Privacy Policy

Last updated: 10 August 2026

Scope Software Solutions ("Scope Software", "we", "us" or "our") respects your privacy and is committed to protecting personal data. This Privacy Policy explains how we access, collect, use, store, disclose and delete personal data through the Konnection website, the Konnection platform and the Konnection GO mobile application for Android and iOS.

1. Who this policy applies to

This policy applies to:

• Visitors who use the Konnection website or contact form;
• Authorized users of the Konnection platform;
• Authorized users of the Konnection GO mobile application; and
• Individuals whose information is entered into Konnection by one of our business customers, such as leads, members or customers.

Konnection and Konnection GO are business services. Where an organization provides an account to its staff and determines why CRM information is processed, that organization is normally responsible for the information as data controller and Scope Software processes it on the organization's behalf. Scope Software is responsible for information it collects for website enquiries, service administration, security and its own legal obligations.

2. Information collected through our website

When you submit our contact form, we collect the information you provide, which may include your first name, last name, email address, telephone number and message. Our servers may also receive basic technical information such as your IP address, browser or device type, requested page, and the date and time of the request.

3. Information processed by Konnection GO

Depending on the features configured by your organization and your account permissions, Konnection GO may access and process the following categories of information:

• Account and profile information: name, work email address, user identifier, role, assigned workspace, permitted business locations and access permissions.
• Authentication information: login credentials, access tokens, refresh tokens and session information.
• CRM and contact information: lead or customer names, telephone numbers, email addresses, consent preferences, sources, pipeline stages, assignments and statuses.
• Business activity: notes, tasks, appointments, next actions, updates, lead outcomes, conversions, targets, collection figures and related performance information.
• Communications: WhatsApp message content, message direction and delivery status, conversation identifiers and notification content.
• Device and technical information: platform, device name, manufacturer or model, app version, push-notification token, IP address, user-agent information, login time and login outcome.
• User-entered content: information an authorized user enters when creating or updating leads, appointments, tasks, notes or messages.

4. Mobile permissions and device features

Push notifications

If you grant notification permission, Konnection GO registers a push-notification token and limited device information, such as the operating system, device name or model and app version. This is used to deliver alerts about messages, assigned leads and relevant activity. Notifications may be disabled at any time through your device settings.

Biometric authentication

Konnection GO may offer optional fingerprint, Face ID or other device biometric authentication. Biometric verification is performed by the device operating system. Scope Software and Konnection GO do not receive, collect or store fingerprint images, facial images or biometric templates.

If you choose to save your sign-in, the credentials are stored using the device's protected keychain or keystore and are retrieved only after successful device authentication. You can remove saved sign-in information from the application or by clearing the application's data.

Calls, email and SMS

When you choose to call, email or send an SMS to a contact, Konnection GO passes the selected telephone number or email address to the appropriate application on your device. The action occurs only after you select it.

Features not used

Konnection GO does not use your device's GPS location, contacts list, camera or microphone. It does not collect advertising identifiers or use third-party advertising SDKs. Business locations displayed in the application are organizational branches or workplaces and are not the physical GPS location of your device.

5. How we use information

We use information to:

• Respond to website enquiries and requests;
• Authenticate users and maintain secure sessions;
• Connect users to the correct Konnection workspace;
• Display and manage leads, conversations, appointments, tasks and sales activity;
• Send and receive authorized business communications;
• Deliver push notifications requested by the user;
• Apply role-based permissions and protect customer workspaces;
• Prevent misuse, investigate unauthorized access and maintain security and login-audit records;
• Provide support, diagnose technical problems and maintain the reliability of our services; and
• Meet contractual, legal and regulatory obligations.

We do not sell personal data. We do not use Konnection GO information for third-party advertising or advertising profiling.

6. Lawful bases

Where applicable data-protection law requires a lawful basis, we rely on performance of a contract, our legitimate interests in providing and securing the service, compliance with legal obligations, and consent where consent is required. Business customers are responsible for establishing an appropriate lawful basis for CRM information they enter or connect to the service.

7. When information is disclosed

Information may be disclosed only as necessary to:

• The organization that provides and administers your Konnection account;
• Authorized users and administrators within that organization;
• Hosting, database, security, communication and technical-support providers operating on our behalf;
• Expo, Google Firebase Cloud Messaging or Apple Push Notification Service for push-notification delivery;
• WhatsApp, Meta and the organization's configured messaging or automation providers when an authorized business communication is sent or received; and
• Government authorities, courts, advisers or other parties where disclosure is required by law or necessary to protect rights, safety or the service.

Service providers are permitted to process information only for the services they provide and are subject to applicable contractual, confidentiality and security requirements.

8. International transfers

Some service providers may process information in countries other than the country where it was collected. Where required, we or the relevant business customer use appropriate contractual or legal safeguards for international transfers.

9. Security

We use administrative, physical and technical measures designed to protect personal data. These include HTTPS encryption for data in transit, protected device storage for mobile sessions and optional saved credentials, customer-workspace separation, and role-based access controls.

Our internal systems are maintained and security controls are periodically reviewed. On-premise drives used to store service data are encrypted at rest. Our data-centre providers maintain physical, network and operational security controls.

No electronic storage or transmission method can be guaranteed to be completely secure. Users must protect their passwords and report suspected unauthorized access promptly.

10. Data retention

We retain personal data only for as long as reasonably necessary to provide the service, follow the instructions and configured retention requirements of the relevant business customer, maintain security records, resolve disputes and comply with contractual, legal or regulatory obligations.

• Mobile authentication sessions remain on the device until sign-out, expiry, removal of app data or uninstall, subject to the device operating system.
• Optional saved biometric sign-in information remains on the device until the user removes it or clears the application's data.
• Push-notification tokens are disabled when a user signs out or when the notification provider reports that the device is no longer registered.
• CRM records, business activity, login audit records and backups are retained according to the relevant customer configuration, contract and applicable law.

When information is no longer required, it is deleted, anonymized or made inaccessible through the normal backup-rotation process, unless continued retention is required by law or for security, fraud prevention or legal claims.

11. Konnection GO account and data deletion

12. Your privacy rights

Subject to applicable law, you may have rights to request access, correction, deletion, restriction, portability or objection to the processing of your personal data, and to withdraw consent where processing is based on consent.

If your information is held in a customer-managed Konnection workspace, please contact that organization first. We will assist the organization with verified requests as required. You may also contact us using the details below. You may have the right to complain to the data-protection authority in your country.

13. Children

Konnection and Konnection GO are business services intended for authorized organizational users and are not directed to children.

14. Updates to this policy

We may update this Privacy Policy when our services, practices or legal obligations change. The updated version becomes effective when posted on this page. The "Last updated" date above identifies the latest revision.

15. Contact us