ScopeGuard Privacy

Data controller: Ahmad N.A. Diab, s.p., operating ScopeGuard under the Molvor brand. Full business details are available in Business Information.

Local project data

Project content remains stored locally in your browser and is not stored by Molvor on its servers. ScopeGuard does not provide cloud project synchronization. Restoring an access key does not upload or transfer your projects.

Payment and access data

Stripe processes checkout and payment information. Our server verifies payment status and refund or dispute status to manage access. The access key contains a payment reference and verification data; treat it as private. Payment card details are entered on Stripe checkout.

Secure, HTTP-only cookies support checkout (up to one day) and browser access (up to 30 days). Hosting providers process technical request information such as IP addresses for delivery and security. Support correspondence may contain information you choose to send; do not send card details or your full access key.

The customer site uses fonts available on your device and does not load Google Fonts or the Grok builder runtime script. Stripe checkout is a separate payment page with its own required payment-processing resources. Vercel hosts the site and may process request/security information. Vercel Preview protection and toolbar resources may appear during testing.

Cookies and analytics

Analytics and optional marketing cookies are disabled for V1. There is no optional analytics/marketing cookie banner. Functional checkout/access cookies support the purchase and restoration you request; local browser storage holds your projects. Hosting infrastructure separately processes technical request information. Support uses your purchase reference and the purchaser email recorded by Stripe to verify lost-key recovery; recovery records must be handled privately.

Retention

We keep personal data only for as long as necessary for its purpose, within the following V1 retention limits:

• Support correspondence: up to 24 months after resolution.
• Lost-key and access-recovery correspondence and verification records: up to 24 months after resolution. Full entitlement keys are not retained in ordinary support or general logs.
• Technical and security logs: normally no longer than 90 days.
• Payment and accounting records: retained as required for tax, accounting, fraud prevention, dispute handling and other legal obligations. Invoices and accounting records may be retained for the legally required period.

Longer retention is permitted only where necessary for an active dispute, security incident, fraud investigation, or legal or accounting obligation. Records are reviewed and deleted or anonymized when no longer needed. These periods do not cause deletion of project data in your browser; you control that local storage.

Your requests

You may contact the operator about applicable data access, correction, deletion, objection and other privacy rights. Local data can be cleared in your browser. Required payment records may need to be retained.