Privacy Policy
Last Updated: June 20, 2026
GDPR, CCPA & DPDP Compliant
1. Introduction
Welcome to SkyBrance Tech Private Limited ("Company", "we", "us", "our"). We are committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Services.
By using our Services, you consent to the data practices described in this policy. If you do not agree with this policy, please do not use our Services.
Jurisdiction & Compliance
This Privacy Policy complies with:
- GDPR - General Data Protection Regulation (European Union)
- CCPA/CPRA - California Consumer Privacy Act (United States)
- DPDP Act 2023 - Digital Personal Data Protection Act (India)
Company Registration Details
Registered Corporate Office
Loknath Nagar, B.P Road,
Bagdogra, Darjeeling 734014,
West Bengal, India
Government Registrations
- CIN: U62099WB2025PTC284361
- PAN: ABRCS8817N
- TAN: CALS73275G
- UDYAM: UDYAM-WB-06-0059700
Board of Directors
Contact Operations
2. Information We Collect
Information You Provide Directly
- Account Information: Name, email address, mobile number, profile photo
- Billing Information: Billing address, payment details (processed securely by Razorpay/PayPal)
- Identity Verification: Government-issued ID records may be verified securely for fraud prevention purposes
- Communications: Messages, feedback, support tickets you send to us
Information Collected Automatically
- Device & Browser Data: IP address, browser type, operating system, device type, screen resolution
- Usage Analytics: Page views, session duration, click patterns, feature usage via Google Analytics
- Location Data: Approximate geographic location (country, city) derived from IP address
- Authentication Tokens: Stored locally in browser for session management
SkyShare Link Shortener Data
When end-users click on shortened links created through SkyShare, we collect:
- User-Agent String: Device type, browser, operating system
- IP Geolocation: Processed in real-time for location analytics. We do NOT store full unmasked IP addresses
- Referrer Data: Source of click (social media, search engine, etc.)
This data is used solely for analytics provided to link creators and to improve our Services. We respect end-user privacy.
3. How We Use Your Information
We use the information we collect for the following purposes:
Account Management
Create and maintain your account, verify identity (email/phone OTP), manage subscriptions
Payment Processing
Process transactions securely through Razorpay and PayPal, manage billing and invoices
Communications
Send transactional emails (OTPs, password resets), service updates, marketing communications, security alerts
Analytics & Improvement
Analyze usage patterns via Google Analytics and Firebase Analytics to improve Services, understand user behavior, and develop new features
Security & Compliance
Validate URLs using Google Safe Browsing API, prevent fraud and abuse, comply with legal obligations, enforce Terms of Service
Notifications
Send browser push notifications (via Firebase Cloud Messaging) for important updates, alerts, and personalized content
4. Data Storage & Security
Data Storage Location
Your data is stored securely in:
- Primary Database: MongoDB Atlas (Mumbai, India region) - All primary data resides in India
- File Storage: Cloudflare Storage for profile photos and uploaded files
✓ We do NOT transfer your data internationally beyond necessary third-party services (Google, Firebase).
Security Measures
- Encryption: Passwords hashed, data encrypted at rest and in transit (TLS/SSL)
- Access Controls: Role-based access controls limit employee access to sensitive data structures
- URL Validation: Shortened URLs validated against Google Safe Browsing API before creation
- Backup Systems: Automated secure backups retained for 30 days for disaster recovery
⚠️ Important: While we implement industry-standard security measures, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.
7. Your Privacy Rights
You have the following rights regarding your personal data:
Access & Export
Request a copy of your personal data records in a structured JSON format directly via dashboard panels
Correction & Update
Modify profile definitions, update communication addresses, and adjust credentials through settings configuration grids
Deletion
Submit structural account removal requests. Data runs down an isolation process before permanent erasure loops execute
8. GDPR Compliance (European Union)
For Users in the European Union
If you are located in the EU, you have additional rights under the General Data Protection Regulation (GDPR).
Legal Basis for Processing
- • Consent: Account creation, marketing communications, push configurations
- • Contract Performance: Providing core analytical applications, processing operational transactions
- • Legitimate Interests: System threat prevention, layout enhancements, optimization computations
9. CCPA Rights (California Residents)
California consumers hold explicit protection controls regarding information mappings:
• Right to Know: Request transparent index readouts of categories collected over operations parameters.
• Right to Delete: Clear structural information stores subject to regulatory compliance exceptions.
• Non-Discrimination: Platform structural conditions stand uniform regardless of verification executions.
10. DPDP Act Compliance (India)
We maintain full operational compliance bounds as specified under the Digital Personal Data Protection Act, 2023:
• Data Principal Rights: Seek records summary index inputs, apply updating inputs, or invoke erasure tracks.
• Data Fiduciary Responsibilities: SkyBrance operates structured validation networks ensuring clean platform environments.
11. Data Retention Policy
Information retention depends upon current lifecycle states:
• Active Storage: Operational structures remain online while profiles show continuous login records.
• Inactive Purges: Accounts showing no authentication metrics for 5 consecutive years trigger automated notification loops before deletion steps run.
12. Children's Privacy
Platform structures are built strictly for audiences above 13 years of age. If a child below the verification limit inputs metrics, support lines drop records within 48 hours upon direct notification receipt.
13. Changes to This Privacy Policy
We adjust documentation criteria periodically. Functional policy updates reflect dynamically inside user workspace headers.