When you collect personal data from your Scope visitors, Fox Scope acts as processor and you are the controller.
We process data on documented instructions, apply appropriate security, help with data-subject requests, notify you of breaches without undue delay (aim: within 72h), and delete/return data at end of service (subject to retention rules).
We use vetted sub-processors (e.g., AWS, Stripe, Google) and maintain transfer safeguards (e.g., SCCs).
Audit rights are available on reasonable notice. See the full DPA in our Legal center.
