Privacy Policy

Effective Date: August 13, 2025

1. Introduction

Welcome to Scopey! This Privacy Policy is designed to help you understand how the Stanford d.school collects, uses, and safeguards the information you provide when using our AI-powered design coach, Scopey, and its associated website (scopey.stanford.edu).

Scopey was created by the Stanford d.school in partnership with our development team, Enchatted P.C., to help leaders, creators, and innovators scope projects using the principles of human-centered design. Your trust is paramount to us, and we are committed to protecting your privacy and handling your data with transparency and care.

2. What Information We Collect

We collect information that you voluntarily provide to us when you interact with Scopey. In the last 12 months, we have collected the following categories of personal information as defined by California law:

  • Identifiers: Such as an email address, which you voluntarily provide when you begin a conversation and/or when you request an export of your transcript.
  • Professional or Employment-Related Information: Such as the project details, goals, and context you share during your conversation with Scopey.
  • Internet or Other Electronic Network Activity Information: We use only essential session cookies required for the technical operation of the platform (e.g., to maintain a login session).
  • Sensitive Personal Information: We do not request Sensitive Personal Information. However, you may voluntarily provide it during the open-ended project description you share and conversation you have with Scopey (for example, project details concerning race, ethnic origin, or health). We only use this information within the context of the conversation you are having with Scopey. We do not save this information separately.
  • Inferences: The AI model draws inferences from your conversational input to generate relevant summaries and suggest next steps for your project.

3. How We Use Your Information

Our use of your data is strictly limited to legitimate purposes related to providing and improving our service. We do not use your information for any purpose other than those listed below:

  • To Power the Scopey Experience: To generate responses, help you clarify your goals, and provide project summaries.
  • For Internal Research and Improvement: To understand the challenges our users face and to improve the Scopey tool and our educational offerings.
  • To Fulfill Your Requests: To email you a transcript of your conversation if you request it.
  • To Maintain and Secure the Service: For technical maintenance, troubleshooting, and security of the platform.

Crucially, the information you share will not be used to train the underlying Large Language Models (LLMs) that power Scopey.

4. Technology, Data Storage, and Retention

To provide a transparent overview of how Scopey functions, here are our key data handling practices:

  • Application Framework: The Scopey interface and conversational flow are powered by our proprietary technology, built using frameworks like React.
  • Cloud Hosting: Our application and data storage systems are hosted on Amazon Web Services (AWS).
  • Artificial Intelligence: Scopey's conversational abilities are powered by third-party Large Language Models (LLMs), such as Claude and ChatGPT. We utilize enterprise or API versions of these services that contractually prevent them from storing your data or using it to train their models.
  • Data Storage: Your conversation transcripts and project summaries are stored in a NocoDB database.
  • Data Retention: We retain your personal information for as long as is necessary for our internal research and service improvement purposes, or until you request its deletion as described in your rights below.

5. Who We Share Your Information With

Your information is not shared publicly. Access is strictly limited to:

  • The Stanford d.school Team: For the research and improvement purposes described above.
  • Enchatted P.C.: Our development partners who require access for technical maintenance and administration.

We will never share your submissions publicly unless we first reach out to you to describe how we would like to use it as an example and you provide us with explicit, written consent to do so. We do not "sell" or "share" your personal information as those terms are defined under the CPRA.

6. Your California Privacy Rights

If you are a California resident, you have the following rights under the California Privacy Rights Act (CPRA):

  • The Right to Know and Access: You have the right to request information about the categories and specific pieces of personal information we have collected about you.
  • The Right to Deletion: You have the right to request the deletion of your personal information that we have collected, subject to certain exceptions.
  • The Right to Correction: You have the right to request the correction of inaccurate personal information that we maintain about you.
  • The Right to Limit Use of Sensitive Personal Information: You may provide sensitive information as part of your project description. We only use this information to facilitate the service at your request. You can exercise your right to limit this use by not including such information in your prompts. You may also request its deletion at any time.
  • The Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights.
  • The Right to Opt-Out of Sale or Sharing: Since we do not sell or share your personal information with third parties for cross-context behavioral advertising, there is no need to opt out.

How to Exercise Your Rights: To exercise any of these rights, please submit a verifiable request to us by emailing dpro@dschool.stanford.edu. We will respond to your request consistent with applicable law.

California's "Shine the Light" Law

California's "Shine the Light" law (Civil Code Section § 1798.83) permits users of our site that are California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. We do not disclose personal information to third parties for their own direct marketing purposes.

7. Cookies and Tracking Technologies

  • Website: Our informational landing page (scopey.stanford.edu) is a custom HTML site and does not use any cookies or other tracking technologies.
  • Scopey Platform: The Scopey application platform uses only essential session cookies. These cookies are necessary for the technical operation of the service, such as maintaining your login session, and are destroyed when you log out or your session times out.
  • Do Not Track: Our systems do not currently respond to "Do Not Track" signals from web browsers.

8. Children's Privacy

Scopey is not intended for or directed at individuals under the age of 13. The intended audience for this tool is university and college students, as well as adult professionals. We do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected such information, we will take steps to delete it promptly.

9. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please do not hesitate to contact us at:

dpro@dschool.stanford.edu

Note: Scopey utilizes LLMs (like Claude, ChatGPT, etc.). These generative AI tools have limitations and biases, and also built-in guardrails that may steer the conversation away from perceived controversial topics. As a result, the responses provided may be incomplete or skewed, particularly in addressing complex topics such as race, equity, and social justice. We encourage users to approach the tool's outputs thoughtfully and consider them as one perspective among many.

Scopey was created by Stanford University's Hasso Plattner Institute of Design (aka the d.school) [dpro@dschool.stanford.edu] in partnership with Enchatted.

Interested in more learning experiences? Check out our d.school offerings for practitioners ➡️ https://dpro.stanford.edu