Back to Skalyr

Privacy Policy

Effective date: March 21, 2026

Skalyr (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Skalyr platform at skalyr.com (the “Service”).

1. Information We Collect

Account Information

When you create an account, we collect your email address and basic profile information provided through Google OAuth.

Business Profile Data

You may provide business information such as your company name, industry, and operational preferences to personalize your experience.

Email Metadata

When you connect your email account, we access email metadata only—including sender names, email addresses, subject lines, and message snippets. We do not access or store the full content of your emails.

Revenue & Business Data

If you connect platforms such as Stripe or QuickBooks, we access transaction and revenue data as authorized through the OAuth permissions you grant.

Review Data

If you connect review platforms, we access your business reviews to include in triage and monitoring.

Task Data

Tasks you create or that are generated by the Service are stored to provide continuity in your workflow.

Usage Analytics

We collect anonymized usage data such as pages visited, features used, and session duration to improve the Service.

2. How We Use Your Information

We use the information we collect to:

  • Provide AI-powered triage of your inbox, reviews, and business alerts
  • Generate personalized morning briefs for your business
  • Monitor revenue and surface relevant financial insights
  • Create and manage tasks based on your operational priorities
  • Improve, maintain, and optimize the Service
  • Communicate with you about your account or changes to the Service

3. Third-Party Services & Data Sharing

We use the following third-party services to operate the platform. Your data may be processed by these providers in accordance with their respective privacy policies:

  • Google OAuth— authentication and email access
  • Stripe— payment processing and revenue data
  • Supabase— database storage with row-level security
  • Groq— AI inference for triage and brief generation
  • Resend— transactional email delivery
  • Vercel— application hosting and edge delivery

We do not sell, rent, or trade your personal information to third parties. We share data with third-party services only as necessary to provide the Service.

4. Data Security

We implement industry-standard security measures to protect your data, including:

  • Encryption in transit (TLS/HTTPS)
  • Row-level security (RLS) on all database tables
  • Secure storage of OAuth tokens with limited scope access
  • Regular security reviews of our infrastructure

While we strive to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

5. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. Email metadata is refreshed periodically and older metadata may be removed. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law.

6. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

  • Access— request a copy of the personal data we hold about you
  • Correction— request correction of inaccurate or incomplete data
  • Deletion— request deletion of your personal data
  • Export— request a portable copy of your data in a machine-readable format
  • Opt-out— opt out of the sale or sharing of personal information (we do not sell your data)
  • Restriction— request restriction of processing in certain circumstances

To exercise any of these rights, contact us at mj@skalyr.com. We will respond to your request within 30 days.

For California Residents (CCPA)

Under the California Consumer Privacy Act, you have the right to know what personal information we collect, request its deletion, and opt out of its sale. We do not sell personal information.

For EU/EEA Residents (GDPR)

We process your data based on your consent (provided when you authorize OAuth connections) and our legitimate interest in providing the Service. You may withdraw consent at any time by disconnecting integrations or deleting your account.

7. Cookies

Skalyr uses minimal cookies. We use a session cookie for authentication purposes only. We do not use advertising cookies or third-party tracking cookies.

8. Children’s Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 18, we will take steps to delete that information promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by posting a notice on the Service. Your continued use of the Service after the effective date of any changes constitutes your acceptance of the updated policy.

10. Contact

If you have any questions about this Privacy Policy or our data practices, please contact us at mj@skalyr.com.

Skalyr · West Chester, PA, United States