Privacy Policy

1. Account information

• Name
• Email address
• Password hash (passwords are not stored in readable form)
• Project credits balance
• Account creation date

2. Business and profile information

• Business or professional name
• Contact person
• Currency preference
• Address and profile fields you choose to provide

3. Project information

• Project name
• Client name and details you enter
• Baseline or protected scope description
• Pricing, deadline, and hourly rate
• Project status and workflow records

4. Uploaded contracts and files

• Uploaded agreements or contracts
• Original filename and file version metadata
• Storage metadata needed to keep file versions

5. Client requests

• Request title and description or body text
• Requested-by information
• Status, scope assessment, and archive state

6. Scope analysis and AI suggestions

• Scope assessment, reasoning, and review status
• Estimated hours, additional price, and timeline impact
• Missing information notes and response drafts
• AI suggestion records stored for your review

7. Change Orders

• Work description, hours, price, and timeline impact
• Change Order status
• Approval token used for client links
• Client decision name, note, and timestamp when provided

8. Evidence Pack

Evidence Packs are generated on demand from stored project, request, change-order, and evidence records. Downloading an Evidence Pack requires account login and project ownership.

9. Inbox and forwarded email

• Forwarded email sender, subject, and body
• Received date and processing status
• Attachments stored on disk when received
• Project inbox emails sent to your project-specific address

10. Payments

Payments are processed by Lemon Squeezy, which acts as the Merchant of Record. LimesWorth does not store complete payment-card details. Payment-related records may include Lemon Squeezy order identifiers, event data, customer email, product or variant identifiers, payment status, and project-credit processing status.

11. Sessions and cookies

LimesWorth uses an essential HMAC-signed session cookie (scopeguard_session) to keep you signed in. Session cookies are HttpOnly, HMAC-signed, SameSite=Lax, and Secure in production.

12. Logs and analytics

Server and application logs may contain operational events, errors, or email and extraction warnings. LimesWorth uses self-hosted Umami page-view analytics. Analytics may load on public pages, including the sample Change Order walkthrough and public client approval pages.

13. AI features and data sent to OpenAI

LimesWorth uses OpenAI for AI-assisted scope analysis, email and request extraction, and document, image, and PDF vision extraction when you use those features.

Depending on the feature you use, project baseline text, client request text, email subject and body, attachment text, and uploaded contract or document content may be sent to AI services. AI output is stored as suggestions and review data in your account. Human review remains required: AI suggests, you decide.

14. How we use information

We use information to provide the service, authenticate accounts, keep project records separated by account, process client requests, generate Change Orders, maintain evidence timelines, handle payments and project credits, send notifications, provide support, and operate the product safely.

We do not sell personal data.

15. Third-party service providers

Confirmed providers that may process data for LimesWorth:

• OpenAI — AI analysis and extraction when you use AI features
• Lemon Squeezy — payment processing
• Self-hosted Umami — website analytics
• SMTP / email provider — notifications, password reset, and admin alerts
• Inbound email handling — messages sent to addresses such as in.scopeguardpro.com
• Hosting / VPS provider — application hosting and file storage

We do not publish a data residency or hosting-region guarantee on this page.

16. Client approval links

When you share a client approval link, the client can view the Change Order details and submit an approval or decline decision without creating an account. That decision and any note the client provides are stored with the Change Order record.

17. Data retention

We keep account and project records while your account and projects are active, unless deletion is requested and we are legally or operationally required to retain some records. Backup copies may remain for a limited period after deletion.

18. Your choices

You may update account and business-profile details in the service. You may request access, export, or deletion by contacting hello@limesworth.com. Some records may need to be retained for payment, security, fraud-prevention, or legal purposes.

19. Changes to this policy

This policy may be updated as LimesWorth develops. The latest version and its effective date will be published on this page.

20. Contact

Privacy and data-related requests: hello@limesworth.com