Privacy Policy

1. Who We Are

ScopeMind — the website scopemind.io and the app at app.scopemind.io (together, the “Service”) — is operated by:
Scoper Minder OÜ
Harju maakond, Mustamäe linnaosa
Akadeemia tee 33, 12618
Tallinn, Estonia
Email: hello@scopemind.io
Phone: +372 59 185 008

Scoper Minder OÜ (“ScopeMind”, “we”, “us”) is the controller of the personal data described in this policy. We handle personal data in line with the EU General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Summary

3. Information We Collect

3.1 Account information

When you create an account we collect your email address, your password and, if you provide it, your name. Your password is stored only as a secure hash by our authentication provider; we never store it in readable form. We also keep your account settings and your plan.

3.2 Billing information

Payments are handled by Stripe. When you subscribe, we receive and store your billing name, company name, billing address, VAT or tax ID, the contact person you enter at checkout, your subscription status and your invoice history. We never receive or store your full card number.

3.3 Amazon data you connect

If you connect your Amazon Seller Central account (through Amazon’s Selling Partner API) or your Amazon Advertising account, we receive, with your authorization: your seller ID, your listings and their details, sales, traffic and conversion data for your products and, for advertising, campaign and search term reports. We store the authorization tokens Amazon issues in encrypted form. We use this data only to provide the Service to you and do not sell it. Sales, traffic and listing data from your Seller Central account is shown only in your ScopeMind account. It is never shown to, combined with, or used for any other customer.

3.4 Public marketplace data

ScopeMind monitors and stores publicly available marketplace information, including product identifiers, listing information, pricing, promotions, Best Seller Rank, ratings, review counts, images and keyword-ranking data. This marketplace information generally relates to products and businesses rather than identifiable individuals, and is separate from the personal information associated with your ScopeMind account. It can include a seller or brand name as it appears publicly on Amazon.

3.5 Content you create

The products, niches, keywords, notes, hypotheses and settings you add to ScopeMind, and the questions you ask our AI features together with their answers.

3.6 Usage and device information

If you agree to analytics cookies, we record how you use the app: the pages and screens you view, the features you use and performance measurements. Text you type into form fields, including passwords, is hidden. We use this only to find and fix problems and to improve the Service, and you can switch it off at any time under Cookie settings. Whatever you choose, we log IP addresses, browser details and errors for security and troubleshooting. Section 8 explains the cookies involved.

3.7 Communications

The emails you send us, and the messages you send through the chat widget on our website and in the app.

3.8 Affiliate referrals

If you arrive through an affiliate’s link, a cookie records the referral so that the affiliate can be credited if you subscribe. If you join our affiliate program, our affiliate platform FirstPromoter collects the details needed to register you and pay your commissions.

Customers can also invite others through Share & Earn. If you sign up with a customer’s code or through their link, that customer sees a partly hidden version of your email address (for example j•••@example.com), the date you signed up, your plan, whether you are subscribed, and the commission they earned from your payments. If you use Share & Earn yourself, we create your account on FirstPromoter with your name and email address so it can track your referrals and pay your commissions.

3.9 Website visitors

On scopemind.io, if you agree to analytics or marketing cookies, Google Analytics, the Meta Pixel and HubSpot’s visit tracking collect information about your visit, such as the pages you view, your device and browser, the site that referred you and your approximate location based on your IP address. HubSpot’s support chat is available either way.

4. Sign in with Google

If you choose to sign in with Google, Google shares the following information with ScopeMind, with your permission: your name, email address, profile picture and Google account ID. We request only these basic profile permissions. We do not get access to your Gmail, Google Drive, contacts, calendar or any other Google service, and we never see your Google password. We do not store the access tokens Google issues during sign-in.

We use this information to create your ScopeMind account and sign you in. Your name and email address then become your account details and are used and shared in the same way as the rest of your account information, as described in sections 5 to 7 — including, in hashed form, with Meta to measure our advertising. We do not sell Google user data and do not use it to train artificial intelligence or machine learning models.

You can remove ScopeMind’s access to your Google account at any time at myaccount.google.com/permissions. To have the information itself deleted, email hello@scopemind.io (see section 10).

ScopeMind’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy.

5. How We Use Information, and Why

We use personal data for the following purposes. The legal basis under the GDPR is shown for each.

• Providing the Service — creating and running your account, tracking your products, running the AI features and connecting your Amazon accounts. Basis: performance of our contract with you.
• Billing — processing payments, issuing invoices and keeping accounting records. Basis: contract, and our legal obligations under accounting and tax law.
• Security and troubleshooting — keeping the Service secure, preventing fraud and abuse, and fixing errors. Basis: our legitimate interest in a secure, working Service.
• Improving the Service — understanding how the Service is used through analytics. Basis: your consent to analytics cookies.
• Communicating with you — messages about your account, billing and the Service, and answering your support requests. Basis: contract and our legitimate interests.
• Marketing — if we send you product news or marketing emails, you can unsubscribe at any time using the link in the email. Basis: our legitimate interest in telling customers about our Service, or your consent where the law requires it.
• Advertising measurement — measuring how well our ads on Facebook and Instagram work (section 7). Basis: your consent to marketing cookies for the Meta Pixel; our legitimate interest in measuring our advertising for the sign-up and purchase events our servers send to Meta, which do not depend on cookies.
• Affiliate program — crediting affiliates for customers they refer. Basis: our legitimate interest in running the program.
• Legal compliance — meeting our legal obligations and enforcing our Terms of Service. Basis: legal obligation and legitimate interests.

6. Artificial Intelligence (AI) Features

ScopeMind uses artificial intelligence in several features: the Niche Analyst, Image Intelligence (analysis of product images) and other AI-generated insights, such as Customer Avatar and explanations of listing changes.

What we send. For text-based features, we send the question you ask and the public marketplace and product listing data needed to answer it. Private data from your connected Amazon accounts — sales, traffic, advertising and financial data, and your backend search terms — is not sent to AI providers. For image analysis we send product images and listing details from Amazon. We do not send personal information — your password, payment details, Amazon authorization tokens and contact details are not included. Please don’t include personal information about yourself or anyone else in the questions you type.

How it is handled. AI services process this data under commercial API terms that do not permit using it to train models. Data may be kept for a limited period to monitor for misuse before being deleted.

Accuracy. AI-generated content can be incomplete or wrong. Check important conclusions before you act on them. We do not use AI to make decisions about you that have legal or similarly significant effects on you.

7. Who We Share Data With

We share personal data only with the service providers below, who process it for the purposes described, and where the law requires it. We do not sell your personal data.

The app loads code libraries from the jsDelivr content delivery network, and both our website and app load fonts from Google Fonts; these services receive your IP address when they deliver the files.

We may also share personal data with professional advisers such as accountants and lawyers, with authorities where the law requires it, and with a buyer or successor if our business is sold or merged.

8. Cookies and Similar Technologies

When you first visit scopemind.io or the app, a banner asks whether you accept analytics and marketing cookies. Nothing in those two groups is set until you agree. Your choice covers both the website and the app and is remembered for 6 months. You can change it at any time under Cookie settings, in the footer of our website and in the app.

If you allow them, third parties such as Google, Meta and HubSpot can use these technologies to collect information about your online activity over time and across different websites. You can also block or delete cookies in your browser settings, and you can opt out of Google Analytics with Google’s browser add-on. Blocking essential storage stops the app from keeping you signed in. Our websites do not currently respond to browser “Do Not Track” signals.

9. International Transfers

Our main database and servers are in the EU (Germany), and our product image storage is in the Netherlands. Some providers listed in section 7 process data outside the EU/EEA, mainly in the United States. For those transfers we rely on the European Commission’s adequacy decision for the EU–US Data Privacy Framework, where the provider is certified under it, or on the European Commission’s Standard Contractual Clauses. You can ask us for more information about these safeguards.

10. How Long We Keep Data

• Account data and the content you create — for as long as your account exists.
• Amazon connection data — kept while your Amazon account is connected, so we can show your history. If you disconnect it, or remove ScopeMind’s access in Seller Central, email hello@scopemind.io and we delete the authorization Amazon gave us and the Amazon data we retrieved for you within 30 days. Deleting your ScopeMind account deletes it too.
• Billing records (invoices, payment and tax details) — for 7 years, as required by Estonian accounting law.
• Usage data — only as long as needed to analyse and improve the Service.
• Security and error logs — for a limited time for troubleshooting, then deleted.
• Support conversations and emails — as long as needed to handle your request and keep a record of it.
• Public marketplace data — kept as part of our historical product database. It describes products, not you.

Deleting your account. Email hello@scopemind.io from the address on your account. Within 30 days we delete your account, the content you created and your Amazon connections — including the authorization Amazon gave us and the Amazon data we retrieved for you — and remove your profile from our analytics tools. We keep our support conversations and emails with you, cost records for the AI answers you asked for, and billing records for as long as the law requires. Public data about the products you tracked stays in our product database. Deleted data can remain in encrypted backups for a short time until those backups are overwritten.

11. Your Rights

Under the GDPR you have the right to:

• access the personal data we hold about you and get a copy of it;
• have inaccurate data corrected;
• have your data deleted;
• restrict how we use your data;
• receive your data in a portable format;
• object to processing based on our legitimate interests, and to direct marketing at any time;
• withdraw your consent at any time, where we rely on consent. This does not affect processing that took place before you withdrew it.

To use any of these rights, email hello@scopemind.io. We will reply within one month and may ask you to confirm your identity first. You also have the right to complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee) or to the data protection authority where you live or work.

12. Security

We protect data with encryption in transit (TLS), encrypted storage of Amazon authorization tokens, hashed passwords and access limited to authorized personnel. No system is completely secure. If a data breach affects your personal data, we will notify you and the authorities as the law requires.

13. Children

The Service is built for businesses and is not intended for anyone under 18. We do not knowingly collect personal data from children.

14. Changes to This Policy

We will post any changes on this page and update the “Last Updated” date. If a change is significant, we will also tell you by email or in the app before it takes effect.

15. Contact

Scoper Minder OÜ — Email: hello@scopemind.io — Phone: +372 59 185 008