Sky
Legal

Privacy Policy

Last updated 28 October 2026

Sky is a browser extension that turns text you highlight, or a page you explicitly ask it to read, into structured leads. This policy explains exactly what data we handle, why, and who processes it. The short version: we only ever see what you deliberately hand us: text you capture, and, if you choose to use them, who an email thread was between and which meetings you had with people you keep in Sky. Sky does look at one thing on its own (whether the page you are on reads like someone asking for what you sell, so it can offer to catch it) and that look happens entirely on your own device. Nothing about the page is sent to us or to anyone else for it, and you can switch it off. See §2.

1. Who we are

"We" and "us" mean Sky. For any privacy question or request, contact us at hi@skal.ai.

2. What we collect and why

We collect only what's needed to sign you in and to capture the leads you ask us to capture. We do not sell your data, show you ads, or use your captured content to train AI models.

DataWhyWhen
Email address To create your account and sign you in, with a one-time code or with Google. If you continue with Google, Google tells us your email address, name and profile picture and nothing else: no inbox, contacts or files. When you sign in.
Where you first found Sky When you first open a page on sky.skal.ai, your browser keeps a note of how you arrived: the campaign tag on the link, if it had one, a friend’s invite code, or the name of the site that linked you (“linkedin.com”, never the page or post). It also keeps the path of the page you landed on, without anything after the question mark, and the date. Nothing is sent while you are only browsing. When you first sign in, that note is stored on your account, once, so we can see which places bring people who go on to use Sky. It is never updated afterwards, never shared, and never tied to other sites you visit. If you installed from the Chrome Web Store with no note, your account says “store”. Kept in your browser on your first visit; stored once, at your first sign-in.
Text you capture Sent to our server for AI extraction into lead fields. Two things can be sent, both only on your action: text you select and confirm by clicking the Sky button or pressing the shortcut, or, when you explicitly ask Sky to read the page you're on, the text visible on that page. A page read always starts from a button that names it (and its cost) before anything is sent. Only on an explicit capture.
Screenshots you paste or drop into the panel Sent to a vision model at the same provider that reads your text (see §4), which reads the conversation or profile in the picture into lead fields. The image itself is never stored: not in our database, not in logs, and not in your browser. Only the leads read from it are kept, and only once you confirm them. Only when you paste, drop or choose a screenshot.
A company name, for Look up When you press Look up on a lead, the company name on that lead, and nothing else, is sent to the public sources you have switched on: GLEIF (the LEI register), SEC EDGAR (US form D filings), Companies House (UK), Wikidata (the open knowledge base), and for a lead in France or Norway their national registers (the Annuaire des Entreprises and the Brønnøysund Register). All are off by default. If you accept a match, it is stored on the lead, with which register it came from. Only when you press Look up, and only to registers you switched on.
A company website you type on a lead From the lead’s drawer you can type the address of the company’s own website and press Read. Sky fetches that one page and sends its text to the AI model, the way a capture is sent, and shows you what the page says the company does. Nothing is stored unless you accept it; if you do, it is kept on the lead beside any register match, marked as the site’s own account, and read by the drafter and by a re-score you ask for. Sky proposes an address only from what the lead already carries (a work email’s domain, an address in a field), never by guessing from the company name. Only when you press Read, to the address you typed.
A company’s icon To show a company’s icon, Sky’s server asks that company’s own website for it, using only the web address. No name, email or anything you captured is sent, and the icon is stored under the address alone, not against your account. The address is the website a lead states, or the domain of their work email; a lead on Gmail, Outlook or another public mail service keeps its letter, and Sky never guesses an address from a company name. The icon is kept for every account at once, so a company is asked once rather than once per user, and Sky’s server never records which user asked. The web address alone, to that company’s own site.
Contact details on a company’s own site From a lead’s drawer, or for up to 25 ticked leads at once, Sky reads the company’s homepage and up to four of its contact, team, about and privacy pages and lists the emails, phone numbers, address and social pages the company published there, on its own domain only. No AI reads these pages. To say whether an email’s domain can receive mail, Sky asks Cloudflare’s public DNS resolver (1.1.1.1) for that domain’s mail records: only the domain is sent, never the address, the name or anything you captured, and nothing is sent to the mailbox. Nothing is added to a lead until you tap it, and then only beside what the lead already holds. Only when you press Look on their site or Find contacts.
Search terms, for Discover Search terms built from your ideal customer profile, and any sentence you add, are sent to Companies House and SEC EDGAR to find company officers. This has its own switch, off by default. What comes back is shown to you and not stored, unless you keep someone as a lead. Only when you run Discover, with its switch on.
A grant, tender or post you share When you press Share on a grant, a tender or a post your watch found, Sky copies the notice or post, as its source published it, to other Sky users whose own watch words it says. It goes under the name you confirm when you share (and a link to your public profile, only while that profile is on); you see how many it reached. Nothing else about you, your words or your leads goes with it. You can stop receiving shares under your grants and tenders words. Only when you press Share, at most 20 a day.
Your words, for grants and tenders The words you write for grants and tenders are sent once a day to the US government’s grants search, the EU’s public tenders search and the EU’s funding search, each only if you ticked it (the two UK lists are read whole, so your words stay in Sky). The categories you tick are sent to the EU’s tenders search the same way. Sky keeps the notices that say one of your words or sit in a category you ticked, with the buyer, the budget, the closing date and the contact the notice publishes for bidders (a name, a role, an email, a phone). That contact is shown only to you, and becomes a lead only if you add it. What you choose to show (a value range, countries, days left, words to leave out) stays in Sky. When you press Suggest words, your profile and company note are sent to Sky’s AI provider to propose words, the same way as when Sky drafts a message. Daily while the watch is on, and when you press Look now.
Files you bring in A LinkedIn connections export, a Google Contacts export, a spreadsheet or a WhatsApp chat export, if you choose to import one from the dashboard. The file is read in your browser and no AI reads it. What is stored is the people in it as leads: name, company, role, contact details, and, unless you have switched “Keep the original text” off, the row’s own cells or the person’s own messages from that chat. Somebody already in Sky is filled in rather than added again. Only when you import a file.
Page URL & title of the capture Saved alongside a lead so you remember where it came from. Only on an explicit capture.
Extracted lead fields The structured result (name, company, etc.), stored so you can review, edit, and manage your leads. When you save a lead.
How a reply sounds When a reply of theirs is on a person’s record with its words (because you said a capture was their reply, or it reached your reply address), those words and your last message before it are sent once to Sky’s AI provider, which answers Keen, Open, Cooling or Not interested with a short reason. Sky stores that answer and the few words of the reply it rests on. No name, company or score is sent with it. Forget removes the reason and the words. Once per reply, when you open the dashboard.
Things you keep while reading When you press Keep this, the text you highlighted (or the post under your cursor), the note you typed, the page’s URL and title, and the topic you filed it under are stored as a clip. No AI reads a clip when you keep it. A clip reaches a model only when you tick it into a comment or a post you are drafting, for that draft, or when you press Sort these on the Kept page, which sends your unfiled clips once to suggest topics and stores nothing. Topics are names you give; nothing sorts your thoughts for you. Delete any clip or topic from the dashboard. Only when you press Keep.
Your settings Lists, templates, and your Ideal Customer Profile, stored to configure captures. When you change settings.
A random install identifier An anonymous, randomly generated ID kept in your browser, not derived from your device or hardware, and reset if you reinstall. Used only to detect abuse, such as one person creating many accounts to get around free limits. Generated on your first capture, sent when you save a lead.
Subscription details Your plan, its status and renewal date, and the Paddle customer and subscription identifiers for your account, so we know what you're entitled to and can open your billing portal. No card details: those are entered into Paddle's checkout and never reach Sky. Only if you buy a paid plan.
What you ask Sky What you type into the find box, into Discover, into Ask Sky, and the brief you give Shortlist, with the count of results each returned and, for Ask Sky, which tools it ran. We keep this as measurement, to decide what those features should do next. It holds no lead, no person and no rating. When you use those features. Deleted after 90 days.
Your outreach plans When you make a plan on the Strategy page: the plays Sky wrote (a name, a reason and a line to lead with), the line you typed to aim it, and which of your leads are in each play. Never the words you captured or a contact detail. If you set a goal on a play: how many people, the day, and the line you write afterwards about what you learned. If you test a second angle: its words. If you add, move or take somebody out of a play: which lead, which play and when. On a team, the owner and managers can read your plans, goals, tests and lessons, and see that a message was sent or copied to someone in a play (never its words). A teammate who uses one of your plays' lines in a new plan sends that line and its counts to the AI with their plan, never a person. When you make a plan. Kept with your account, so a plan can say how it went, and deleted with it.
AI usage counts For each AI call, the number of tokens used and the model that answered, totalled per account per day, so we can report what Sky costs to run. No text is kept with them. On every AI call.
Webhook deliveries (Pro and above) If you connect a webhook, each capture is sent to the endpoint you gave us: the lead's fields, its score and breakdown, and the captured text. We keep a log of each delivery and whether it succeeded, so you can see it in the dashboard. Only if you set up a webhook. The log is kept for 30 days.
Live feed URL If you create a live feed for Google Sheets or Looker Studio, we mint a secret token that lives on your profile. Anyone holding that URL can read your leads (name, company, role, location, contact, need, summary, list, status, deal value, score and source) until you rotate or revoke it. The feed never includes the captured text or the reasons behind a score. The same URL also serves your Reports counts (won, lost and captured by score band, by source and by list). Only if you create one. Revoke it any time from the dashboard.
Your chat with Sky about a person Each turn of a drafting chat about a saved lead (what you typed to Sky and what it answered, including the messages it drafted) is kept on that lead, so the next session picks up where you left off on either surface. The text of a message Sky sent for you is kept on its dated line, and so is the text of a message you copied or put in their message box from Sky, marked as copied. Nothing here is read out of anybody else's message. Deleting the lead deletes them. Whenever you use the chat drawer on a saved lead. Kept until the lead is deleted. The keep-nothing drawer writes nothing.
What happened with a lead A dated line each time something moves: you captured them, you captured them again, you changed their status, Sky drafted a message, you sent or copied one, you said they replied, or you accepted a public register match. When you confirm that a capture is their reply, the captured conversation is kept on that line. It records the event, not the message. Sky keeps one row per person, so without this there is no way to tell a second conversation from a first. As it happens, on your own leads.
What a lead scored, and when Every score Sky has given someone, with the per-trait working, the weights in force at the time and a fingerprint of the ICP that produced it. Re-scoring overwrites the number on the lead, so this is the only record that a score ever moved. It is never shared and never leaves your account. Whenever a lead is scored or re-scored.
Write keys (Pro and above) If you let your CRM update Sky, we store a hash of the key you minted, the name you gave it and when it was last used. We do not store the key itself, which is why it is shown only once. A key can set a lead's outcome and the amount on a win. It cannot read your leads or change anything else. Only if you mint one. Revoke it any time from the dashboard.
Who an email thread was between On a Gmail thread you have open, pressing Add to their record or Reply with Sky has Sky note, for each message, who sent it, who it went to and when, with the thread's subject line. Those are kept as lines on the record of anyone on the thread who is already in Sky, matched by their exact email address. This button does not read, send or keep what a message says. A date Sky cannot read for certain is left out, never guessed. Only when you press, on the thread you have open. It is saved at that press.
Whether somebody replied On a Gmail thread you have open, Sky checks on your own device whether the newest message is from someone in Sky you have written to, by their exact email address against your own leads. If it is, it asks your Sky account when you last wrote to them and asks you Is this their reply? Nothing is recorded unless you tap yes, and then only that they replied, not what they said. The address of anyone not already in Sky never leaves your browser. The same on a LinkedIn or WhatsApp Web conversation you have open: when the newest message there is theirs and one of yours sits above it, Sky matches the profile link or phone number the page shows, on your device, against the people in Sky you have written to, and asks the same question. No message is read, and a group conversation is never asked about. Only the yes you tap.
Contact details in an email signature After you press Add to their record or Reply with Sky on a Gmail thread, Sky reads, on your own device, the phone numbers and LinkedIn address under the sign-off of the sender’s newest message. If that sender is already in Sky by their exact email address and their record lacks them, Sky offers to add them. Nothing is added unless you tap, and the signature of anyone not in Sky never leaves your browser. Only what you tap to add.
An email that bounced When a delivery failure (“Address not found”) is open in Gmail, Sky reads, on your own device, which address it could not deliver to. If that exact address is on one of your leads, Sky offers to mark it as not working on their record. Only the failure notice is read, never anyone’s message, and an address not already in Sky never leaves your browser. Only the mark you tap.
A lead’s GitHub profile When a lead’s record already holds their GitHub address, Look on their GitHub asks GitHub’s public API, from your own browser, for that one profile, and lists the email, X handle and website its owner chose to publish. Only the GitHub username is sent, and GitHub sees your browser’s address as for any page you open. Nothing is added unless you tap it. Only when you press Look on their GitHub.
Contact details on a lead’s own website When a page you are visiting shows an email address or phone link on its own domain, Sky checks, on your own device, whether the site is the website one of your leads already states (their work email’s domain, a website field, a record you kept). If it is, Sky offers to add what that lead lacks. Which sites you visit, and what any page shows, never leave your browser unless you tap to add, and then only the item you added. Switched off with the page hint in Settings. Only what you tap to add.
A LinkedIn profile you open On a LinkedIn profile you have open, Sky checks on your own device whether the person is one of your leads, by their exact name and their company on the page. If they are, it offers to add the profile’s address to their record and to fill a blank role or location from the top of the profile. If you open their Contact info box yourself, it also offers the email and phone shown there that their record lacks. Sky never opens that box, clicks anything on LinkedIn or loads a profile on its own, and reads nothing on LinkedIn from its servers. Nothing is added unless you tap, and nothing about anyone who is not your lead leaves your browser. When the profile of someone already in Sky by that address says they now work somewhere else, Sky offers to update their company and role and notes the move on their record; nothing changes unless you tap. Switched off with the page hint in Settings. Only what you tap to add.
Saving a LinkedIn profile you open On a LinkedIn profile you have open whose person is not in Sky, the page shows Save with their name. Pressing it sends the words of that profile on your screen (the top of it, About and their most recent jobs, nothing else on the page) to Sky’s AI to read and score, the same as if you had highlighted them, and opens the review; nothing is kept until you save, which costs a credit. If you switch on Save LinkedIn profiles I open when they’re a strong fit (off by default, per browser), Sky sends those words without a press once you have stayed on a profile for a few seconds, each profile once a month at most, and keeps the person only when they score as a strong fit, up to 10 a day, a credit each, with Undo. A profile it reads and does not keep is not saved to your account. Sky never opens a profile, scrolls or clicks anything on LinkedIn: it reads only the profiles you visit. Only who you save, or who it keeps for you with that switch on.
Who a page you open is about With the panel open, Sky reads, on your own device, who the page in front of you is about, from where the site itself prints it: the name, headline, company and place at the top of a LinkedIn profile, the name and address of the other person on an open Gmail thread (never the messages), or a page’s own markup naming one person. It shows them under On this page with Save. It checks against the leads the panel already holds whether they are in Sky; only a LinkedIn profile’s address, which the panel already uses to show who you captured from that page, is ever looked up in your Sky account for this. Nothing about the person is sent or kept until you press Save, which adds them to your list at no credit. Your own profile is never offered. × stops it on that site until Sky reopens; it is switched off with the page hint in Settings. Only who you save.
Meetings from Google Calendar (optional) If you connect your calendar, Sky keeps the date, title and length of meetings you had with people already in Sky. What is read, what is kept and how to disconnect are set out below. Only while connected, and only while Sky is open in your browser.

What we do not collect

  • We do not read, scan, or record the pages you visit. Nothing about a page reaches us, or anyone else, unless you capture it: the extension sends us the text you explicitly select, a page you explicitly ask it to read, or a screenshot you paste in, and nothing is saved until you confirm it. The one other thing it sends is who an open Gmail thread was between and when, and only when you press the button that says so. On an open Gmail thread Sky also checks, on your device, whether the newest message is from one of your own leads you wrote to; only then does it ask your Sky account about that lead, and it records nothing unless you tap yes.
  • One check does run on its own, and it never leaves your browser. If you have written an ideal customer profile, Sky compares the text of the page you are on against it, and shows a small pill when the page reads like someone asking for what you sell. That comparison happens on your own device. It makes no network request, sends nothing to us, and records nothing anywhere. Clicking the pill only highlights the passage for you; capturing it is still your click. Without a profile it never runs at all, and you can turn it off in the panel's settings ("Point out pages that look like they hold a lead") or in the dashboard's capture settings.
  • We do not collect your browsing history, keystrokes, passwords, or form inputs.
  • We do not track you across sites. The extension contains no analytics and no advertising tags at all: nothing on the pages you visit is measured or reported. Our website and dashboard use PostHog to count page views and understand where people get stuck (see §4); on the dashboard its automatic click-tracking is switched off so your leads are never included. Signed-in dashboard sessions are replayed with every character of text masked out: we see the shape of what you did, never the content of it. On our public website pages only (never the dashboard), a Google Ads tag tells us when a visit that began with one of our ads goes on to install Sky (see §4).

Google Calendar (optional)

Off until you connect it on the dashboard's Connect page. Connecting asks Google for read-only access to the events on calendars you own and nothing else. Sky reads only your main calendar. It is a separate consent from signing in with Google, which still shares only your email address, name and picture.

While it is connected, and only while Sky's dashboard or side panel is open in your browser, our server asks Google for your events on its own, with nothing for you to press: the last 90 days when the dashboard opens, the last two days about every fifteen minutes, and the week ahead so Sky can show who you are about to meet. It passes on to your browser only each one's start time, length, title and the addresses invited. It does not read a description, a location or a meeting link, and it stores none of what it passes on. Your browser then keeps the meetings that include somebody already in Sky, matched by their exact email address. For those, the date, the title and the length are saved as a line on that person's record. A meeting still to come is shown and never saved. The dashboard also lists the addresses of people you met who are not in Sky, so you can add them or say who they are. That list lives only in the open page and is saved nowhere unless you add somebody, which saves their address on their record. Everything else is dropped. Sky never writes to your calendar.

The access Google gives us is held on our server, where no browser can read it, yours included. Disconnect any time on the Connect page. We delete our copy of that access and ask Google to revoke it. Meetings already on people's records stay until you delete the lead.

Calendar data and AI. When you ask Sky to draft a message to somebody you met, the draft is written by an AI model that is told the date, title and length of that meeting, so it knows you have already spoken. Nothing else from your calendar reaches a model. That model is run by Fireworks AI, or by Groq if Fireworks is unavailable (§4). Neither uses it to train models. We do not use calendar data to train or improve any AI model, ours or anyone else's. We do not sell it, use it for advertising, or transfer it except to provide the features described here.

Sky's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Assistants and agents you connect (optional)

Off until you add Sky to an assistant (such as ChatGPT or Claude) or an agent that works for you, using the address sky.skal.ai/mcp, and say yes on Sky's own page. That page names the app asking. Saying yes gives that app access to your account through the same rules as your own sign-in: it sees only your data.

What it can read. For each lead: the name, company, role, location, contact details, what they need, urgency, deadline, summary, your columns, list, status and its date, deal value, tags, score, the link to where you captured them, and your follow-up reminder. What happened with each lead, as events and dates. Your company notes, posts your signal watch found, and news about the companies behind your leads. It never receives the words anyone wrote to you, the words of messages on a lead's record, or Sky's reasons for a score.

What it can change, only if you tick Let it make changes: it can move and tag leads, set them to New or Contacted, add tasks and reminders, write draft messages for you to send, keep a line you stated about your company, keep a person it read about, and note a message it sent for you or a reply it saw. Words it hands Sky for those are stored like your own: a person it keeps is read by the same AI model as a capture (§4), and a message it notes is kept on that lead's record. Everything it does is marked with the app's name. It cannot send a message from Sky, record a win or a loss, or delete anything. You choose the most credits it may spend in a day.

Once the app has it. What an app does with what it reads from Sky is governed by that app's own privacy policy (OpenAI's for ChatGPT, Anthropic's for Claude, and so on), not this one.

The dashboard's Connect page lists every app you connected. Stop changes takes its permission to change anything away. Disconnect ends its access at once: its sign-in is revoked and it can no longer reach your account.

3. Permissions the extension requests

4. Who processes your data

We share data only with the service providers that make Sky work, and only for that purpose:

ProviderRoleData they process
Supabase Authentication, database, and hosting. Your email, account, settings, and saved leads.
Google Sign-in with Google, and your calendar if you connect it. At sign-in, Google tells us your email, name and picture. With a calendar connected, Google gives us your events' times, lengths, titles and invited addresses when we ask, as set out in §2.
Fireworks AI AI models that structure your captured text, or a screenshot you paste in, into lead fields. The text or image you capture, at the moment of capture, and the date, title and length of a calendar meeting when Sky drafts a message to somebody you met, and, when Sky reads a grant or tender for fit, the public notice with your profile and company note, and the same for a US raise, a YC company or a watched post Sky reads for fit, and a short line about each lead (name, role, company, location, list, what they need, your summary; never contact details or captured text) when you ask Ask Sky to pick a few people or Strategy for a plan, and with a plan, how your earlier plays went (counts) and the lines you wrote about what you learned. It exists only in memory for the length of the request. It is not written to storage, and it is not used to train models.
Groq Backup AI model. Used only if Fireworks is unavailable, so that a capture still works rather than failing. The same captured text and meeting facts, only on the occasions the backup is used. It is processed to return the result and is not used to train models.
Paddle Payments. Paddle.com Market Ltd is the Merchant of Record for every Sky purchase: they sell the subscription to you, and they handle the payment, invoicing, taxes and refunds. Your name, email, billing address and country, and your payment details. Card numbers go directly to Paddle and never reach Sky's servers; we only ever store their customer and subscription identifiers, plus your plan and renewal date, so we know what you're entitled to.
Vercel Hosting for the Sky website and dashboard. Standard request data such as your IP address and browser user agent, processed to serve the site. Your leads are not stored there.
PostHog Product analytics for the Sky website and dashboard. Not used in the extension. Which pages you viewed and when, plus your country, browser and device type. On the dashboard we switch off PostHog's automatic click-tracking, because the things you click there are your leads' names and companies; those are never sent.

On the dashboard only, and only while you are signed in, we record a fully masked replay of the session so we can see where the product is confusing: your cursor, clicks, scrolling and the layout you saw. Every piece of text is blanked out before it leaves your browser: lead names, companies, emails, notes, anything you type. We see that you clicked a button three times; we cannot see what any of it said. Request and response bodies are not recorded either. Nothing is replayed from the marketing pages, and nothing is replayed when you are signed out.
Google Ads Measures whether our ads work, on the public website pages only. Not used on the dashboard or in the extension. That you arrived from one of our ads, the pages you viewed, and one event when the install page first opens, with Google's standard request data (IP address, browser, a cookie). In the EEA, the UK and Switzerland no advertising cookie is set. Never your account, your leads or anything you capture.
Resend Sends Sky's email to you: the weekly digest, the one welcome note, and, if you watch grants and tenders, an email when one is a great fit. Your email address and the contents of those emails, which for the digest means the leads and tasks of yours it names, and for a great fit the public notice and Sky's sentence about it.
GLEIF, SEC EDGAR, Companies House, Wikidata, Annuaire des Entreprises (France), Brønnøysund Register (Norway) Public company registers and the open knowledge base, queried only when you press Look up on a lead or run Discover, and only if you switched that source on. Off by default. The company name on the lead (Look up), or search terms built from your ideal customer profile (Discover). Never the lead itself, the captured text, or your profile as written.
Grants.gov, Contracts Finder and Find a Tender (UK), TED and the Funding & Tenders portal (EU) Public lists of government grants, calls for bids and awarded contracts, read once a day for your grants and tenders watch, only for the places you ticked. The contact a notice publishes for bidders is kept with that notice, and the company an award notice names as the winner is kept with it too. Your watch’s words (Grants.gov, TED, Funding & Tenders) and categories (TED). When you press Who won before?, the tender’s buyer and category (TED). Nothing for the two UK lists, which are read whole. Never anything about you or your leads.
A company’s own website The address you type on a lead, when you press Read, and the address of a lead’s company when Sky shows its icon. That site sees a request from Sky’s server, identified as Sky. Nothing about you or the lead. For Read, the page’s text then goes to the AI model, as captured text does; for an icon, only the picture comes back, stored under the address alone.

We may also disclose information if required by law. We never sell your data, and we don't share it with advertisers.

Payments

Sky's paid plans are sold through Paddle as Merchant of Record. When you subscribe, your payment details are entered into Paddle's own checkout and are processed by Paddle. Sky never sees or stores your full card details. Paddle handles your billing under its own buyer terms and privacy policy. You can manage your card, view invoices, or cancel at any time from Manage billing in your Sky dashboard, which opens Paddle's secure customer portal. See our Refund Policy for how refunds work.

5. Where your data lives & who can see it

Your leads are scoped to your account using database row-level security: only you, signed in, can read or write your own leads. Nothing is saved until you review and confirm a capture.

6. Data retention

We keep your account and leads until you delete them or ask us to close your account. A lead you delete goes to the trash and stays there until you empty it; there is no automatic purge today. What you type into the find box, Discover, Ask Sky and Shortlist is deleted after 90 days, and the webhook delivery log after 30 days. A live feed token lasts until you rotate or revoke it, a write key until you revoke it. A shared list is readable by anyone holding its link until you revoke it: it carries the names, page links and only the columns you ticked, contact details only if you ticked them, and never what anyone said to you, your scores, statuses or notes. A column you did not tick is not sent at all, to the page or to anyone who adds the list. Sky keeps who added from it and how many, never which rows. A shared list appears on sky.skal.ai/explore only if you tick List it on Explore, and there it shows its title, its line, who it is from, how many people are in it, its column names and how many added it, never the people in it. A public profile is off until you switch it on, and is readable by anyone, search engines included, until you switch it off: it carries the name, line and link you typed, which days of the last year you were active (shaded by how many people you dealt with that day, and never counted past ten), how many people you followed up with, the share of your captures that came from each app, and the titles and sizes of your live shared lists. How many people you captured or reached out to, how many replied and how many you won are each sent only if you tick them. It never carries a person, a company, anything anyone said, a score, a status or a deal value. Sky does not count who views it. A live profile is listed on Explore only if you tick that too, and there it shows your name, handle and line. Tasks, reminders and the rules and routines you write are kept until you delete them; a task goes with its lead. What happened with a lead and what it scored are kept for as long as the lead is, and are deleted with it. There is no age limit on those two on purpose: neither can be reconstructed later, and dropping the old half would leave the newer half describing a stretch of time it cannot account for. That includes the emails and meetings noted on a lead's record, which are kept and deleted with it. Access to a connected calendar is kept until you disconnect. A connected assistant's or agent's access lasts until you disconnect it; which apps you connected and what each may do is kept until you disconnect it, and how many credits each spent in a day until you close your account. Screenshots are never kept at all. You can export your leads to CSV at any time, and you can request deletion of your account and all associated data by emailing hi@skal.ai.

7. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to withdraw consent. To exercise any of these, contact hi@skal.ai and we'll respond within a reasonable time.

8. Children

Sky is not intended for anyone under 16, and we do not knowingly collect data from children.

9. Changes to this policy

If we make material changes, we'll update the date above and, where appropriate, notify you. Continued use of Sky after a change means you accept the updated policy.

10. Contact

Questions, requests, or concerns? Email hi@skal.ai.