Privacy Policy | Scopax

1. Data Controller

Scopax (operated from Switzerland)
Switzerland
Email: support@scopax.com

2. Data We Collect

Account Information

Email address (for account access and communication)
Password (encrypted, never stored in plain text)
Company information (name, industry, size)

Calibration Data

Instrument information (names, serial numbers, locations)
Calibration certificates (PDFs you upload)
Calibration schedules and reminder preferences

Usage Data (Optional with Consent)

Page views and feature usage (Google Analytics)
Performance metrics for service improvement
Error logs for troubleshooting

3. How We Use Your Data

Service Provision: To provide calibration tracking and audit pack generation
Communication: To send calibration reminders and system notifications
Support: To provide customer support and troubleshooting
Improvement: To improve our services (only with your consent)
Legal Compliance: To meet regulatory requirements

4. Data Storage and Security

European Data Residency: All data is stored in Swiss data centers (Zurich region), in a GDPR-adequate jurisdiction.
Encryption: Data is encrypted in transit and at rest
Access Controls: Row-level security ensures tenant isolation
Backups: Regular backups with 30-day retention

5. Your Rights Under UK GDPR & Irish Data Protection

Right to Access: Request a copy of your personal data
Right to Rectification: Correct inaccurate personal data
Right to Erasure: Request deletion of your personal data
Right to Portability: Export your data in machine-readable format
Right to Object: Object to processing based on legitimate interests
Right to Restrict: Request restriction of processing

To exercise these rights, contact us at support@scopax.com

6. Cookie Policy

Necessary Cookies

Authentication sessions
CSRF protection tokens
Cookie consent preferences

Analytics Cookies (Optional)

Google Analytics for usage statistics
Performance monitoring

You can manage your cookie preferences at any time.

7. Data Retention

Account Data: Retained while account is active
Calibration Data: Retained while account is active
Analytics Data: 26 months (Google Analytics default)
Consent Logs: 13 months for compliance audit

8. Third-Party Services

Supabase: Database and authentication (European region)
Google Analytics: Usage analytics (only with consent)
Cloudflare: Security and CDN services
Resend: Transactional email delivery

9. Contact Information

For any privacy-related questions or to exercise your GDPR rights:
Email: support@scopax.com
Data Protection Officer: support@scopax.com

10. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.