Last updated
Who operates ScapeOne
ScapeOne is operated by iScape Group as a SaaS business management platform. The platform helps subscribed businesses manage customers, leads, quotes, invoices, payments, jobs, bookings, employees, projects, documents, reports, website content, reviews, SEO information, social drafts and related workflow data.
For privacy questions, contact web@iscapegroup.com.au.
Information we collect
We collect account registration and subscription information such as names, business details, email addresses, phone numbers, billing details, user roles, login activity and support communications.
Tenants may store business and customer data in ScapeOne, including customer records, leads, properties, addresses, notes, quotes, invoices, payments, bookings, jobs, projects, employee records, timesheets, job photos, media, uploaded documents, reports, website pages, blog posts, reviews, SEO data, social media drafts and related operational history.
Connected providers and integrations
When a tenant or user connects a third-party service, ScapeOne may receive profile, account, page, location, permission, token, status and activity data needed to provide the integration. This may include Google Business Profile, Meta/Facebook/Instagram, LinkedIn, Pinterest, X/Twitter and future social or OAuth providers.
Payments may be processed through Stripe. Accounting information may sync with MYOB, Xero or similar accounting systems. These providers process information under their own terms and privacy policies, and some data may remain inside those provider systems.
Google user data
When a business connects a Google account to ScapeOne, we ask only for the access each feature needs:
- Basic profile (openid, email, profile): to show which Google account is connected.
- Google Business Profile (business.manage): to show the business's own reviews and profile in ScapeOne, and to post a reply or update only when someone in the business chooses to.
- Google Analytics (analytics.readonly) and Search Console (webmasters.readonly): read-only, to show the business its website visits and search performance in its Growth reports.
- Google Ads (adwords): to show the business its campaign results, and to make campaign changes only after the business approves them.
We use Google user data only to provide these features to the business that connected it. If someone in the business asks ScapeOne to draft a reply to a review, we send that review's text to our AI provider, OpenAI, to write the draft. The business reads and edits the draft before anything is posted, and OpenAI does not use it to train its models. We do not sell Google user data. We do not use it for advertising, and we do not use it to train AI models. No person at ScapeOne reads it unless the business asks us for support, it is needed for security, or the law requires it.
Access tokens are stored encrypted. A business can disconnect Google at any time in ScapeOne, or remove access at myaccount.google.com/permissions. When it disconnects, we delete the stored tokens straight away. Information already brought into the workspace, such as reviews and report figures, stays until the business deletes it or closes its account, as described in Retention and deletion.
ScapeOne's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
How we use information
We use information to operate ScapeOne, provide tenant workspaces, process subscriptions, support billing, deliver customer portals, send emails, SMS or notifications where configured, maintain integrations, improve reliability, investigate issues and respond to support requests.
ScapeOne may include AI-assisted drafting or content generation features. AI output should be reviewed by a human before publishing, sending or relying on it. We do not treat AI-generated draft content as professional, legal, financial, tax or accounting advice.
Hosting, security and operations
ScapeOne is hosted on DigitalOcean or similar cloud and server infrastructure. We use operational safeguards such as access controls, encrypted connections where appropriate, secure credential storage, backups, monitoring and operational logs. No online service can guarantee perfect security.
Operational logs may include request metadata, IP addresses, device details, integration status, error information and audit events. Logs are used to maintain reliability, diagnose problems and protect the service.
Retention and deletion
Tenant data is retained while an account is active and for a reasonable period afterwards for support, recovery, billing, accounting, legal and operational purposes. Some records may need to be retained for tax, accounting, dispute, fraud prevention or legal reasons.
Users can request deletion of their account, OAuth tokens or provider-connected data by emailing web@iscapegroup.com.au. Backups may retain deleted data for a limited period before expiry.
Rights and contact
Depending on your location and relationship with a tenant, you may be able to request access, correction, export or deletion of personal information. If your data is held by a ScapeOne tenant, we may direct you to that tenant because they control their own customer data.
Contact us at web@iscapegroup.com.au.