Privacy Policy | Skygnosis

Who we are

Skygnosis is an AI engineering studio operating from India. When you visit skygnosis.com or engage us on a project, we collect and process some personal data. This document explains what we collect, why, how long we keep it, and your rights regarding it.

What we collect

When you visit the site

IP address, user-agent string, country (auto-detected via Vercel)
Pages visited, referrer URL, time on page (Vercel Web Analytics — anonymous, no cookies)
UTM parameters from inbound URLs (persisted in your browser’s localStorage so source attribution works across multi-step flows)

When you submit the contact form

Name, email address, message body
Source attribution: page submitted from, UTM source, country, device type

When you subscribe to the newsletter

Email address, signup source page

When you book a call via Cal.com

Name, email, scheduled time and timezone, optional booking notes
The booking and confirmation flow runs through Cal.com directly — see Cal.com’s privacy policy

Cookies and similar technologies

We use minimal cookies and similar storage:

Consent storage — local browser storage to remember your cookie preference. No tracking.
Vercel Web Analytics — no third-party cookies; uses on-device counters and aggregated, anonymous data.
Cloudflare Turnstile — privacy-preserving bot detection on the contact form. Cloudflare may set short-lived cookies for challenge state.

We do not use Google Analytics, advertising pixels, retargeting trackers, or any third-party marketing cookies.

Subprocessors

We use the following third-party services to operate Skygnosis. Each is an independent Data Processor under GDPR Art. 28; each has its own privacy commitments.

Service	Purpose	Region
Vercel	Web hosting and compute	Global (multi-region; EU on request)
Supabase	Database (Postgres)	Configurable per engagement; EU available on request
Resend	Outbound transactional email	US
Cal.com	Booking widget on /schedule	EU
Cloudflare Turnstile	Anti-spam on contact form	Global edge
Telegram Bot API	Internal lead alerts to founder (no client data exposed)	Global

For HIPAA-bound or strict-residency engagements, we re-architect on dedicated infrastructure as part of the engagement contract.

How long we keep your data

Lead data (contact form, newsletter, bookings): 24 months from last interaction, then deleted.
Email logs in Resend: 30 days (Resend default retention).
Analytics data: anonymous aggregates only; no personal data retained.
Active client engagement data: retained as defined in the engagement SOW + DPA; deleted within 30 days of engagement end with a deletion certificate available on request.

Your rights

If you are in the European Union (GDPR), United Kingdom (UK GDPR), India (DPDP Act 2023), California (CCPA), or any jurisdiction granting similar protections, you may request:

Access to the personal data we hold about you
Correction of inaccurate data
Deletion (“right to be forgotten”)
Portability — machine-readable export
Objection to specific processing
Withdrawal of consent (for newsletter, click unsubscribe in any email; for everything else, write to us)

Email info@skygnosis.com with your request. We respond within 30 days.

International data transfers

We are based in India and use some US-based subprocessors (Vercel, Resend). International transfers are necessary for service operation. Where applicable, transfers are protected via Standard Contractual Clauses (SCCs) and the EU–US Data Privacy Framework. For engagements requiring strict EU residency, we configure Supabase in an EU region.

Children

We do not knowingly collect data from anyone under 18. If you are under 18, please do not submit personal information through the site.

Changes to this policy

When we change this policy materially, we update the “Last updated” date at the top and, for newsletter subscribers, mention the change in the next newsletter.

Contact

For privacy questions, Data Subject Access Requests, or DPO inquiries:
Skygnosis
Email: info@skygnosis.com