S
SKYLReserve spot

Privacy Policy

SKYL is a workspace where fashion brands coordinate manufacturers, designers, agencies, content creators and internal teams. This policy explains what we collect, why, how we use it, who we share it with and the rights every user has.

Last updated: 4 July 2026

1. Who we are

SKYL ("SKYL", "we", "us", "our") is operated from the Kingdom of Saudi Arabia under commercial registration CR-7054427153. SKYL provides a software-as-a-service platform for fashion brands and their operational partners. For questions about this policy or any personal information we hold, contact contact@skyl.solutions.

2. Scope of this policy

This policy applies to the SKYL marketing website (skyl.live), the SKYL platform, and any workspace, invitation, task, message, notification, file, document, image or integration created inside SKYL. It applies to brands, manufacturers, agencies, designers, content creators, founders, employees, freelancers and any other individual invited into a SKYL workspace.

3. The roles: controller and processor

SKYL acts as a data controller for account information, billing data and marketing communications directed at our own customers. SKYL acts as a data processor for the operational content created inside a workspace by a brand or its invited partners — tasks, messages, files, documents, images, approvals and similar records. The workspace owner is the controller of that content and decides who to invite, what to share and what to delete.

4. Information we collect

4.1 Account information

Name, email address, phone number, brand or company name, role, country, profile picture and password credentials (stored as salted hashes, never in plain text). If you sign in with Google or Apple, we receive the basic profile information those providers return (name, email, profile image, verified email flag). We do not receive your Google or Apple password.

4.2 Workspace content

Anything you or your invited partners create inside SKYL: workspace names, brand assets, manufacturer and designer profiles, tasks, task descriptions, messages, comments, notifications, files, documents, tech packs, product images, reference images, samples, approvals, invitations and audit history.

4.3 Partner and invitation data

When a brand invites a manufacturer, agency, designer or creator, we store the invitee's email and any information the inviter chose to include. Invitees who accept become users with their own account and their own privacy rights. Invitees who do not accept remain a limited invitation record and are deleted on request from the inviter or invitee.

4.4 Payment and billing information

Subscription plan, billing cycle, VAT identifier where applicable, billing address, invoice history and the last four digits of the payment instrument. Full card numbers are handled exclusively by our payment processors (see Section 9) and are never stored on SKYL servers.

4.5 Device and usage data

IP address, browser and device type, operating system, language, referrer, pages viewed, features used, timestamps, error logs and diagnostic events. This data is used to run, secure and improve the service.

4.6 Cookies and analytics

We use a small number of cookies and analytics tools, described in the Cookie Policy. This currently includes Google Analytics and Microsoft Clarity for aggregate usage insights.

4.7 Communications

Emails, support tickets, chat conversations, feedback and any content you send us directly.

5. Legal bases we rely on

Where GDPR or equivalent frameworks apply, we process personal data on these bases:

  • Contract. To provide the SKYL service you or your workspace subscribed to.
  • Legitimate interest. To secure the service, prevent abuse, debug issues and improve features.
  • Consent. For non-essential cookies, marketing emails and any optional AI features you enable.
  • Legal obligation. Tax, accounting, anti-fraud and lawful requests from competent authorities.

6. How we use information

  • Provide, operate and maintain SKYL workspaces, tasks, messages, notifications and files.
  • Authenticate users, protect accounts and detect fraudulent or abusive activity.
  • Process subscriptions, invoices and payment attempts, including retries on failure.
  • Send operational emails (invitations, password resets, billing receipts, security alerts).
  • Provide customer support and respond to inquiries.
  • Improve the product through aggregated analytics and error monitoring.
  • Comply with applicable laws, tax obligations and lawful requests.

7. AI features

SKYL may offer AI-assisted features (drafting messages, summarizing threads, generating task suggestions, categorizing files). Where AI is used, we clearly indicate it in the interface. Content processed by AI features is used only to produce the requested output and, where required, to operate the underlying model provider. We do not sell workspace content to any AI vendor and we do not train third-party foundation models on your workspace data. If a workspace admin disables AI features, no AI processing takes place for that workspace.

8. Sharing inside a workspace

A SKYL workspace is a collaboration surface. When a workspace owner invites a manufacturer, agency, designer or creator, that partner will see the workspace content the owner grants them access to — including tasks assigned to them, messages in shared threads, files shared with them, and notifications about actions they participate in. SKYL enforces the access controls set by the workspace owner but is not responsible for the internal sharing decisions of a workspace.

9. Third-party service providers

We use a small, deliberately chosen set of providers to run SKYL:

  • Cloud hosting and database. Managed cloud infrastructure providers that host the application, database and file storage in secure, encrypted environments.
  • Authentication. Google Sign-In and Apple Sign-In for federated login, when a user chooses them.
  • Payment processing. PCI-DSS certified payment providers that process card, Mada and Apple Pay transactions.
  • Email delivery. Transactional email providers used to send invitations, receipts and account notifications.
  • Analytics. Google Analytics and Microsoft Clarity for aggregated usage analytics.
  • Support and monitoring. Error monitoring and support tooling used to keep the service reliable.

Each provider is bound by contractual confidentiality and data protection commitments and only receives what is strictly required to perform its function.

10. International transfers

SKYL operates from Saudi Arabia and serves brands, manufacturers and partners internationally. Where personal data is transferred across borders, we rely on the transfer mechanisms recognised by the applicable law — including the safeguards contemplated by the Saudi Personal Data Protection Law (PDPL), Standard Contractual Clauses under GDPR for EU/UK data, and comparable safeguards for other jurisdictions.

11. Data retention

We keep account and workspace information for as long as the workspace is active. After a workspace is closed, we retain data for a limited period to allow reactivation, respond to disputes, comply with tax and legal obligations, and complete secure deletion. Typical retention windows:

  • Active account and workspace data: for the life of the subscription.
  • Closed workspaces: up to 12 months, then permanently deleted or anonymised.
  • Invoices and billing records: for the period required by Saudi tax law (currently 10 years).
  • Support and communication logs: up to 24 months.
  • Security and audit logs: up to 24 months.

12. Your rights

Depending on where you are located, you have rights under Saudi PDPL, EU/UK GDPR, and similar laws (including future CCPA-style rights for California residents once applicable). These may include the right to:

  • Access the personal information we hold about you.
  • Correct inaccurate information.
  • Delete your account and associated personal information.
  • Restrict or object to certain processing.
  • Withdraw consent where processing is based on consent.
  • Export your personal information in a portable format.
  • Lodge a complaint with your local data protection authority.

To exercise any of these rights, contact contact@skyl.solutions. We may need to verify your identity before acting.

13. Security

SKYL uses TLS 1.2+ for data in transit, industry-standard encryption at rest, hashed credentials, role-based access controls, audit logging and continuous monitoring. Detailed security practices are described in the Security Policy.

14. Children's privacy

SKYL is a professional workspace and is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected such information, we will delete it promptly.

15. Email communications

Operational emails (invitations, receipts, password resets, security alerts) are part of the service and cannot be individually opted out of while a workspace is active. Marketing emails always include an unsubscribe link.

16. Workspace ownership and partner data

The workspace owner controls the workspace. When a partner (manufacturer, agency, designer, creator) contributes content into the workspace, that content becomes part of the workspace record and is retained under the workspace owner's decisions, subject to the partner's individual account rights over their own personal data.

17. Changes to this policy

We may update this policy to reflect changes in the service, the law or our practices. Material changes are announced through the platform or by email. The "Last updated" date above always reflects the current version.

18. Contact

Email: contact@skyl.solutions
Phone: +966 55 731 3542
Kingdom of Saudi Arabia — CR-7054427153