Privacy Policy
How we collect, use, and protect your information. We believe in transparency, data minimization, and earning your trust.
Last updated: March 2026
Information We Collect
We collect several categories of information depending on how you interact with Skytona and which services you use. Here is a breakdown of what we collect and when.
Personal Information
When you create an account, submit an inquiry, or book a service, we collect identifying information including:
- Name, email address, and phone number
- Mailing address
- Company name (for business clients)
Wedding Planning Data
If you are a wedding client using the Skytona Portal, we collect the responses you provide through our 8 planning quests:
- Couple profile (names, relationship details, story)
- Coverage plan (hours, style preferences)
- Locations (ceremony, reception, and additional venues)
- People and relationships (wedding party, family members, key guests)
- Vendor team (photographer, planner, florist, and other vendors)
- Story blueprint (moments to capture, emotional priorities)
- Audio preferences (music, vow recordings, speeches)
- Media permissions (usage rights, sharing preferences)
We also collect venue details, day-of timelines, vendor contact information, and guest information if you use the Guest Upload Portal.
Business Data
For business clients, we collect company information, diagnosis tool responses, project requirements, brand assets, and social media credentials (only if we are managing your social presence on your behalf).
Payment Information
Billing address and payment method details are collected during checkout. All payment processing is handled by a PCI DSS Level 1 compliant third-party processor.
Skytona does not store full credit card numbers.Payment credentials are processed and secured entirely within our payment processor's environment.
Technical Data
When you visit any of our websites, we automatically collect technical information including your IP address, browser type and version, device information, pages visited, time spent on pages, and referral source.
Media
Photos, videos, audio files, and documents you upload through the Portal or provide to us during production.
Communication Data
Messages sent through the Portal, emails exchanged with our team, SMS text messages, and support requests.
AI Interaction Data
Inputs you provide to and outputs generated by our AI-powered features, including the wedding configurator and the business diagnosis tool.
How We Collect Information
We gather information through three primary channels.
Directly From You
Most of the information we hold comes directly from you. This includes anything you provide when you fill out forms on our website, use our configurator, complete planning quests in the Portal, communicate with our team, or share materials during production.
Automatically
When you visit our websites, we collect certain technical data automatically through cookies and similar technologies. For full details on what we track and how to manage your preferences, see our Cookie Policy.
From Third Parties
In limited cases, we receive information from third-party services we integrate with:
- Payment confirmation and transaction status from our payment processor
- Video analytics and playback data from our video hosting provider
- Referral source data (how you found us)
How We Use Your Information
Every piece of data we collect serves a specific purpose. We do not collect information speculatively or retain it without reason.
Service Delivery
To plan, produce, edit, and deliver your project. This is the core reason we collect most of your information. Your quest responses, media files, and planning details directly shape the work we create for you.
Platform Operation
To provide Portal access, manage your account, authenticate your identity, and process payments securely.
Communication
To send project updates, milestone notifications, delivery announcements, booking confirmations, and to respond to your inquiries and support requests.
AI Features
To generate personalized film vision statements through the wedding configurator and digital presence assessments through the business diagnosis tool. AI-generated outputs are based solely on the information you provide during that interaction.
Improvement
To analyze how our platform is used, identify areas for improvement, fix bugs, and develop new features that better serve our clients.
Marketing (With Consent)
To share your project in our portfolio, on social media, or in other promotional materials. This only happens with your explicit written permission. You can withdraw that permission at any time.
Legal Compliance
To comply with applicable laws, regulations, legal processes, or enforceable governmental requests.
Legal Basis for Processing
We process your personal data under the following legal bases, depending on the context and purpose of the processing activity.
Contract Performance
Processing that is necessary to deliver the services you have purchased. This covers everything from account creation to project delivery. If you book a wedding film or a business retainer, we need your information to fulfill that agreement.
Legitimate Interest
Processing that supports our legitimate business interests, including platform improvement, security monitoring, fraud prevention, and internal analytics. We balance these interests against your rights and do not use this basis for activities that would have a significant impact on your privacy.
Consent
Processing that requires your affirmative agreement. This includes marketing communications, portfolio and promotional usage of your project, and non-essential cookie tracking. You may withdraw consent at any time without affecting the lawfulness of processing that occurred before withdrawal.
Legal Obligation
Processing required to comply with laws and regulations, including tax record retention, financial reporting, and responses to valid legal requests.
Third-Party Services
We use a select number of third-party services to operate our platform, process payments, deliver media, and communicate with you. Each service receives only the minimum data necessary to perform its specific function.
We do not sell your data to any third party. Our partners are operational tools, not data brokers. None of them purchase, resell, or profit from your personal information.
The categories of third-party services we use include:
- Payment processing:your billing information and payment methods are handled by a PCI DSS Level 1 compliant processor. Skytona never stores full card numbers; all sensitive payment data lives entirely within the processor's secure environment.
- Video hosting: wedding films and video deliverables are hosted on a dedicated video platform with adaptive streaming. Videos can be configured as private or password-protected to restrict access.
- Email delivery: transactional emails (project notifications, booking confirmations, system alerts) are sent through a dedicated email service. Your email address is not used for marketing by these providers.
- SMS delivery: text messages are delivered through a dedicated messaging platform. Your phone number is transmitted solely for message delivery and customer service operations. The provider does not use your number for any other purpose.
- AI features: our wedding configurator and business diagnosis tool use an AI service to generate personalized recommendations. Your inputs are used solely to produce your results and are not used to train AI models.
- Infrastructure: we use industry-standard hosting, DNS, and security services to deliver and protect our web applications. These services process technical data (IP address, device information) in the course of serving pages to your browser.
All third-party services are selected based on their security standards, data protection practices, and compliance certifications. If you have specific questions about how a particular type of data is processed, contact us at privacy@skytona.com.
SMS and Text Messaging
If you opt in to receive text messages from Skytona through one of our contact forms, configurators, or during the booking process, the following terms apply to how we handle your mobile information.
What We Collect
We collect the phone number you provide through our forms. If you opt in to SMS communications, we also record the date, time, and source of your consent.
How We Use SMS
Text messages from Skytona are limited to: project updates, booking confirmations, scheduling reminders, delivery notifications, and direct responses to your inquiries. We do not send marketing or promotional messages via SMS unless you have provided separate, explicit consent for that purpose.
Message Frequency
Message frequency varies based on project activity. During active projects, you may receive 1 to 5 messages per month. Outside of active projects, you will not receive messages unless you initiate contact.
Message and Data Rates
Standard message and data rates from your mobile carrier may apply. Skytona does not charge for text messages, but your carrier's standard messaging fees may apply depending on your plan.
Mobile information will not be shared with third parties or affiliates for marketing or promotional purposes. Your phone number and opt-in consent data may only be shared with service providers (such as our SMS delivery platform) under strict confidentiality and solely to support message delivery and customer service operations.
Opting Out
You can opt out of SMS messages at any time by replying STOP to any message from Skytona. Opt-out requests are processed immediately and automatically. Once you opt out, you will not receive further text messages unless you re-subscribe.
Getting Help
Reply HELP to any message for assistance, or email support@skytona.com.
Consent
SMS messages are only sent to individuals who have provided explicit opt-in consent through one of our forms. Consent is not required to purchase any goods or services from Skytona. You may revoke consent at any time using the opt-out method described above.
Data Security
Protecting your data is not an afterthought; it is built into the architecture of our platform. Here is how we safeguard the information you entrust to us.
- Access controls: database-level restrictions ensure you can only access your own data, and role-based permissions limit what each user can see and do based on their relationship with Skytona.
- Encryption: all data transmitted between your browser and our servers is encrypted in transit.
- Secure authentication: login sessions are managed with secure tokens and automatic expiration.
- Separated storage: public marketing assets and private client files are kept in separate, access-controlled environments.
- Regular security reviews are conducted to identify and address vulnerabilities across the platform.
No system is perfectly immune to breach. If we ever discover a security incident that affects your personal data, we will notify you promptly and take immediate corrective action.
Data Retention
We retain your information only as long as necessary for the purposes described in this policy. Below are the specific retention periods for each category of data.
- Account data: retained for the duration of our business relationship and for 3 years after project completion for reference and support purposes.
- Payment records: retained as required by tax and financial regulations, typically 7 years.
- Project data (quest responses, planning information, project notes): retained for 3 years after final delivery unless you request earlier deletion.
- Media files: retained according to your service agreement. The Archive add-on provides 5-year extended storage. After the applicable retention period, files are securely deleted.
- Communication logs: retained for 2 years after the last interaction.
- Technical and analytics data: retained for 12 months, then aggregated into anonymized statistics or deleted.
When data reaches the end of its retention period, it is securely deleted or irreversibly anonymized. If you request deletion before the standard retention period ends, we will comply unless a legal obligation requires us to keep it.
Your Rights
You have meaningful control over your personal data. Here are the rights available to you and how to exercise them.
- Access: request a copy of the personal data we hold about you.
- Correction: request that we update or correct inaccurate information.
- Deletion: request deletion of your personal data. This is subject to legal retention requirements and any active contractual obligations.
- Portability: request your data in a structured, commonly used, machine-readable format so you can transfer it to another service.
- Objection: object to processing that is based on our legitimate interest. We will cease processing unless we demonstrate compelling grounds that override your interests.
- Withdraw consent: withdraw your consent for marketing communications or portfolio usage at any time. Withdrawal does not affect the lawfulness of processing that occurred before you withdrew.
To exercise any of these rights, email privacy@skytona.com. We will acknowledge your request promptly and respond with a substantive resolution within 30 days.
Media and Portfolio Usage
How we handle the creative work produced during our engagement is important to us and to you. Here is our approach.
Skytona retains the right to use project deliverables (photos, videos, and other content) for portfolio, marketing, and promotional purposes unless you explicitly opt out in writing.
Our Default is Privacy
Sensitive or private moments are never shared publicly without your explicit consent. We ask before featuring your project on our website, social media, or in any promotional context. When in doubt, we default to keeping your content private.
Portfolio Opt-Out
You can request removal of your content from our portfolio at any time by emailing privacy@skytona.com. We will process removal requests promptly.
Guest Content
If you use the Guest Upload Portal, guests who upload content are informed that their submissions may be incorporated into the final project. The final project remains subject to the portfolio usage terms outlined above.
Portfolio permissions are always handled explicitly and in writing. You will never discover your project on our website without having been asked first.
Children's Privacy
Our services are not directed at individuals under the age of 18. We do not knowingly collect personal information from children.
If you believe that a child has provided us with personal information, please contact us at privacy@skytona.com and we will promptly investigate and delete the information.
International Data Transfers
Skytona is based in the United States. If you are accessing our services from outside the US, please be aware that your data will be transferred to and processed in the United States.
Our third-party service providers may process data in various jurisdictions around the world. Each provider maintains appropriate data protection standards consistent with the commitments described in this policy.
By using our services, you acknowledge that your information may be transferred to and processed in jurisdictions that may have different data protection laws than your country of residence.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors.
When we make material changes, we will notify you through the Portal or via email before the changes take effect. The "Last updated" date at the top of this page indicates when the policy was most recently revised.
Continued use of our services after changes are posted constitutes your acceptance of the updated policy. If you disagree with a change, you may close your account and request deletion of your data.
Contact
If you have questions, concerns, or requests related to this Privacy Policy or your personal data, reach out through any of the channels below.
- Privacy inquiries: privacy@skytona.com
- General inquiries: hello@skytona.com
- Mailing address: 26 South St STE #103, Biddeford, ME 04005
- Phone: +1 (207) 710-4139
We take every inquiry seriously and aim to respond within 5 business days.