Privacy Policy

We respect your privacy. This policy explains how we collect, use, and protect your personal data in compliance with the EU General Data Protection Regulation (GDPR).

Data Controller

SCOPEWELL AI
Beau Plan, Mauritius

What Data We Collect

We collect and process the following personal data:

• Account Information: Name, email address, company name, job title
• Usage Data: Platform interactions, feature usage
• Technical Data: IP address, browser type, device information, cookies

Why We Process Your Data

We process your personal data for the following purposes:

• Service Delivery: To provide access to digital readiness assessment tools
• Account Management: To create and manage your account
• Communication: To send service updates and respond to inquiries
• Improvement: To analyze and improve our platform performance
• Legal Compliance: To meet legal and regulatory obligations

Legal basis: Performance of contract, legitimate interests, and consent where required.

Data Sharing

We do not sell your personal data. We may share data with:

• Service Providers: Hosting, analytics, and email services (under data processing agreements)
• Legal Requirements: When required by law or to protect our legal rights

All third-party processors are GDPR-compliant and located within the EU or provide adequate data protection.

Data Retention

We retain your personal data only as long as necessary for the purposes outlined above or as required by law. Account data is deleted within 30 days of account closure upon request.

Your Rights

Under GDPR, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Limit how we process your data
• Portability: Receive your data in a machine-readable format
• Object: Object to processing based on legitimate interests
• Withdraw Consent: Where processing is based on consent
• Complain: Lodge a complaint with your national data protection authority

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes encryption, secure servers, and regular security assessments.

Cookies

We use essential cookies to operate the platform and analytics cookies to improve user experience. You can manage cookie preferences through your browser settings. Disabling cookies may affect platform functionality.

International Transfers

Your data is primarily stored and processed within the European Economic Area (EEA). Any transfers outside the EEA are protected by appropriate safeguards such as Standard Contractual Clauses.

Changes to This Policy

We may update this privacy policy to reflect changes in our practices or legal requirements. We will notify you of significant changes via email or platform notification where appropriate.