Privacy Policy

UPDATED JANUARY 13, 2025

This Privacy Policy governs any personal information Skyflow Inc. (“Skyflow,” “we,” “us,” or “our”) collects, how we use and share that data, and your choices concerning our data practices. Through its website (the “Site”), Skyflow provides sales and marketing information about specialized data privacy vaults which store and utilize sensitive data safely and securely (such information, together with the Site, the “Service”).

The Service is directed towards our customers and potential customers. It should not be used for personal, family, or household purposes. We treat all personal information covered by this Privacy Policy as pertaining to individuals acting as business representatives, rather than in their personal capacity.

Before using the Service or submitting any personal information to Skyflow, please review this Privacy Policy carefully and contact us if you have any questions. By using the Service, you agree to the practices described in this Privacy Policy. If you do not agree to this Privacy Policy, please do not access the Site or otherwise use the Service.

1. PERSONAL INFORMATION WE COLLECT

Personal Information You Provide: We collect personal information from you when you request a demo, participate in one of our events or conferences, contact us, visit the Site, our branded social media pages, or our offices, use the Service, apply for jobs, send communications to or receive communications from us, or otherwise provide personal information to us. The personal information we collect varies depending on what you choose to share, but it may include your name and email address.

We also have pages on social media sites like X (Twitter) and LinkedIn (“Social Media Pages”). When you interact with our Social Media Pages, we will collect personal information that you elect to provide to us, such as your contact details. In addition, the companies that host our Social Media Pages may provide us with aggregate information and analytics regarding the use of our Social Media Pages.

Commercial Information: This includes information about products or services considered, obtained, or purchased. 

Internet Activity Data: When you visit, use, and interact with the Service, we may receive certain information about your visit, use, or interactions. For example, we may monitor the number of people that visit the Service, peak hours of visits, which page(s) are visited, the domains our visitors come from (e.g., google.com, yahoo.com, etc.), and which browsers people use to access the Service (e.g., Chrome, Firefox, Microsoft Internet Explorer, etc.), broad geographical information, and navigation pattern. In particular, the following information is created and automatically logged in our systems:

  • Log Data: Information that your browser automatically sends whenever you visit the Site. Log Data includes your Internet Protocol address, browser type and settings, the date and time of your request, and how you interacted with the Site.
  • Cookies Data: Please see the “Cookies” section below to learn more about how we use cookies.
  • Device Data: Includes name of the device, operating system, and browser you are using. Information collected may depend on the type of device you use and its settings. 
  • Usage Data: We collect information about how you use our Service, such as the types of content that you view or engage with, the features you use, the actions you take, and the time, frequency, and duration of your activities.
  • Location Data: We derive a rough estimate of your location from your IP address. 
  • Email Open/Click Data: We use pixels in our email campaigns that allow us to collect your email and IP address as well as the date and time you open an email or click on any links in the email.

Geolocation data: Our services don’t collect precise geolocation data. However, we do collect IP addresses from which we can determine your general location (such as your country, city, state/province, and postal code).

Personal Information We Process on Behalf of Our Business Customers: In order to provide our data privacy vaults, we collect sensitive data and personal information from our customers. We process that data pursuant to our agreements with our business customers. We have no direct relationship with the individuals whose personal information we process in the course of providing our data privacy vaults to our customers. If you are such an individual and have questions about the processing of your personal information, please contact the business customer that you interact with directly.

Cookies: We use cookies to operate and administer our Site, gather usage data on our Site, and improve your experience on it. You can find an overview of  the cookies we use in our Cookie Policy available here. A “cookie” is a piece of information sent to your browser by a website you visit. Cookies can be stored on your computer for different periods of time. Some cookies expire after a certain amount of time, or upon logging out (session cookies), others survive after your browser is closed until a defined expiration date set in the cookie (as determined by the third party placing it), and help recognize your computer when you open your browser and browse the Internet again (persistent cookies). For more details on cookies please visit All About Cookies.

On most web browsers, you will find a “help” section on the toolbar. Please refer to this section for information on how to receive a notification when you are receiving a new cookie and how to turn cookies off.

Please note that if you limit the ability of websites to set cookies, you may be unable to access certain parts of the Site and you may not be able to benefit from the full functionality of the Site.

Advertising networks may use cookies to collect personal information. Most advertising networks offer you a way to opt out of targeted advertising. If you would like to find out more information, please visit the Network Advertising Initiative’s online resources at http://www.networkadvertising.org and follow the opt-out instructions there.

If you access the Site on your mobile device, you may not be able to control tracking technologies through the settings.  

Analytics: We use Google Analytics, a web analytics service provided by Google, Inc. (“Google”). Google Analytics uses cookies to help us analyze how users use the Site and enhance your experience when you use the Site. For more information on how Google uses this information, click here.

Online Tracking and Do Not Track Signals: We and our third party service providers may use cookies, pixels, or other tracking technologies to collect information about your browsing activities over time and across different websites following your use of the Site and use that information to send targeted advertisements. Our Site currently does not respond to “Do Not Track” (“DNT”) signals and operates as described in this Privacy Policy whether or not a DNT signal is received. If we do respond to DNT signals in the future, we will update this Privacy Policy to describe how we do so.

Types of data we do not collect:

  • Children’s data: The Skyflow’s website is not intended for or directed to users under the age of 16. We do not knowingly or intentionally collect personal information from children under the age of 16. Where appropriate, we take reasonable measures to determine that our users are adults of legal age and to inform minors not to submit information to the Website or the Services, or in response to advertisements. If you have reason to believe that a child under the age of 18 has provided personal information to Skyflow through the Service please contact us and we will endeavor to delete that information from our databases.

 

2. HOW WE USE PERSONAL INFORMATION

We may use personal information for the following purposes:

  • To provide the Service and conduct our business;
  • To perform market research;     
  • To send out newsletters; 
  • To respond to your inquiries, comments, feedback, or questions;
  • To send administrative information to you, for example, information regarding the Service and changes to our terms, conditions, and policies;
  • To analyze how you interact with our Service;
  • To maintain and improve the Service;
  • To develop new products and services;
  • To prevent fraud, criminal activity, or misuses of our Service, and to ensure the security of our IT systems, architecture, and networks; and
  • To comply with legal obligations and legal process and to protect our rights, privacy, safety, or property, and/or that of our affiliates, you, or other third parties;     
  • To process payments.

Aggregated Information. We may aggregate personal information and use the aggregated information to analyze the effectiveness of our Service, to improve and add features to our Service, and for other similar purposes. In addition, from time to time, we may analyze the general behavior and characteristics of users of our Service and share aggregated information like general user statistics with prospective business partners. We may collect aggregated information through the Service, through cookies, and through other means described in this Privacy Policy.

Marketing. We may use your personal information to contact you to tell you about products or services we believe may be of interest to you. For instance, if you elect to provide your email, we may use that information to send you special offers. You may opt out of receiving emails by following the instructions contained in each promotional email we send you. In addition, if at any time you do not wish to receive future marketing communications, you may contact us. If you unsubscribe from our marketing lists, you will no longer receive marketing communications but we will continue to contact you regarding other administrative matters and to respond to your requests. We may also use your personal information to analyze and improve our marketing campaigns.

3. SHARING AND DISCLOSURE OF PERSONAL INFORMATION

In certain circumstances we may share the categories of personal information described above without further notice to you, unless required by the law, with the following categories of third parties:

  • Vendors and Service Providers: To assist us in meeting business operations needs and to perform certain services and functions, we may share personal information with vendors and service providers, including providers of hosting services, cloud services, and other information technology services providers, email communication software and email newsletter services, advertising and marketing services, payment processors, customer relationship management and customer support services, and analytics services. Pursuant to our instructions, these parties will access, process, or store personal information in the course of performing their duties to us.
  • Business Transfers: If we are involved in a merger, acquisition, financing due diligence, reorganization, bankruptcy, receivership, sale of all or a portion of our assets, or transition of service to another provider (collectively a “Transaction”), your personal information and other information may be shared in the diligence process with counterparties and others assisting with the Transaction and transferred to a successor or affiliate as part of that Transaction along with other assets.
  • Legal Requirements: If required to do so by law or in the good faith belief that such action is necessary to (i) comply with a legal obligation, including to meet national security or law enforcement requirements, (ii) protect and defend our rights or property, (iii) prevent fraud, (iv) act in urgent circumstances to protect the personal safety of users of the Service, or the public, or (v) protect against legal liability.


4. PRIVACY RIGHTS

  • You can ask us not to use your data for marketing: We will inform you (before collecting your data) if we intend to use your data for marketing and if third parties are involved. You can opt out from marketing by emailing us at privacy@skyflow.com.
  • You can choose not to provide us with personal information: If you choose to do this, you can continue to use the website and browse its pages, but we will not be able to process transactions without personal information.
  • You can turn off cookies: You can block cookies by activating a setting on your browser allowing you to refuse cookies. You can also delete cookies through your browser settings. If you turn off cookies, you can continue to use the Skyflow website, but certain services may not work effectively.
  • In accordance with the Choice Principle of the EU-U.S. Data Privacy Framework, we offer you the following choices regarding your personal information:
    • Sharing with Third Parties: You can choose to prevent us from disclosing your personal information to third parties for purposes that are different from those for which it was originally collected or subsequently authorized by you.
    • Use for Different Purposes: You can also opt-out of us using your personal information for purposes that are materially different from those for which it was originally collected or subsequently authorized by you.
    • For sensitive information, (i.e., personal information specifying medical or health conditions, racial or ethnic origin, data relating to the intimate sphere (e.g., personal sexuality), data relating to political, religious, philosophical or trade union-related views or activities, or information  on social assistance measures or administrative and criminal proceedings or sanctions) we will obtain your explicit consent (opt-in) before sharing it with third parties or using it for purposes other than those for which it was originally collected.

To make requests, or if you have a question regarding our privacy practices, please contact our Privacy Office at privacy@skyflow.com. If you would like to submit a request you can request that at privacy@skyflow.com and allow 30 days for processing and compliance.

Where provided for by law and subject to any applicable exceptions, you may have the right:

  • To know the categories of personal information that Skyflow has collected about you, the business purpose for collecting your personal information, and the categories of sources from which the personal information was collected; how long the data will be stored (or the criteria used to determine that period), 
  • To access the specific pieces of personal information that Skyflow has collected about you;
  • To know whether Skyflow has disclosed your personal information for business purposes, the categories of personal information so disclosed, and the categories of third parties to whom we have disclosed your personal information;
  • To be ‘forgotten’ by us: You can do this by asking us to delete any personal information we hold about you, if it is no longer necessary for us to hold the data for purposes of your use of Skyflow; 
  • To make us correct any inaccurate personal information about you;  
  • To transfer your data to another service: We will give you a copy of your data in CSV so that you can provide it to another service. If you ask us and it is technically possible, we will directly transfer the data to the other service for you. We will not do so to the extent that this involves disclosing data about any other individual; 
  • To instruct businesses that sell personal information to stop doing so – Skyflow, however, does not sell personal information; 
  • To be free from discrimination related to the exercise of these rights;

If you would like to exercise any or all of these rights, you may do so by contacting us. After we receive your request, we may request additional information from you to verify your identity. Your authorized agent may submit requests in the same manner, although we may require the agent to present signed written permission to act on your behalf, and you may also be required to independently verify your identity with us and confirm that you have provided the agent permission to submit the request.

Please contact us with questions or to request access to an alternative format of this Privacy Policy.

5a. EU GDPR

VeraSafe has been appointed as Skyflow's representative in the European Union for data protection matters, pursuant to Article 27 of the General Data Protection Regulation of the European Union. If you are in the European Economic Area, VeraSafe can be contacted in addition to privacy@skyflow.com, only on matters related to the processing of personal data. To make such an inquiry, please contact VeraSafe using this contact form or via telephone at: +420 228 881 031.

Alternatively, VeraSafe can be contacted at:

VeraSafe Ireland Ltd.
Unit 3D North Point House
North Point Business Park
New Mallow Road
Cork T23AT2P
Ireland

5b. UK GDPR

VeraSafe has been appointed as Skyflow's representative in the United Kingdom for data protection matters, pursuant to Article 27 of the United Kingdom General Data Protection Regulation. If you are located within the United Kingdom, VeraSafe can be contacted in addition to or instead of privacy@skyflow.com, only on matters related to the processing of personal data. To make such an inquiry, please contact VeraSafe using this contact form or via telephone at: +44 (20) 4532 2003.

Alternatively, VeraSafe can be contacted at:

VeraSafe United Kingdom Ltd.
37 Albert Embankment
London SE1 7TL
United Kingdom

6. LINKS TO OTHER WEBSITES

The Service may contain links to other websites not operated or controlled by Skyflow, including social media services (“Third Party Sites”). The information that you share with Third Party Sites will be governed by the specific privacy policies and terms of service of the Third Party Sites and not by this Privacy Policy. By providing these links we do not imply that we endorse or have reviewed these sites. Please contact the Third Party Sites directly for information on their privacy practices and policies.

7. SECURITY

You use the Service at your own risk. We implement commercially reasonable technical, administrative, and organizational measures to protect personal information both online and offline from loss, misuse, and unauthorized access, disclosure, alteration, or destruction.

However, no Internet or e-mail transmission is ever fully secure or error free. In particular, e-mail sent to or from us may not be secure. Therefore, you should take special care in deciding what information you send to us via the Service or e-mail. Please keep this in mind when disclosing any personal information to Skyflow via the Internet. In addition, we are not responsible for circumvention of any privacy settings or security measures contained on the Service, or third party websites.

We may retain your Personal Information for a period of time consistent with the original purpose of collection or as long as required to fulfill our legal obligations. After expiry of the applicable retention periods, your Personal Data will be deleted. If there is any data that we are unable, for technical reasons, to delete from our systems, we will implement appropriate measures to prevent any further use of such data. For more information on data retention periods, please contact us at privacy@skyflow.com .

8. INTERNATIONAL USERS

By using our Service, you understand and acknowledge that your personal information will be transferred from your location to our facilities and servers in the United States, where data protection laws may differ from those in your jurisdiction. If we transfer or store your information from outside the United States, we take steps required by law to ensure that your privacy rights continue to be protected as outlined in this Privacy Policy. Normally, this involves us conducting a data transfer risk assessment and requiring our suppliers to enter binding contractual commitments with us designed to protect your data.

Skyflow complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce.  Skyflow has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) under the UK Extension to the EU-U.S. DPF.  Skyflow has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF.  If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern.  To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit https://www.dataprivacyframework.gov/.

Skyflow is responsible for the processing of personal data it receives, under the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and Swiss-U.S. DPF and subsequently transfers to a third party acting as an agent on its behalf.  Skyflow complies with the EU-U.S. DPF Principles and the Swiss-U.S. DPF Principles for all onward transfers of personal data from the EU, UK, and Switzerland, including the onward transfer liability provisions.

The Federal Trade Commission has jurisdiction over Skyflow’s compliance with the EU-U.S. DPF, the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. DPF. In certain situations, Skyflow may be required to disclose personal data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.

If a privacy complaint or dispute relating to Personal Data received by Skyflow, Inc. in reliance on the Data Privacy Framework (or any of its predecessors) cannot be resolved through our internal processes, we have agreed to participate in the VeraSafe Data Privacy Framework Dispute Resolution Procedure. Subject to the terms of the VeraSafe Data Privacy Framework Dispute Resolution Procedure, VeraSafe will provide appropriate recourse free of charge to you. To file a complaint with VeraSafe and participate in the VeraSafe Data Privacy Framework Dispute Resolution Procedure, please submit the required information here: https://www.verasafe.com/privacy-services/dispute-resolution/submit-dispute/ If a complaint or dispute cannot be resolved through our internal process, we have also agreed to cooperate with the EU and UK data protection authorities and the Swiss Federal Data Protection and Information Commissioner and to participate in the dispute resolution procedures of the panel established by such data protection authorities.

For complaints regarding EU-U.S. DPF, the UK Extension to the EU-U.S DPF, and Swiss-U.S. DPF compliance not resolved by any of the other DPF mechanisms, you have the possibility, under certain conditions, to invoke binding arbitration. Further information can be found on the official DPF website: https://www.dataprivacyframework.gov/s/article/ANNEX-I-introduction-dpf?tabset-35584=2

9. JOB APPLICANTS 

When you apply for a job at Skyflow, we collect the information that you provide to us in connection with your job application. This includes business and personal contact information, professional credentials and skills, educational and work history, and other information that may be included in a resume. This may also include diversity information that you voluntarily provide. We use this information to facilitate our recruitment activities and process employment applications, such as evaluating candidates and monitoring recruitment statistics. We may also use and disclose this information (a) to improve the administration of the Site, (b) as otherwise necessary to comply with relevant laws, (c) to respond to subpoenas or warrants served on Skyflow, and (d) to protect and defend the rights or property of Skyflow or others.

10. CHANGES TO THE PRIVACY POLICY

The Service and our business may change from time to time. As a result we may change this Privacy Policy at any time. When we do we will post an updated version on this page, unless another type of notice is required by the applicable law. By continuing to use our Service or providing us with personal information after we have posted an updated Privacy Policy, or notified you by other means if applicable, you consent to the revised Privacy Policy and practices described in it.

11. CONTACT US

If you have any questions about our Privacy Policy or to exercise your privacy rights, please feel free to contact us at our designated request address:

Skyflow Inc.
195 Page Mill Road, Suite 111
Palo Alto, CA 94306 
privacy@skyflow.com
 

To report complaints confidentially, contact: privacy@skyflow.com