Privacy Policy

Effective: November 26, 2025 | Last Updated: November 26, 2025

Read the complete Privacy Policy document

Privacy Commitment

Skydeca, LLC is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, platform, and services.

This policy applies to all users worldwide, including those in the European Economic Area (EEA), United Kingdom (UK), and California. By using our Services, you consent to the practices described in this policy.

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

GDPR Compliant

We comply with the General Data Protection Regulation for users in the EEA and UK.

CCPA Compliant

We comply with the California Consumer Privacy Act for California residents.

Information We Collect

We collect information in three primary ways:

Information You Provide

Account information (name, email, username)
Payment information (via Stripe)
User content (media, tags, transcripts)
Support communications
Profile preferences

Automatic Collection

Device info (IP, browser, OS)
Usage data (pages, features, time)
Cookies (see Cookies section)
Log data and error reports

Third-Party Sources

OAuth providers (Google, GitHub)
Stripe for payment verification
Public databases for fraud prevention

Legal Basis for Processing (GDPR)

Contract Performance: To provide our Services and fulfill contractual obligations
Legitimate Interests: Improving Services, security, fraud prevention
Legal Obligation: Compliance with applicable laws
Consent: Marketing communications (withdrawable anytime)

How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve our Services
Process transactions and send related information
Personalize your experience and provide content recommendations
Send administrative messages, updates, and security alerts
Respond to your comments, questions, and support requests
Analyze usage patterns to enhance functionality and user experience
Detect, prevent, and address technical issues and security threats
Comply with legal obligations and enforce our terms

Data Retention

Account Data: Until you delete your account

User Content: Until you delete it or close your account

Usage Logs: 90 days

Payment Records: 7 years (tax/legal)

For complete details, see our Data Retention Policy.

Security & Data Sharing

Security Measures

Encryption in Transit: TLS 1.2 or higher

Encryption at Rest: AES-256 encryption

Access Controls: Role-based with MFA

Monitoring: Continuous security monitoring

Information Sharing

We may share your information in these circumstances:

Service Providers: Supabase (database), Vercel (hosting), Stripe (payments), OpenAI/Anthropic (AI), AssemblyAI (transcription), Sentry (error tracking)
Business Transfers: In the event of a merger, acquisition, or sale of assets
Legal Requirements: When required by law, subpoena, or legal process
With Your Consent: When you have given explicit permission

International Data Transfers

Your information may be transferred to the United States. For transfers from the EEA or UK, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission and UK authorities.

Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

All Users

Access a copy of your personal data
Correct inaccurate information
Request deletion of your data
Export your data in a portable format
Update your preferences and settings

GDPR Rights (EEA/UK)

Restrict processing of your data
Object to legitimate interest processing
Withdraw consent at any time
Lodge a complaint with supervisory authority
Data portability to another service

CCPA Rights (California)

Know what personal info is collected
Know if your data is sold/disclosed
Opt out of data sale
Request deletion of your data
Non-discrimination for exercising rights

Note: We do not sell personal information.

To exercise your rights: Email privacy@skydeca.com or use the privacy controls in your account settings. We will respond within 30 days.

Children's Privacy

Our Services are not intended for children under 13. If you are between 13 and 17, you must have parental consent. If you believe we have collected information from a child under 13, contact us immediately at privacy@skydeca.com.

Cookies & Tracking

We use cookies and similar technologies to operate our Services, remember your preferences, and understand how our platform is used. We do not use advertising cookies or sell your data to advertisers.

Essential

Authentication, security tokens, session management. Required and cannot be disabled.

Functional

Theme preference, language settings, UI state. Remember your preferences.

Analytics

Page views, performance metrics. Privacy-focused, no cross-site tracking.

Third-Party Services

Supabase (authentication), Vercel (hosting), Stripe (payments), Sentry (error tracking) may set their own cookies for their services.

You can control cookies through your browser settings. Note that disabling essential cookies will prevent you from logging in.

Contact & Updates

Changes to This Policy

We may update this Privacy Policy from time to time. For material changes, we will provide at least 14 days' notice by posting the updated policy on our website and, where appropriate, notifying you by email.

If you have questions about this Privacy Policy or our data practices:

privacy@skydeca.com — Privacy inquiries and data requests

legal@skydeca.com — General legal inquiries