Privacy Policy

Last Updated: February 14, 2026

RestoScope (restoscope.com, pro.restoscope.com) is a product and service of RestoScope Inc., a Delaware corporation. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services. It should be read in conjunction with our Terms and Conditions, which govern your use of our Services.

1. Information We Collect

1.1 Personal Information

We may collect personal information that you voluntarily provide to us, including but not limited to:

• Name and contact information (email address, phone number, mailing address)
• Company or organization name and title
• Account credentials (username and password)
• Company logo and branding materials
• Payment and billing information
• Communications and correspondence with us

1.2 Project and Business Information

When you use the Services, you may submit:

• Project details, schedules, and status information
• Restoration invoices, estimates, and billing documentation
• Supporting documentation (photos, moisture readings, drying logs, field reports)
• Insurance claim information and policy details
• Names and contact information of individuals involved in your projects (team members, subcontractors, adjusters, property owners)
• Building and property information

We treat all submitted project data as confidential business information.

1.3 Data Ownership

You retain all ownership rights in the documents and data you submit to us. We do not acquire any ownership interest in your data. We process your submitted materials to provide and improve the Services and to fulfill our legal and contractual obligations, under a limited license as described in our Terms and Conditions.

1.4 Automatically Collected Information

When you visit our website or use the platform, we automatically collect certain information about your device and usage, including:

• IP address and approximate geographic location derived from IP address
• Browser type and version
• Operating system
• Device type and identifiers
• Pages visited and time spent on pages
• Referring website or source
• Clickstream data and navigation patterns
• Actions performed within the application

2. Tracking Technologies and Analytics

We use various tracking technologies to collect and analyze information about your use of our website and platform. This helps us improve our services and provide a better user experience.

2.1 Cookies

We use cookies and similar tracking technologies to track activity on our website and store certain information. Cookies are small data files placed on your device. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.

2.2 Analytics Services

We use the following third-party analytics services:

Google Analytics

We use Google Analytics to analyze website traffic and usage patterns. Google Analytics collects information such as how often users visit our site, what pages they visit, and what other sites they used prior to coming to our site. We use this information to improve our website and services. Google's ability to use and share information collected by Google Analytics is restricted by the Google Analytics Terms of Service and the Google Privacy Policy. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

PostHog

We use PostHog for product analytics to understand how users interact with our platform. PostHog helps us track feature usage, user flows, and identify areas for improvement. PostHog may collect information such as device information, IP address, browser type, pages visited, and actions taken on our site. This data is used to analyze and improve our services.

2.3 Other Tracking Technologies

We may also use:

• Web beacons: Small electronic images used to track user behavior and measure effectiveness of our content
• Pixel tags: Code snippets that help us understand how visitors interact with our website

3. AI-Assisted Processing of Your Data

Our Services utilize artificial intelligence tools and automated systems to assist with certain platform features. This section explains how AI is used in processing your data.

3.1 How AI Is Used

Documents and data you submit ("Client Data content," including documents, images, invoices, and project files) may be processed using AI-assisted tools to deliver our Services, including analysis of billing documentation, identification of discrepancies, and generation of insights and recommendations.

AI-generated outputs are provided as decision-support tools to assist users in their professional work. Any third-party AI service providers we engage are contractually required to maintain confidentiality and data protection obligations consistent with this Privacy Policy and our Terms and Conditions.

3.2 Your Data Is Not Used to Train AI Models

• We do not use Client Data content (including documents, images, invoices, and project files) to train any AI models—including our own internal models—unless Client explicitly opts in in writing.
• We may use de-identified and aggregated usage metrics (such as feature adoption rates, platform performance data, and navigation patterns) to improve product performance and reliability. These metrics do not contain Client Data content.

For additional detail on our use of AI and automated processing, see Section 3 of our Terms and Conditions.

4. How We Use Your Information

We use the information we collect for the following purposes:

5. Information Sharing and Disclosure

We do not sell your personal information.

We may share your information in the following circumstances:

5.1 Service Providers

We may share information with third-party vendors who perform services on our behalf, such as:

• Cloud hosting and data storage providers
• Payment processors
• Analytics providers (Google Analytics, PostHog)
• AI and machine learning service providers used to process submitted documentation
• Customer support platforms
• Email service providers (e.g., SendGrid)

We require these service providers to implement appropriate confidentiality and security safeguards and to use your information only for the purposes for which it is disclosed.

A current list of subprocessors that process client data in connection with our Services is available upon written request. Please contact us using the information in Section 14.

5.2 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).

5.3 Business Transfers

If RestoScope Inc. is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.

5.4 With Your Consent

We may share your information with third parties when you have given us explicit consent to do so.

6. Data Retention and Deletion

6.1 Retention Periods

We retain your personal information for as long as necessary to fulfill the purposes for which it was collected, including:

• As long as your account is active or you maintain an active relationship with us
• As needed to provide our Services
• To comply with legal obligations (e.g., tax and accounting requirements)
• To resolve disputes and enforce our agreements

Client-submitted project data and documentation will be retained only as long as necessary to provide the Services or as otherwise agreed in writing with the Client.

We retain our own financial and accounting records for periods required by applicable tax and corporate recordkeeping laws.

6.2 Data Deletion

You may request deletion of your data at any time by submitting a verified written request to hello@restoscope.com or through our contact form. Upon receipt of a verified deletion request:

• We will delete your data from active systems within thirty (30) days of a verified request.
• Data in backup systems will be overwritten in the ordinary course of our backup rotation cycle.
• We may retain limited information where required by law, regulation, or legitimate business record-keeping obligations.

For additional detail on data retention and deletion, see Section 9 of our Terms and Conditions.

7. Data Security and Incident Notification

7.1 Security Measures

We implement appropriate technical and organizational security measures to protect your information, including:

• Encryption of data in transit (TLS/SSL) and at rest within secure cloud infrastructure
• Logical segregation of client data within a multi-tenant environment
• Access controls limiting employee access on a need-to-know basis
• Authentication requirements for portal and application users
• Periodic security reviews and risk assessments

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security.

7.2 Security Incident Notification

In the event of a confirmed security incident involving unauthorized access to personal data under our control, we will:

• Notify you without unreasonable delay after confirmation of the incident
• Provide reasonably available information about the nature and scope of the incident
• Cooperate in good faith to investigate and remediate the incident

Where required by applicable law, we will also notify relevant regulatory authorities within the legally mandated timeframe.

Notification of a security incident does not constitute an admission of fault or liability. For additional detail, see Section 10 of our Terms and Conditions.

8. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

8.1 Access and Portability

You may request a copy of the personal information we hold about you in a structured, commonly used format.

8.2 Correction

You may request that we correct inaccurate or incomplete personal information.

8.3 Deletion

You may request that we delete your personal information, subject to certain legal exceptions. See Section 6.2 above for details on our deletion process.

8.4 Opt-Out

You may opt out of:

• Marketing communications by clicking "unsubscribe" in our emails or contacting us. Note: Transactional emails (such as account confirmations, security alerts, billing notices, and service updates) are not marketing communications and cannot be opted out of while you maintain an active account.
• Certain cookies and tracking technologies through your browser settings
• Google Analytics by installing the Google Analytics Opt-out Browser Add-on

8.5 Data Processing Addendum

Enterprise clients who require additional data processing safeguards may request a Data Processing Addendum (DPA) governing the processing of personal data in connection with our Services. To request a DPA, please contact us using the information in Section 14.

9. California and State Privacy Rights

9.1 California Consumer Privacy Act (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information held by businesses
• Right to opt-out of sale or sharing of personal information
• Right to limit use of sensitive personal information
• Right to non-discrimination for exercising your privacy rights

Categories of personal information we collect:

• Identifiers (name, email address, phone number, mailing address)
• Commercial information (invoices, estimates, project details, payment records)
• Internet or electronic network activity (browsing history, search history, interaction data)
• Professional or employment-related information (company name, title)
• Geolocation data (IP-based location)

Categories of personal information disclosed for business purposes:

• Identifiers and commercial information shared with cloud hosting, AI service providers, and payment processors
• Internet activity information shared with analytics providers (Google Analytics, PostHog)

We do not sell personal information. We do not share personal information for cross-context behavioral advertising. We use analytics and similar tools solely for internal business purposes such as website performance measurement and product improvement. These uses qualify as "business purposes" under applicable privacy laws.

9.2 Other State Privacy Laws

Residents of other states with comprehensive privacy laws (including Virginia, Colorado, Connecticut, Utah, and other states with enacted consumer privacy legislation) may have similar rights, including the right to access, correct, delete, and opt out of certain processing of personal information. Please contact us to exercise any applicable rights.

9.3 Exercising Your Rights

To exercise your privacy rights, submit a request to hello@restoscope.com or through our contact form and mention "Privacy Request" in the subject line. We will verify your identity before processing your request and respond within the timeframes required by applicable law.

10. International Data Transfers

Our Services are provided from the United States. Client-submitted project data is stored and processed within the United States using U.S.-based cloud infrastructure.

Certain analytics or operational service providers may process limited technical data (such as IP address or usage metrics) outside the United States in accordance with applicable data protection laws.

If you access our Services from outside the United States, your information will be transferred to and processed in the United States, which may have data protection laws that are different from those in your jurisdiction.

We select service providers that implement appropriate security and confidentiality safeguards to protect personal information in accordance with this Privacy Policy. For information about export controls and sanctions compliance, see Section 22 of our Terms and Conditions.

11. Children's Privacy

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

12. Third-Party Links

Our website and platform may contain links to third-party websites or services that are not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services. We encourage you to review the privacy policies of any third-party sites you visit.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. For material changes, we may also notify you via email or in-app notification. We encourage you to review this Privacy Policy periodically for any changes.

14. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us:

RestoScope Inc.
Email: hello@restoscope.com
Website: restoscope.com

For data protection inquiries or to exercise your privacy rights, please email hello@restoscope.com with "Privacy Request" in the subject line.