Privacy Policy

Last updated: November 2026

This Privacy Policy describes how TinWorx, which operates Scopewright, collects, uses and protects your personal information in compliance with the Protection of Personal Information Act (POPIA) and other applicable data protection regulations.

1. Information we collect

We collect the following types of information:

• Beta invite requests: the email address you give, the invite code if you add one, whether you ticked "Keep me posted about Scopewright", where the request came from and when it was made
• Account information: email address, name and authentication credentials when you create an account
• Project data: project names, feature descriptions and scoping session content you create within the platform
• Usage data: information about how you interact with our service

2. How we use your information

We use your personal information to:

• Review your invite request and email you your invite
• Send you news about Scopewright, only if you ticked "Keep me posted about Scopewright"; asking for an invite is not consent to marketing
• Provide and maintain our service
• Authenticate your identity and manage your account
• Process your project scoping sessions
• Communicate with you about service updates
• Improve our service and develop new features

3. POPIA compliance

In accordance with the Protection of Personal Information Act (POPIA), we:

• Only collect information that is necessary for our services
• Process your data lawfully, fairly and in a transparent manner
• Keep your information accurate and up to date
• Store your data securely and protect it from unauthorised access
• Retain your data only for as long as necessary
• Respect your rights regarding your personal information

4. Your rights under POPIA

You have the right to:

• Access your personal information we hold
• Request correction of inaccurate information
• Request deletion of your personal information
• Object to the processing of your personal information
• Withdraw your consent to marketing at any time
• Lodge a complaint with the Information Regulator

5. Data security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure or destruction. This includes encryption, secure servers and access controls. Invite requests can only be read by TinWorx, never through this website.

6. Data retention

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. An invite request is kept until the private beta ends, or until you ask us to delete it. When your data is no longer needed, it is securely deleted.

7. Third-party services

We use third-party services that may process your data, each bound by its own privacy policy and required to protect your information:

• Supabase: authentication and data storage
• Cloudflare: hosting this website, and its Turnstile check, which tells people from automated spam when you request an invite. Your connection's address is used to limit how many requests can be sent, and is not stored with your request
• Resend: sending email, including the notice of your invite request to our team
• Google Analytics: aggregate usage analytics in the Scopewright app, only with your consent
• Microsoft Clarity: session recordings and heatmaps in the Scopewright app, only with your consent; sensitive content such as scoping conversations, requirements documents and project detail is masked and not legible in recordings

8. Cookies and tracking

This website sets no analytics or advertising cookies. The Cloudflare Turnstile check may use what it needs to tell people from automated spam. In the Scopewright app we use essential cookies to maintain your session and preferences; analytics (Google Analytics) and session recording (Microsoft Clarity) are used only after you accept the consent banner, and you can change or withdraw your choice at any time. We do not use third-party tracking cookies for advertising purposes.

9. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last updated" date.

10. Contact us

If you have any questions about this Privacy Policy or wish to exercise your rights under POPIA, please contact our Information Officer at [email protected].