SCOPELINE — PRODUCTION PRIVACY NOTICE Version 1.0 Effective date: 2026-09-24 Who is responsible SCOPELINE is the customer-facing name of this service. Cagatay Erdemir is the data controller. For privacy questions or requests, contact erdemircagatay86@gmail.com. What we collect The project inquiry form asks for your name, email address, project type, location and description of the proposed work. Approximate budget and timeline are optional. We also keep a submission reference and the consent information described below. Please do not include payment details, sensitive personal information or unrelated information about other people in the project description. The form does not request photos or plans. Why and how we use it SCOPELINE organizes your inquiry into a structured project brief, identifies missing details and prepares a draft reply for human review. Local rules assist qualification. A person decides what, if anything, happens after review. Jev and n8n are inactive. Submitting this form does not automatically send an acknowledgment, quote, email, CRM entry, WhatsApp message or other external message. Outbound action is draft-only. Your consent The form requires a separate, initially unchecked checkbox. Its wording is: "I consent to SCOPELINE storing this inquiry and preparing a project brief for human review. I have read the privacy notice (Version 1.0). No message is sent automatically." If the box is not checked, the inquiry is rejected. For an accepted inquiry we record the consent timestamp, Version 1.0 and the purpose prepare_project_brief_for_human_review with the record. We return a reference number, not an automatic decision or reply. You can withdraw consent or ask us to stop using an inquiry through the request process below; we will assess any information that must be retained for a legitimate reason. Storage, access and providers Accepted inquiries and decisions are stored in restricted SQLite storage with matching audit JSON records and restricted backups on the SCOPELINE VPS. Audit records document intake and review state. To limit abuse, the server stores a keyed hash of the request address and request time in SQLite for up to one hour; it does not store the raw address in that rate-limit table. The review queue requires server-side authentication and is not part of the public website. The VPS hosting provider supplies the infrastructure. This workflow does not send inquiry content to Jev, n8n, email or CRM services. We use the information to prepare and review your inquiry unless you separately agree to a later step. Retention The period for eligible production inquiry, SQLite and matching audit records is 30 days from receipt. A daily scheduled process first checks eligibility and makes a verified restricted backup, then removes only records older than 30 complete days whose consent and matching audit record can be verified. Synthetic, legacy, unclassified, non-consented and mismatched records are excluded from automatic deletion and require human review. Restricted backups are separately scheduled for removal after 30 days from creation only when their checksums and SQLite integrity pass; the newest valid backup is preserved even if older. A deleted active record may remain in a restricted backup until that backup expires. Deletion requests are reviewed by a person. Version 1.0 retention schedule addendum, effective 2026-09-25: the scheduled processes above were activated after the original notice date. The original consent wording and recorded Version 1.0 remain unchanged. Your requests You may ask what inquiry information we hold about you, request access or correction, withdraw consent, request deletion where applicable, or raise a privacy concern. Contact the privacy address above and include your submission reference if available. Please avoid sending full project details or sensitive information in the first message. We may ask for limited information to verify the request concerns your record. A person will review the request and explain the outcome or any reason it cannot be fulfilled. You may also contact the relevant privacy regulator if your concern remains unresolved. Synthetic staging The protected staging site at staging.scopeline.digital uses fixed fictional test data and does not accept real customer inquiries. Staging fixture selection is not legal customer consent. This notice applies to the production inquiry form at scopeline.digital. Notice changes If this notice changes, the current version will be presented with the form and recorded with new consent decisions.