Privacy Policy

1. Information We Collect

When you use SkyReport, we collect the following information:

• Account information: Phone number (required), full name, email address (optional), and organization name.
• Content you create: Reports, documents, images, tasks, calendar events, and chat messages within the platform.
• Device information: Device identifiers for security purposes when device approval is enabled by your organization administrator.
• Usage data: Audit logs of actions performed within the platform for security and compliance.

2. How We Use Your Information

• To provide and operate the SkyReport platform.
• To authenticate your identity and secure your account.
• To send SMS verification codes and account notifications.
• To process AI-powered report analysis (text content is sent to AI providers for processing; images and files are not shared with third parties).
• To maintain audit logs for organizational security and compliance.

3. Data Storage & Security

SkyReport is a self-hosted platform. All data — including reports, documents, images, and user information — is stored on infrastructure controlled by your organization. No data is stored on third-party cloud services unless explicitly configured by your administrator.

All connections are encrypted using HTTPS/TLS. Passwords are hashed using bcrypt with a cost factor of 12. Authentication tokens are signed with industry-standard JWT. Role-based access control restricts data visibility within organizations.

4. Third-Party Services

SkyReport integrates with the following third-party services:

• AI providers (Anthropic Claude, Google Gemini, OpenAI): Report text content may be sent for AI analysis. No files or images are shared.
• SMS-fly: Phone numbers are sent to SMS-fly for delivering verification codes and notifications.
• Telegram: If you connect a Telegram account, your Telegram user ID is stored to enable bot notifications.
• Cloudflare: Network traffic is routed through Cloudflare for security and performance.

5. Data Sharing

We do not sell, rent, or share your personal information with third parties for marketing purposes. Data is shared only as described in Section 4, and only to the extent necessary to provide the service.

6. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate personal data.
• Request deletion of your account and associated data.
• Export your data in a portable format.

To exercise these rights, contact your organization administrator or email us at [email protected].

7. Data Retention

Your data is retained for as long as your account is active. When an account or organization is deleted, all associated data is permanently removed from the server. Audit logs may be retained for up to 12 months for security purposes.

8. Changes to This Policy

We may update this privacy policy from time to time. Significant changes will be communicated through the platform. Continued use of SkyReport after changes constitutes acceptance of the updated policy.

9. Contact

For privacy-related questions or concerns, contact us at [email protected].