Privacy Policy

This Privacy Policy explains how Skycord Inc. (“Skycord”, “we”, “our”, or “us”) collects, uses, and protects information about you when you use our services, including our website and platform (collectively, the “Services”).

1. Information we collect

We collect information in the following ways:

• Account information: username, email address, and hashed password when you register.
• Profile information: display name, avatar, and bio you optionally provide.
• Usage data: page views, feature interactions, and aggregate analytics to improve the product. We do not sell this data.
• Payment information: billing details processed by our payment partners (Stripe). We do not store full card numbers.
• Communications: messages you send through the platform are end-to-end encrypted using the Signal Protocol. We cannot read them.

2. How we use your information

We use the information we collect to:

• Provide, maintain, and improve our Services
• Process transactions and send related information
• Send technical notices, security alerts, and support messages
• Respond to your comments and questions
• Monitor and analyse usage patterns to improve user experience
• Detect and prevent fraudulent transactions and other illegal activities

We do not sell your personal data to third parties. Ever.

3. End-to-end encryption

All direct messages and encrypted channel messages on Skycord use the Signal Protocol with Double Ratchet key management. This means message content is encrypted on your device before transmission and can only be decrypted by the intended recipients. Skycord does not hold decryption keys for your messages and cannot read them, even if compelled by law.

4. Data retention

We retain your account information for as long as your account is active or as needed to provide Services. You may delete your account at any time via Settings → Account → Delete account. Upon deletion, personal data is purged within 30 days, except where retention is required by law (e.g., financial records).

5. Sharing of information

We may share your information with:

• Service providers: companies that provide services on our behalf (hosting, payments, email delivery). They are contractually restricted from using your data for other purposes.
• Law enforcement: only when required by valid legal process. We publish a transparency report annually.
• Business transfers: in connection with a merger or acquisition, subject to the same privacy protections.

6. Cookies and tracking

We use strictly necessary cookies for authentication and session management. We use first-party analytics — no Google Analytics or third-party trackers. You can disable non-essential cookies in your browser settings without affecting core functionality.

7. Your rights

Depending on your location, you may have rights under GDPR, CCPA, or other privacy laws, including:

• Right to access your personal data
• Right to correct inaccurate data
• Right to erasure (“right to be forgotten”)
• Right to data portability
• Right to object to processing

To exercise these rights, email privacy@skycord.space. We will respond within 30 days.

8. Children's privacy

Skycord is not directed to children under 13 (or 16 in the EU). We do not knowingly collect personal information from children. If we learn we have done so, we will delete it promptly.

9. Security

We implement industry-standard security measures including TLS 1.3 in transit, AES-256-GCM at rest, and SOC 2 Type II compliance. No system is 100% secure. If you discover a security vulnerability, please report it to security@skycord.space.

10. Changes to this policy

We will notify you of material changes via email or an in-app notice at least 30 days before the change takes effect. Continued use of the Services after that date constitutes acceptance of the updated policy.

11. Contact

Questions about this policy? Contact our Data Protection Officer at privacy@skycord.space or write to us at Skycord Inc., 340 Pine Street Suite 800, San Francisco CA 94104.