Privacy Policy

1. Introduction and Scope

Jackson Solution Works, Inc., doing business as "ScopeAccord" ("ScopeAccord," "we," "us," or "our"), provides a software service that helps residential remodeling contractors turn plain-language job descriptions into draft contract documents (the "Service"). This Privacy Policy explains what information we collect through the Service, how we use and share it, and the choices available to you. It applies to visitors to scopeaccord.com and to users of the Service. It does not apply to third-party websites or services that the Service may link to.

2. Our Role: Two Kinds of Personal Information

ScopeAccord is a business-to-business tool, and it handles two distinct categories of personal information, which matters for understanding your rights:

• Your account and company information — information about you and your teammates as users of the Service (name, email, phone, role, login credentials or OAuth identifiers, company profile details). For this information, ScopeAccord acts as the data controller (or "business," under U.S. state law terminology) and this Policy describes our own direct collection and use.
• Information you input about your own customers — such as the names, phone numbers, emails, and property addresses of the homeowners or clients you serve, which you enter into ScopeAccord to generate contracts, change orders, and related documents. For this information, your company is the data controller and ScopeAccord acts as a service provider / processor, handling it only to provide the Service to you and according to your instructions. If you are a homeowner or other individual whose information was entered into ScopeAccord by a contractor, please direct requests about your information to that contractor in the first instance; see Section 12.

3. Information We Collect

3.1 Account and Company Information

When you register, we collect your name, email address, and (if you sign in with Google) your Google account identifier and profile information; if you register with email and password, we collect and store your credentials (passwords are stored using industry-standard hashing, not in plain text). We also collect company profile information such as legal and trade name, phone, business address, primary trade, and — where applicable — Wisconsin Dwelling Contractor and Qualifier certification details.

3.2 Customer and Project Data You Input

To generate a contract or change order, you provide information about your customers and their projects, which may include: the customer's name, phone number, email, preferred contact method, and property/billing address; project details such as scope of work, materials, pricing, payment schedule, permits, and dates; and any details you choose to include in free-text scope, exclusions, or notes fields.

3.3 Voice and Audio Data

If you use dictation or read-aloud features, we (through our speech-to-text and text-to-speech subprocessors) process the audio you provide in order to convert it to text, or convert prompt text to spoken audio, and to support optional AI "professionalize" wording suggestions. We use voice input to capture the words you say, not to identify or verify who is speaking, and we do not use voice recordings for biometric identification.

3.4 Documents and Attachments

Photos, drawings, PDFs, and other files you upload as contract attachments (e.g., Exhibit A materials) or import as existing draft documents (PDF, DOCX, or scanned images processed with OCR) are stored and associated with the relevant project and contract.

3.5 Usage and Analytics Data

We collect information about how you use the Service — such as sign-in events, workflow starts and completions, which fields were corrected, and whether a project was determined eligible or blocked — to understand product usage and improve the Service.

3.6 Device and Log Data

Our servers and infrastructure providers automatically log technical information such as IP address, browser type, device information, timestamps, and pages or actions requested, for security, debugging, and operational purposes.

3.7 Payment Information

When billing is enabled, subscription payments are handled by a third-party payment processor. We do not store full payment card numbers on our own servers; the payment processor collects and processes that information under its own privacy policy, and we receive limited billing information (such as plan, amount, and transaction status) needed to manage your subscription.

4. How We Use Information

We use the information described above to:

• Provide, operate, and maintain the Service, including generating the documents you request;
• Extract structured information from your descriptions and propose professionalized wording, using the AI providers described in Section 6;
• Convert dictated speech to text and text to spoken audio;
• Authenticate you, maintain your session, and enforce company-level data isolation and role-based permissions;
• Look up ZIP codes from an address you provide, via a geocoding service, to reduce manual entry (address lookups are performed server-side so the address is not exposed in page URLs);
• Bill and manage your subscription;
• Analyze product usage to improve features, fix problems, and inform the pilot's eligibility rules and product roadmap;
• Communicate with you about your account, changes to the Service, or support requests;
• Detect, investigate, and prevent fraud, abuse, or security incidents;
• Comply with legal obligations and enforce our Terms of Service.

We do not sell your personal information, and we do not use Customer Data you input about your own customers to train our own general-purpose products for other customers' benefit.

5. Cookies and Similar Technologies

We use session cookies or similar technologies that are necessary to keep you signed in and to maintain your session securely.

6. AI Processing and Subprocessors

To provide the Service, we share limited, relevant data with the following categories of third-party service providers ("subprocessors"), each of which is contractually restricted to using data only to provide services to us:

This list may change as we add or replace providers. We will update this Policy when we make a material change to our subprocessors.

7. Voice Data and Biometric-Privacy Considerations

Some states (including Illinois, Texas, and Washington) regulate the collection of "biometric identifiers," which can include voiceprints used to identify a specific person. ScopeAccord's dictation and read-aloud features are used for speech-to-text transcription and prompt playback — converting what was said into text, or text into audio — and are not used to identify or verify a speaker's identity.

8. How We Share Information

We share personal information only as follows:

• With the subprocessors listed in Section 6, to provide the Service;
• Within your company workspace, as intended by the Service's design (e.g., teammates you invite can see company records, subject to their role permissions);
• With service providers who support our operations (e.g., customer support tooling, error monitoring), under confidentiality obligations;
• If required by law, subpoena, or other legal process, or to protect the rights, property, or safety of ScopeAccord, our users, or the public;
• In connection with a merger, acquisition, financing, or sale of assets, subject to standard confidentiality protections;
• With your consent or at your direction.

We do not sell personal information or share it for third parties' cross-context behavioral advertising, as those terms are defined under U.S. state privacy laws.

9. Data Retention

We retain account, customer, project, contract, and related data for as long as your account is active, and afterward for as long as reasonably necessary to comply with legal obligations, resolve disputes, enforce our agreements, and support legitimate business needs (such as audit and reporting history). Archived records are retained but hidden from your primary workflow, and remain restorable while your account exists. Activity/audit log entries are retained to support security and accountability.

10. Data Security

We apply technical and organizational measures designed to protect personal information, including: company-scoped data access (every business record is isolated to its owning company), role-based access controls, server-side session-based authentication, server-side handling of address lookups so addresses are not exposed in URLs, and an append-only activity log of sensitive account actions. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Your Rights and Choices

Depending on your location and applicable law, you may have rights to access, correct, delete, or obtain a copy of personal information we hold about you, and to opt out of certain uses. Account holders can access and correct most of their own information directly within the Service (for example, editing customer, project, or company records), or by contacting us at the email address below.

11.1 California and Other U.S. State Privacy Rights

If you are a California resident, the California Consumer Privacy Act (as amended by the CPRA) and similar laws in other states may give you rights to know, delete, correct, and opt out of certain processing of your personal information, and to be free from discrimination for exercising those rights. To exercise a request, contact us using the information in Section 16. We will verify your request before acting on it.

11.2 Marketing Communications

You may opt out of non-essential marketing emails using the unsubscribe link in those emails; we will still send transactional and account-related communications necessary to operate the Service.

12. If Your Information Was Entered by a Contractor (Homeowners and Other Third Parties)

If a contractor using ScopeAccord entered your name, contact information, or address into the Service in connection with a project, ScopeAccord processes that information on the contractor's behalf and at their direction, as their service provider. Because the contractor controls that information, we ask that you first direct any request to access, correct, or delete your information to the contractor. If you contact us directly, we will refer your request to the relevant contractor customer where reasonably possible, and will otherwise honor requests to the extent required by applicable law.

13. Children's Privacy

The Service is intended for business use by adults and is not directed to children. We do not knowingly collect personal information from children under 18. If you believe a child has provided us personal information, contact us and we will take appropriate steps to delete it.

14. International Users

The Service is currently designed for use by businesses operating in the United States (with an active pilot in Wisconsin) and our infrastructure and subprocessors may process data in the United States and other countries where our providers operate.

15. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice (for example, by email or an in-app notice) before the changes take effect. The "Last Updated" date above indicates when this Policy was last revised.

16. Contact Us

If you have questions about this Privacy Policy or wish to exercise a privacy right, contact us at:

Jackson Solution Works, Inc. (d/b/a ScopeAccord) Attn: Privacy 1366 E Sumner St, PMB 14, Hartford, WI 53027 Email: hello@jacksonsolutionworks.com Website: scopeaccord.com