Privacy Policy

Overview

Scophix is a B2B SaaS product for workflow capture and documentation. This policy covers the Scophix web application (tenant workspaces on *.scophix.com) and the optional Scophix Recorder browser extension used with those workspaces.

Account and transactional email

When you create a Scophix account we store your name, work email, and organization details needed to authenticate you. We send transactional email only (for example password-reset messages) to the email address on your account when you explicitly request it. We do not send marketing newsletters or cold outreach through our email service.

Recorder: data we collect during recording

Recording starts only when you explicitly click Start recording in Scophix. Nothing is captured before that or after you stop.

• Page URLs and navigation / SPA route changes on the recorded tab
• UI interactions (clicks, focus, form fields with sensitive inputs masked)
• Network request and response metadata and allowed body content (size-capped)
• Debounced screenshots after clicks on the recorded tab
• Cookie change events (name, domain, cause — never cookie values)

Where data is stored

Capture events are sent to your organization’s Scophix server at the API URL you configure in the extension (your tenant). Data is processed for workflow documentation and analysis within your Scophix workspace.

What we do not collect

• Passwords and other sensitive field values (redacted in the extension before upload)
• Cookie values
• Sensitive HTTP headers such as Authorization and Cookie (values replaced with [REDACTED])

Local extension storage

The extension stores your Scophix API base URL in browser local storage and queues capture events in IndexedDB until they are uploaded to your server. Queued data is cleared after successful upload and when the recording session ends.

Contact

Questions about this policy or your data: pranav@scophix.com