Draft content — pending legal review.

Sky Suite ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy describes how we collect, use, share, and protect your personal information when you use the Sky Suite platform, websites, and services (collectively, the "Service").

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not use the Service.

1. Information We Collect

1.1 Information You Provide

• Account Information: Name, email address, phone number, company name, and password when you create an account.
• Profile Information: Business details, certifications (e.g., FAA Part 107), service areas, profile photos, and equipment information.
• Payment Information: Billing address and payment method details. Payment card numbers are processed and stored by our payment processors (Stripe and PayPal) and are never stored on our servers.
• Client and Contact Data: Information about your clients and contacts that you enter into the CRM, including names, addresses, phone numbers, and email addresses.
• Uploaded Content: Files, images, documents, survey data, deliverables, and other content you upload to the Service.
• Communications: Messages sent through the platform, support tickets, and feedback you provide.

1.2 Information Collected Automatically

• Usage Data: Pages visited, features used, actions taken, timestamps, and session duration.
• Device Information: Browser type, operating system, device type, and screen resolution.
• GPS and Location Data: If you enable location services, we may collect your device's GPS coordinates for features such as weather lookups, airspace checks, and service area mapping. Location data is only collected when you actively use location-dependent features.
• IP Address: Your IP address is collected for security, rate limiting, and general analytics purposes.
• Cookies and Similar Technologies: See Section 7 below.

1.3 Information from Third Parties

• Payment Processors: Transaction confirmation details from Stripe and PayPal.
• Public Data Sources: Business information from publicly available sources used to assist with lead generation and marketplace features, only when you actively use those features.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service.
• Process payments and manage your subscription.
• Send transactional communications (account confirmations, invoices, password resets).
• Provide customer support and respond to your inquiries.
• Improve and develop new features based on usage patterns.
• Detect, prevent, and address security threats and fraud.
• Enforce our Terms of Service and comply with legal obligations.
• Send optional marketing communications (with your consent; you may opt out at any time).

We do not use your data to build advertising profiles. We do not sell your personal information.

3. How We Share Your Information

We may share your information only in the following circumstances:

Recipient	Purpose	Data Shared
Stripe / PayPal	Payment processing	Billing details, transaction amounts
Email Service Providers	Transactional and marketing emails	Email address, name
Cloud Infrastructure	Hosting and data storage	All data (encrypted at rest)
Marketplace Participants	Job referrals (only with your consent)	Business name, service area, contact info

We may also disclose information when required by law, such as in response to a valid subpoena, court order, or government request.

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

4. Data Retention and Deletion

We retain your personal information for as long as your account is active or as needed to provide the Service. Specific retention periods include:

• Account Data: Retained while your account is active and for 90 days after account deletion to allow for reactivation.
• Uploaded Files and Content: Retained while your account is active. Deleted within 30 days of account deletion unless required for legal compliance.
• Payment Records: Retained for 7 years as required by tax and financial regulations.
• Usage Logs: Retained for up to 12 months for analytics and security purposes, then anonymized or deleted.

5. Your Rights (CCPA / GDPR)

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Right to Access: Request a copy of the personal information we hold about you.
• Right to Correction: Request correction of inaccurate personal information.
• Right to Deletion: Request deletion of your personal information, subject to legal retention requirements.
• Right to Portability: Request your data in a structured, machine-readable format.
• Right to Opt Out: Opt out of marketing communications at any time.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise any of these rights, contact us at [email protected]. We will respond to verifiable requests within 30 days (or 45 days if an extension is needed, with notice).

California Residents (CCPA): We do not sell personal information as defined by the California Consumer Privacy Act. You have the right to know what personal information we collect and how it is used, and to request deletion of your data.

EU/EEA Residents (GDPR): Our legal basis for processing your data includes contract performance, legitimate interest, and consent. You have the right to lodge a complaint with your local data protection authority.

6. Data Security

We take the security of your data seriously and implement industry-standard measures to protect it, including:

• Encryption of data in transit (TLS 1.2+) and at rest.
• Secure password hashing using bcrypt/scrypt algorithms.
• Regular security audits and vulnerability assessments.
• Role-based access controls and least-privilege principles.
• Rate limiting and brute-force protection on authentication endpoints.
• Automated backups with encrypted storage.

While we implement robust security measures, no system is completely secure. We cannot guarantee the absolute security of your information. If we become aware of a data breach affecting your personal information, we will notify you and applicable authorities as required by law.

7. Cookies and Tracking Technologies

We use the following cookies and similar technologies:

• Essential Cookies: Required for authentication, session management, and security. These cannot be disabled.
• Functional Cookies: Store your preferences (e.g., theme settings, language).
• Analytics Cookies: Help us understand usage patterns to improve the Service. These are first-party only and do not track you across other websites.

We do not use third-party advertising cookies or cross-site tracking pixels. We do not participate in ad networks.

8. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that a child under 18 has provided us with personal information, we will promptly delete it. If you believe a child has provided us with personal information, please contact us at [email protected].

9. International Data Transfers

Our servers are located in the United States. If you are accessing the Service from outside the United States, your information may be transferred to, stored, and processed in the United States. By using the Service, you consent to such transfers. We take appropriate safeguards to ensure your data is protected in accordance with this Privacy Policy.

10. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party sites you visit.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or through a prominent notice on the Service at least 30 days before the changes take effect. The "Effective Date" at the top of this page indicates when this policy was last updated.

12. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy, please contact us:

• Email: [email protected]
• General Support: [email protected]
• Website: https://skysuite.pro