Draft content — pending legal review.
Legal
Data Processing Addendum
Summary of how SkySuite processes personal data on behalf of customers (controllers).
Roles
Customer is the data controller; SkySuite is the data processor. Sub-processors are listed below.
Processing scope
Lead, contact, job, telemetry, deliverable, and billing data submitted to SkySuite by the customer.
Sub-processors
AWS (compute, storage), Cloudflare (CDN, R2 object storage), Stripe (payments), Plaid (bank verification). Sub-processor list maintained at /security/subprocessors. PLACEHOLDER — confirm sub-processor list with legal.
International transfers
EU/UK personal data transferred under SCCs. Customer can request a signed DPA at [email protected].
Retention
Data retained while account is active and for 90 days after account closure. Telemetry retention configurable up to 7 years per customer plan.