1. Who We Are

BuildScope is operated by Evant Group Ltd, a company registered in England and Wales. We are the data controller for the personal data processed through the BuildScope service.

Contact: info@evant-group.com

2. What Data We Collect

Account information

When you create an account, we collect your email address and password (encrypted). During onboarding, you may provide your business name, trade, region, and VAT registration status.

Business data

You may choose to add business details including your business address, phone number, email, logo, and default terms and conditions. This data is used to personalise your quotes and invoices.

Quote and invoice data

We store the quotes and invoices you create, including customer names, email addresses, phone numbers, site addresses, job descriptions, line items, and pricing. This data is necessary to provide the Service.

Customer data

You may store your customers' contact details (name, email, phone, address) within the Service. You are responsible for ensuring you have appropriate consent or legal basis to store your customers' data.

Usage data

We automatically collect basic usage data including pages visited, features used, browser type, and IP address. This helps us improve the Service.

Payment data

If you subscribe to a paid plan, payment processing is handled by Stripe. We do not store your full card details. Stripe's privacy policy applies to payment data.

3. How We Use Your Data

We use your data to: provide and operate the BuildScope service; generate AI-powered quotes using your job descriptions; create PDF documents with your business details; send transactional emails (account verification, password resets); process subscription payments; improve the Service based on usage patterns; and communicate service updates or changes.

4. AI Processing

When you use AI quote generation, your job description is sent to a third-party AI provider (OpenAI) for processing. The description is used solely to generate quote content and is not used to train AI models. We do not send your customer personal data or financial details to the AI provider.

5. Legal Basis for Processing (GDPR)

We process your data under the following legal bases:

Contract performance: Processing necessary to provide the Service you have signed up for (account data, quotes, invoices).

Legitimate interests: Usage analytics to improve the Service, fraud prevention, and service security.

Consent: Marketing communications (you can opt out at any time).

6. Data Sharing

We do not sell your data to third parties. We share data only with:

Supabase — our database and authentication provider, which stores your account and application data.

Vercel — our hosting provider, which processes web requests.

OpenAI — AI processing for quote generation (job descriptions only, no personal customer data).

Stripe — payment processing for subscriptions.

We may also share data where required by law or to protect our legal rights.

7. Data Storage and Security

Your data is stored in Supabase infrastructure. All data is encrypted in transit (TLS) and at rest. Access to production databases is restricted to authorised personnel only. We implement row-level security policies to ensure users can only access their own data.

8. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will permanently delete your data within 30 days, except where we are required to retain it for legal, accounting, or regulatory purposes.

Inactive free accounts may be deleted after 12 months of inactivity, with 30 days' notice sent to your registered email.

9. Your Rights (GDPR)

Under the UK GDPR, you have the right to:

Access — request a copy of the personal data we hold about you.

Rectification — request correction of inaccurate data.

Erasure — request deletion of your data (“right to be forgotten”).

Portability — request your data in a portable format.

Restriction — request we limit processing of your data.

Object — object to processing based on legitimate interests.

To exercise any of these rights, contact us at info@evant-group.com. We will respond within 30 days.

10. Cookies

BuildScope uses essential cookies for authentication and session management. These are strictly necessary for the Service to function and do not require consent. We do not use advertising or tracking cookies.

11. Children

The Service is not intended for anyone under the age of 18. We do not knowingly collect data from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service. The “last updated” date at the top of this page indicates when the policy was last revised.

13. Complaints

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

14. Contact

For any privacy-related questions, contact us at info@evant-group.com.