Privacy Policy

We are committed to protecting your data and privacy. This policy outlines how we collect, use, and safeguard your information.

Last updated: November 20, 2025

1. Data Controller

Scopax (operated from Switzerland)
Switzerland
Email: support@scopax.com

2. Data We Collect

Account Information

  • Email address (for account access and communication)
  • Password (encrypted, never stored in plain text)
  • Company information (name, industry, size)

Calibration Data

  • Instrument information (names, serial numbers, locations)
  • Calibration certificates (PDFs you upload)
  • Calibration schedules and reminder preferences

Usage Data (Optional with Consent)

  • Page views and feature usage (Google Analytics)
  • Performance metrics for service improvement
  • Error logs for troubleshooting

3. How We Use Your Data

  • Service Provision: To provide calibration tracking and audit pack generation
  • Communication: To send calibration reminders and system notifications
  • Support: To provide customer support and troubleshooting
  • Improvement: To improve our services (only with your consent)
  • Legal Compliance: To meet regulatory requirements

4. Data Storage and Security

  • European Data Residency: All data is stored in Swiss data centers (Zurich region), in a GDPR-adequate jurisdiction.
  • Encryption: Data is encrypted in transit and at rest
  • Access Controls: Row-level security ensures tenant isolation
  • Backups: Regular backups with 30-day retention

5. Your Rights Under UK GDPR & Irish Data Protection

  • Right to Access: Request a copy of your personal data
  • Right to Rectification: Correct inaccurate personal data
  • Right to Erasure: Request deletion of your personal data
  • Right to Portability: Export your data in machine-readable format
  • Right to Object: Object to processing based on legitimate interests
  • Right to Restrict: Request restriction of processing

To exercise these rights, contact us at support@scopax.com

6. Cookie Policy

Necessary Cookies

  • Authentication sessions
  • CSRF protection tokens
  • Cookie consent preferences

Analytics Cookies (Optional)

  • Google Analytics for usage statistics
  • Performance monitoring

You can manage your cookie preferences at any time.

7. Data Retention

  • Account Data: Retained while account is active
  • Calibration Data: Retained while account is active
  • Analytics Data: 26 months (Google Analytics default)
  • Consent Logs: 13 months for compliance audit

8. Third-Party Services

  • Supabase: Database and authentication (European region)
  • Google Analytics: Usage analytics (only with consent)
  • Cloudflare: Security and CDN services
  • Resend: Transactional email delivery

9. Contact Information

For any privacy-related questions or to exercise your GDPR rights:
Email: support@scopax.com
Data Protection Officer: support@scopax.com

10. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

Privacy Policy | Scopax | Scopax