SKYDECA

Privacy Policy

Effective: November 26, 2025 | Last Updated: November 26, 2025

Back to summary view

1. Introduction

Skydeca, LLC ("Skydeca," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, platform, and services (collectively, the "Services").

This policy applies to all users worldwide, including those in the European Economic Area (EEA), United Kingdom (UK), and California. By using our Services, you consent to the practices described in this policy.

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

2. Information We Collect

2.1 Information You Provide

  • Account information (name, email, username)
  • Payment information (via Stripe)
  • User content (media, tags, transcripts)
  • Support communications
  • Profile preferences

2.2 Automatic Collection

  • Device info (IP address, browser type, operating system)
  • Usage data (pages visited, features used, time spent)
  • Cookies (see our Cookie Policy)
  • Log data and error reports

2.3 Third-Party Sources

  • OAuth providers (Google, GitHub)
  • Stripe for payment verification
  • Public databases for fraud prevention

3. Legal Basis for Processing (GDPR)

For users in the EEA and UK, we process your personal data under the following legal bases:

  • Contract Performance: To provide our Services and fulfill contractual obligations
  • Legitimate Interests: Improving Services, security, fraud prevention
  • Legal Obligation: Compliance with applicable laws
  • Consent: Marketing communications (withdrawable anytime)

4. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our Services
  • Process transactions and send related information
  • Personalize your experience and provide content recommendations
  • Send administrative messages, updates, and security alerts
  • Respond to your comments, questions, and support requests
  • Analyze usage patterns to enhance functionality and user experience
  • Detect, prevent, and address technical issues and security threats
  • Comply with legal obligations and enforce our terms

5. Data Retention

We retain your data for the following periods:

  • Account Data: Until you delete your account
  • User Content: Until you delete it or close your account
  • Usage Logs: 90 days
  • Payment Records: 7 years (tax/legal requirements)

For complete details, see our Data Retention Policy.

6. Security Measures

We implement commercially reasonable security measures to protect your data:

  • Encryption in Transit: TLS 1.2 or higher
  • Encryption at Rest: AES-256 encryption
  • Access Controls: Role-based with multi-factor authentication
  • Monitoring: Continuous security monitoring

7. Information Sharing

We may share your information in these circumstances:

  • Service Providers: Supabase (database), Vercel (hosting), Stripe (payments), OpenAI/Anthropic (AI processing), AssemblyAI (transcription), Sentry (error tracking)
  • Business Transfers: In the event of a merger, acquisition, or sale of assets
  • Legal Requirements: When required by law, subpoena, or legal process
  • With Your Consent: When you have given explicit permission

8. International Data Transfers

Your information may be transferred to and processed in the United States. For transfers from the EEA or UK, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission and UK authorities.

9. Your Privacy Rights

9.1 All Users

  • Access a copy of your personal data
  • Correct inaccurate information
  • Request deletion of your data
  • Export your data in a portable format
  • Update your preferences and settings

9.2 GDPR Rights (EEA/UK Users)

  • Restrict processing of your data
  • Object to legitimate interest processing
  • Withdraw consent at any time
  • Lodge a complaint with a supervisory authority
  • Data portability to another service

9.3 CCPA Rights (California Residents)

  • Know what personal information is collected
  • Know if your data is sold or disclosed
  • Opt out of data sale
  • Request deletion of your data
  • Non-discrimination for exercising rights

Note: We do not sell personal information.

To exercise your rights: Email privacy@skydeca.com or use the privacy controls in your account settings. We will respond within 30 days.

10. Children's Privacy

Our Services are not intended for children under 13. If you are between 13 and 17, you must have parental consent. If you believe we have collected information from a child under 13, contact us immediately at privacy@skydeca.com.

11. Cookies and Tracking

We use cookies and similar technologies to operate our Services, remember your preferences, and analyze usage patterns. For detailed information, please see our Cookie Policy.

12. Changes to This Policy

We may update this Privacy Policy from time to time. For material changes, we will provide at least 14 days' notice by posting the updated policy on our website and, where appropriate, notifying you by email.

13. Contact Us

If you have questions about this Privacy Policy or our data practices:

Skydeca, LLC
privacy@skydeca.com — Privacy inquiries and data requests
legal@skydeca.com — General legal inquiries