tier generation count	Essential	Monthly reset
Google Analytics 4	Anonymized usage analytics	Analytics	Up to 14 months
Stripe	Payment session & fraud prevention	Essential for payments	Per Stripe policy

You may disable non-essential cookies through your browser settings. Disabling essential cookies (Clerk authentication) will prevent you from using the Service. To opt out of Google Analytics, use the Google Analytics Opt-out Browser Add-on.

3How We Use Your Information

Purpose	How We Use Data	Legal Basis (GDPR)	Applies To
Provide the Service	Account creation, authentication, AI generation, export, session history	Contract performance	All users
Process payments	Subscription billing, payment verification, cancellation	Contract performance	Paid subscribers
Enforce free tier limits	Track generation count per user per month	Legitimate interest	Free tier users
Improve the Service	Anonymized usage analytics, feature engagement	Legitimate interest	All users
Customer support	Respond to contact form inquiries	Legitimate interest	Users who contact us
Legal compliance	Comply with applicable laws, respond to legal process	Legal obligation	All users
Fraud prevention	Detect and prevent unauthorized use	Legitimate interest	All users
Communications	Notify you of material changes to Terms or this Policy	Legitimate interest	Registered users

✅ What We Do NOT Do With Your Data

We do not sell your personal information to third parties. We do not use your inputs or outputs to train AI models. We do not share your data with advertising networks. We do not use your data for profiling or automated decision-making that has legal or similarly significant effects on you. We do not transfer your data to countries without adequate privacy protections without appropriate safeguards.

4AI-Specific Data Practices

Informed by 2026 industry best practices (Notion AI, Anthropic, OpenAI) and EU AI Act transparency requirements, this section specifically addresses AI data handling.

4.1 AI Input Processing

When you submit a business request, requirement, or other text to Prescope™, that text (your "Input") is:

Transmitted securely via HTTPS to the Anthropic Claude API
Processed by Anthropic's AI model to generate classifications and work artifacts
Returned to you as a generated Output
Not stored by Prescope in our databases unless you explicitly save the session
Not used by Prescope to train any AI model

4.2 No Training on Your Data

Prescope LLC does not use your Inputs or Outputs to train, fine-tune, or improve AI models. This commitment is consistent with Notion AI's policy (no training on customer data by default) and Anthropic API's data practices for API customers. Your business requirements, work artifacts, and planning session content remain yours.

4.3 Anthropic API Data Handling

Your Inputs are transmitted to Anthropic PBC for processing. Key facts about Anthropic's data practices for API customers:

Anthropic's API processes inputs to generate outputs and does not train models on API customer inputs by default (per Anthropic's usage policies as of 2026)
Anthropic may retain API inputs and outputs for up to 30 days for safety monitoring purposes
Anthropic's Privacy Policy governs their data handling: anthropic.com/privacy
Changes to Anthropic's data practices are outside Prescope's control

4.4 Session Storage

When you save a session in Prescope™, the following is stored in association with your account: your original Input text, the classification result, and all generated Outputs at each decomposition level. Saved sessions are retained for as long as your account is active. You may delete individual sessions or your entire account at any time.

4.5 AI Output Ownership

Outputs generated through your use of the Service are yours to use. We do not claim ownership of AI-generated work artifacts, user stories, process flows, or other content generated by the Service based on your Inputs. You retain all rights to your Inputs. The Company retains the right to use anonymized, aggregated, non-identifiable data about Service usage (not your specific Inputs or Outputs) to improve the Service.

4.6 EU AI Act Transparency

In accordance with EU AI Act requirements effective 2025–2026: (a) Prescope™ uses generative AI technology to produce outputs; (b) all outputs are AI-generated and require human review before reliance; (c) the underlying AI model is Claude, provided by Anthropic PBC, a U.S. company; (d) the Service is designed as a productivity assistance tool and does not make automated decisions with legal or similarly significant effects on users.

5Third-Party Service Providers and Data Sharing

We share your personal information with the following third-party service providers who process data on our behalf. Each provider is contractually required to protect your data and use it only for the specified purpose.

Service Provider	Location	Purpose	Privacy Policy
Anthropic PBC	San Francisco, CA, USA	AI model processing — your Inputs are transmitted for generation	anthropic.com/privacy
Clerk Inc.	San Francisco, CA, USA	Authentication — Google Sign-In and account management	clerk.com/privacy
Stripe Inc.	San Francisco, CA, USA	Payment processing — subscription billing	stripe.com/privacy
Vercel Inc.	San Francisco, CA, USA	Hosting, serverless functions, and Vercel KV usage tracking	vercel.com/legal/privacy-policy
Google LLC	Mountain View, CA, USA	Google Analytics 4 (anonymized usage data) and Google Sign-In OAuth	policies.google.com/privacy
Formspree Inc.	N/A	Contact form delivery to info@prescopesolutions.com	formspree.io/privacy
Porkbun LLC	Portland, OR, USA	Domain name registration for prescopesolutions.com	porkbun.com/about/privacy

We do not share your personal information with any third party for advertising, marketing, or data brokerage purposes. We do not sell your personal information.

6Data Retention

Data Type	Retention Period	Reason
Account information (name, email)	Duration of account + 90 days after deletion	Account management and legal compliance
Saved session data (Inputs, Outputs)	Duration of account + 90 days, or until you delete	Session history feature
Payment records (subscription status)	7 years after subscription end	Tax and financial record requirements (IRS)
Usage analytics (Google Analytics 4)	14 months (GA4 default, anonymized)	Service improvement
Free tier usage counts (Vercel KV)	30 days, reset monthly	Free tier enforcement
Contact form submissions	90 days after resolution	Customer support
Anthropic API inputs (Anthropic's retention)	Up to 30 days (Anthropic's practice)	Safety monitoring by Anthropic
Server logs (Vercel)	30 days	Security and debugging

You may request deletion of your account and all associated data at any time by emailing info@prescopesolutions.com. We will process deletion requests within 30 days. Note that we may retain certain records longer if required by law (e.g., financial records for tax purposes).

7Your Privacy Rights

7.1 Rights for All Users

Right to access: request a copy of the personal information we hold about you
Right to correction: request correction of inaccurate personal information
Right to deletion: request deletion of your account and personal information
Right to data portability: request your personal information in a structured, machine-readable format
Right to opt-out of Google Analytics: use the Google Analytics Opt-out Add-on
Right to withdraw consent: where processing is based on consent, withdraw at any time

7.2 California Residents — CCPA/CPRA Rights

California residents have the following additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), effective January 1, 2026:

Right to know: request disclosure of categories and specific pieces of personal information collected, used, disclosed, or sold
Right to delete: request deletion of personal information collected
Right to correct: request correction of inaccurate personal information
Right to opt-out of sale: Prescope LLC does not sell personal information — this right is not triggered
Right to limit use of sensitive personal information: we do not collect or use sensitive personal information as defined by CPRA
Right to non-discrimination: we will not discriminate against you for exercising your CCPA/CPRA rights
Right to opt-out of automated decision-making: Prescope does not make automated decisions with legal or similarly significant effects

To exercise your CCPA/CPRA rights, contact us at info@prescopesolutions.com with the subject line "CCPA Privacy Request." We will respond within 45 days as required by law.

7.3 European Union / EEA Residents — GDPR Rights

If you are located in the European Union or European Economic Area, you have the following rights under the General Data Protection Regulation (GDPR):

Right of access (Article 15): obtain confirmation of whether we process your personal data and a copy of it
Right to rectification (Article 16): have inaccurate personal data corrected
Right to erasure / "right to be forgotten" (Article 17): request deletion of your personal data
Right to restriction of processing (Article 18): request that we restrict processing in certain circumstances
Right to data portability (Article 20): receive your personal data in a structured, machine-readable format
Right to object (Article 21): object to processing based on legitimate interests, including for AI training purposes
Right not to be subject to automated decision-making (Article 22): Prescope does not make such decisions
Right to lodge a complaint with a supervisory authority: contact your national data protection authority

To exercise your GDPR rights, contact us at info@prescopesolutions.com with the subject line "GDPR Data Request." We will respond within 30 days.

8International Data Transfers

Prescope LLC is based in Tuxedo Park, New York, USA. If you access the Service from outside the United States, your personal information will be transferred to and processed in the United States. The United States may not have data protection laws equivalent to those in your country.

All of our third-party service providers (Anthropic, Clerk, Stripe, Vercel, Google) are U.S.-based companies. Data transferred to these providers is subject to their privacy policies and applicable transfer mechanisms.

For EU/EEA users, we rely on Standard Contractual Clauses (SCCs) and other appropriate safeguards for international data transfers where required by GDPR. Our service providers maintain their own transfer mechanisms consistent with GDPR requirements.

9Data Security

We implement commercially reasonable technical and organizational security measures to protect your personal information:

All data transmitted between your browser and our Service is encrypted using TLS/HTTPS
Authentication is handled by Clerk with industry-standard OAuth 2.0 and session management
Payment data is never processed or stored by Prescope — handled entirely by Stripe with PCI-DSS compliance
Vercel KV (Redis) stores free tier usage counts with encryption at rest
API keys and environment variables are stored as Vercel encrypted environment variables, never in code
Access to account data is limited to authenticated users accessing their own accounts only

No security system is impenetrable. In the event of a data breach that affects your personal information, we will notify you as required by applicable law. We recommend using a strong, unique password for your Google account and enabling two-factor authentication on Google.

10Children's Privacy

The Service is not directed to individuals under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18 without parental consent, we will take steps to delete that information. If you believe we have inadvertently collected information from a child, contact us at info@prescopesolutions.com.

11Do Not Sell or Share My Personal Information

Prescope LLC does not sell your personal information. We do not share your personal information with third parties for cross-context behavioral advertising. We do not engage in targeted advertising using your personal data. Our only data-sharing is with service providers who process data on our behalf as described in Section 5.

California residents have the right to opt out of the "sale" or "sharing" of personal information under CCPA/CPRA. Since we do not sell or share personal information for advertising purposes, this right is not triggered. If our practices change, we will update this Policy and provide opt-out mechanisms before any such change takes effect.

12Changes to This Privacy Policy

AI SaaS privacy policies require more frequent updates than traditional software privacy policies, due to the pace of AI regulatory change. We review this Policy quarterly at minimum, and update it whenever:

We integrate new AI models or change our AI provider
We add new features that process personal data differently
New AI regulations take effect (EU AI Act provisions continue through 2026)
Our third-party service providers change their data practices
U.S. state privacy laws are amended or new laws take effect

When we make material changes to this Policy, we will notify you by email (to your registered email address) and by posting a notice on the Service at least 30 days before the changes take effect. Your continued use of the Service after the effective date constitutes acceptance of the updated Policy.

13Contact Information and Privacy Requests

For all privacy-related inquiries, data subject requests, or concerns about this Policy:

Company: Prescope LLC · Privacy Officer
Address: Tuxedo Park, Orange County, New York 10987
Email: info@prescopesolutions.com
Subject line for privacy requests: "Privacy Request"
Response time: Within 30 days (45 days for CCPA requests)

⚠️ Third-Party Privacy Policies

This Privacy Policy covers data processing by Prescope LLC only. For data processed by our service providers, please review their privacy policies directly: Anthropic, Clerk, Stripe, Vercel, Google, Formspree.