A plain account of the data used here.

Project inquiries

When you submit the project form, From The Scope receives the name, email address, business name, website address if supplied, selected service, hosting preference, project brief and consent choice. The submission is stored in the From The Scope production database so it can be reviewed and managed.

The intake also uses an idempotency key when supplied so a retry does not create duplicate inquiries. A rate-limit bucket is derived from the trusted edge connection address with a rotating server-side salt; the raw connection address is not stored in the inquiry record.

Do not submit passwords, card details, recovery codes, API keys or other secrets in the form. Use the access process for provider invitations instead.

Quotes and payments

Approved website work uses a private quote containing the agreed scope, price, acceptance criteria and terms. The quote link uses a high-entropy capability token; the database stores a one-way hash rather than the token itself.

When you choose to pay, Stripe hosts the card-entry page. From The Scope does not receive or store your full card number, security code or banking credentials. From The Scope stores the payment session, amount, currency, payment state and related service records needed to reconcile the approved quote and deliver the agreed work.

Stripe processes payment information under its own privacy notice and terms. The accepted quote, payment and service records may be retained for service delivery, support, accounting, fraud prevention and legal obligations.

Email and service operations

New project inquiries are placed in a durable operational queue. A separate From The Scope mail worker sends an internal notification to support@fromthescope.com from notifications@fromthescope.com with Reply-To set to support@fromthescope.com. Delivery is recorded only after the email provider confirms the send; failed sends remain retryable or are marked for manual review.

If you purchase an existing report or another service whose delivery is enabled, the service workflow may send the agreed result to the address associated with the order. Customer-facing delivery does not turn a browser redirect into payment proof.

Cloudflare provides the Pages, database and email infrastructure used by these workflows. Stripe provides hosted payment processing. Other providers are used only where the agreed service requires them and should be identified in the applicable quote or service communication.

Access, storage and requests

Access is limited to the people and systems needed to review inquiries, reconcile payments, operate the service and provide support. Private quote and report links are capability-protected; do not forward them broadly.

Records may remain in operational databases and protected backups for as long as reasonably needed for service delivery, accounting, security, dispute handling and legal obligations. From The Scope does not promise a fixed deletion period on this page. Deletion or access questions can be sent to support@fromthescope.com; the request may need to be verified before action.

When a managed hosting or Care engagement ends, transferable paid-for site files and configuration are handled under the accepted agreement. Shared-account credentials and other clients’ information are not part of an export.

Site technology

This site does not use advertising pixels or sell inquiry information. Browsers and Cloudflare may process ordinary technical connection data needed to deliver pages, prevent abuse and maintain security. The quote workflow may use a URL fragment and browser session storage to carry a private capability token; the token is not placed in ordinary page text or sent to third parties by the static page.

For privacy questions or a data request, contact support@fromthescope.com. Do not send a password, card number or one-time code by email.