Privacy policy

Skopo is operated by Evigasoft ("we", "us"). We are the controller of the account data described here. For the project content your workspace stores, your organization is the controller and we process it on its behalf. Contact us at [email protected].

• Sign-in data. When you sign in with GitHub or Google we receive your name, email address, avatar and account identifier from that provider. We never see your password.
• GitHub repository data. For repositories you connect, we store repository metadata and the issues and pull requests (titles, numbers, state, labels, links) needed to keep your projects in sync. We do not copy your source code.
• Workspace content. Work items, comments, attachments, goals, risks, releases, methodology settings and other content you or your teammates create, including changes made by AI agents or MCP clients you authorize.
• Usage and security logs. Request logs, IP addresses, browser type and audit events, used to run, secure and debug the service.
• Session recordings, when enabled. When session recording is enabled, we use Specto to record interactions with the Skopo interface so we can diagnose problems and improve the product. Recordings run in a strict privacy mode that masks text you type, and are skipped entirely when your browser sends Do Not Track or Global Privacy Control.

• To provide Skopo: authenticate you, sync GitHub activity, show boards, dashboards and insights.
• To send email notifications you can control in your settings, such as mentions, assignments, invitations and digests, plus essential account and billing messages.
• To secure the service, prevent abuse and keep an audit trail of changes.
• To understand aggregate product usage and fix problems.

We process data to perform our contract with you or your organization, for our legitimate interests in running and securing a reliable service, to comply with legal obligations, and with consent where the law requires it. We do not sell personal data and we do not use your workspace content to train AI models.

Skopo uses cookies only to keep you signed in and to protect sign-in requests from forgery. We do not use advertising or cross-site tracking cookies. Your theme and some interface preferences are stored in your browser's local storage and never leave your device.

We share data only with providers that help us run Skopo, under contracts that limit their use of it:

• Cloud hosting, database and file storage providers
• Email delivery providers for notifications
• Payment processors for paid plans (we never store full card numbers)
• Specto, for session recording when it is enabled
• GitHub and Google, as identity providers and, for GitHub, the source of synced data

A current list of subprocessors is available on request at [email protected].

We keep account data while your account is active. Workspace content is kept until your organization deletes it or closes the workspace, then removed from active systems within 30 days and from backups within 90 days. Security logs are kept for up to 12 months.

Depending on where you live, you can ask to access, correct, export or delete your personal data, object to or restrict processing, and withdraw consent. Email [email protected]and we will respond within 30 days. You can also revoke Skopo's access at any time from your GitHub or Google account settings, and you may complain to your local data protection authority.

Data is encrypted in transit, access is limited to staff who need it, MCP and API tokens are scoped and revocable, and changes are recorded in an audit trail. No system is perfectly secure; if we learn of a breach affecting your data we will notify you without undue delay.

We will post updates on this page and change the date above. For material changes we will notify workspace owners by email before they take effect.