Privacy Policy

This Privacy Policy explains how Skyport ("we", "us") collects, uses and shares information when you use our website and hosting platform (the "Service"). We built Skyport to collect as little personal data as possible.

1. Information we collect

• Account data: your email address, name, username and optional avatar when you register or sign in with a third-party provider.
• Repository metadata: repository names, branch names, commit hashes and commit messages needed to build and deploy your sites. We do not retain copies of your source code after a build completes, except build artifacts you choose to deploy.
• Project configuration: build settings, custom domains and environment variables you provide. Environment variables are encrypted at rest.
• Usage data: bandwidth, build minutes, request counts and aggregated performance metrics for your sites.
• Cookies and device data: IP address, browser type and cookies as described in our Cookie Policy.
• Communications: messages you send through our contact form or support channels.

2. How we use information

• To provide, operate and secure the Service, including building and serving your sites.
• To authenticate you and prevent fraud, abuse and violations of our Terms.
• To measure usage against plan limits and to bill paid plans.
• To respond to support requests and send essential service notices.
• To improve performance and reliability using aggregated, de-identified analytics.

3. Legal bases (GDPR)

We process personal data to perform our contract with you, to comply with legal obligations, on the basis of our legitimate interests in securing and improving the Service, and with your consent for optional analytics and functional cookies.

4. Sharing

We do not sell personal information. We share data only with sub-processors that help us run the Service (such as cloud infrastructure, database and email providers) under written data-processing agreements, or when required by law.

5. Retention

Account data is retained while your account is active. Build logs are kept for 30 days on the Hacker plan and 90 days on paid plans. When you delete your account, we delete or anonymise your personal data within 30 days, except where retention is legally required.

6. Your rights

Under the GDPR you may request access, correction, deletion, restriction, portability, or object to processing, and withdraw consent at any time. Under the CCPA, California residents may request to know, delete and correct personal information and may not be discriminated against for exercising these rights. We do not sell or share personal information for cross-context behavioural advertising. To exercise any right, email privacy@skyport.app.

7. International transfers

Where data is transferred outside the European Economic Area, we rely on Standard Contractual Clauses or equivalent safeguards.

8. Security

We use encryption in transit (TLS), encryption at rest, least-privilege access controls and row-level authorisation so each user can only access their own projects.

9. Children

The Service is not directed to children under 16, and we do not knowingly collect their personal data.

10. Changes and contact

We will notify you of material changes by email or in the dashboard. Questions? Contact privacy@skyport.app.