Skytona Platform Data Handling Terms

These terms describe how Skytona stores, protects, and handles the data in your Skytona Platform workspace. "Your data" means everything you and your team put into the workspace: client records, project details, messages, files, documents, payment records, and the activity your use of the service generates. They are part of the Skytona Platform Terms of Service.

• You own your data. Your workspace contents, including your clients' information, belong to you. Skytona hosts and processes them only to run the service for you.
• Your clients' personal information inside your workspace is yours to steward. You are the one with the relationship and the consent. Skytona is the platform holding it on your behalf.
• Skytona owns the platform itself and aggregate, de-identified operational data about how the service performs, never your clients' identities or your business records.

Skytona runs on established infrastructure providers. Each one handles a specific part of the service:

• Supabase (on AWS): the database and file storage where your records live.
• Vercel: hosts and serves the application.
• Stripe: processes payments. Card details go to Stripe, never Skytona's database.
• Resend and Google: deliver email sent from the platform.
• Twilio: delivers text messages sent from the platform.
• Mux and Vimeo: host and stream video.
• Cloudflare: routes traffic and manages domains.
• ElevenLabs: powers AI voice features, where enabled on your plan.

Skytona may change providers over time. A change that materially affects how your data is handled will be reflected in an updated version of these terms.

• Your team, according to the roles you assign in your workspace.
• Your clients, limited to what you share with them through their portals.
• Skytona staff, for support, troubleshooting, and operating the service. Every staff access to a customer workspace is logged. Skytona does not sell your data, does not use it for advertising, and does not use it to compete with you.

Connecting Facebook or Instagram is optional. When you authorize a connection, Skytona receives the account identifiers, Page or profile information, and permissions needed for the features you select. Access tokens are stored encrypted.

Skytona uses this connection to prepare and publish your content, including uploaded media, and to display publication results and performance. This includes storing network post identifiers, available posts and insights such as audience and content metrics. Social data is available to authorized workspace members and Skytona operators according to their access.

To stop future access through a workspace connection, open Social, choose Accounts, and disconnect the account. Disconnecting does not itself delete all previously collected social data.

When Meta sends a data deletion or authorization removal request, Skytona removes the affected connection's credentials, identifying Page and profile information, imported network identifiers, and analytics. Original workspace content and minimal operational history remain. A delayed request does not remove a newer authorization granted after that request.

Disconnecting or deleting data from Skytona does not remove content already published on Facebook or Instagram. Manage that content directly on the relevant network.

Every business on Skytona Platform has its own workspace, and the platform enforces that boundary at the application and database layer: your team sees your workspace, and no other customer can see it. This is the same isolation model established business software is built on, and it is tested as part of Skytona's release process.

• Encrypted in transit and at rest.
• Skytona staff access requires multi-factor authentication.
• Administrative and support actions are audit-logged.
• Backups are maintained as part of normal database operations.
• Skytona reviews security as part of every release. No system is perfectly secure, and these terms do not promise otherwise.

• While you subscribe: your data stays in your workspace for as long as your subscription is active.
• When your subscription ends: your workspace enters a 30-day grace window during which you can export your data or reactivate. After the grace window, the workspace is archived and access ends.
• Legal retention: records Skytona is required to keep for legal, tax, or accounting reasons (such as signed contracts and paid invoices) are retained for up to 7 years even after archival.
• Deletion: outside the legal-retention set, you may request deletion of your archived workspace data and Skytona will honor it within a reasonable period.

You can export your data yourself from your workspace settings: report downloads for day-to-day lists, and a full workspace export that packages your records for download. Export is available throughout your subscription and during the 30-day grace window after it ends. If you hit something the self-serve export does not cover, ask, and Skytona will provide it in a reasonable format.

• Have the right to put people's information into your workspace, and honor your own obligations to your clients, including any consent or notice your industry or region requires.
• Obtain proper consent for email and text messages you send through the platform.
• Keep your team's access appropriate: remove people who leave, and assign roles that match what each person should see.

If Skytona becomes aware of a security incident affecting your data, Skytona will notify the workspace owner without undue delay, describe what happened and what data was involved, and keep you informed as the incident is investigated and resolved.

Skytona may update these terms as the product and its infrastructure evolve. Material changes will be sent to the workspace owner by email with reasonable advance notice, alongside any related update to the Terms of Service.