Privacy Policy

1. Introduction

SkyGrow (“we”, “us”, or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your information when you use our platform at skygrow.app (the “Service”). By using the Service, you agree to the practices described in this policy.

2. Information We Collect

Account Information

When you create an account, we collect:

• Name
• Email address
• Password (stored as a salted hash — we never store your password in plain text)

Bluesky Account Data

When you connect your Bluesky account, we collect and store:

• Your Bluesky handle and display name
• Your Bluesky app password (encrypted at rest)
• Profile metrics such as follower count, following count, and post count
• Post content and engagement data for posts discovered through the Service

Usage Data

We automatically collect information about how you use the Service, including:

• Discovery keywords and search activity
• Posts you view, save, dismiss, or reply to through the Service
• AI credit usage and content generation history
• Feature usage and interaction patterns

Payment Information

Payment details (credit card numbers, billing addresses) are processed and stored by Stripe, our payment processor. We do not store your full payment information on our servers. We receive and store your subscription status, plan type, and billing history from Stripe.

3. How We Use Your Information

We use the information we collect to:

• Provide and operate the Service, including conversation discovery, analytics, and AI features
• Authenticate your identity and manage your account
• Process payments and manage subscriptions
• Generate AI-powered reply suggestions and keyword recommendations using your profile context
• Track and display your Bluesky growth analytics
• Send transactional emails (account verification, password reset, weekly activity summaries)
• Improve and develop new features for the Service
• Detect and prevent fraud, abuse, and violations of our Terms of Service

4. Third-Party Services

We share your information with the following third-party services, only as necessary to operate the Service:

5. Data Storage and Security

We take reasonable measures to protect your information, including:

• Encryption of sensitive data at rest (including Bluesky app passwords)
• Secure password hashing using industry-standard algorithms
• HTTPS encryption for all data in transit
• JWT-based authentication with secure session management
• Rate limiting to prevent abuse

While we implement commercially reasonable security practices, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security of your data.

6. Data Retention

We retain your information as follows:

• Account data: Retained for as long as your account is active, plus a reasonable period after account closure for legal and operational purposes
• Analytics snapshots: Historical profile metrics are retained to provide trend data for the duration of your account
• Discovered posts: Post data from discovery feeds is retained while your account is active
• AI-generated content: Reply suggestions and generated content are stored for your reference while your account is active
• Payment records: Billing history is retained as required by applicable tax and financial regulations

When you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate personal data
• Deletion: Request deletion of your personal data and account
• Export: Request a portable copy of your data
• Objection: Object to certain processing of your personal data
• Disconnect: Disconnect your Bluesky account at any time through account settings, which removes your stored app password

To exercise any of these rights, contact us at support@skygrow.app. We will respond to requests within 30 days.

8. Cookies and Local Storage

The Service uses essential cookies and browser local storage for authentication (session tokens) and user preferences (theme settings). We do not use third-party tracking cookies or advertising cookies. No data is shared with advertising networks.

9. Children's Privacy

The Service is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have collected data from a child under 16, we will take steps to delete that information promptly.

10. International Data Transfers

Your data may be processed and stored in the United States or other countries where our service providers operate. By using the Service, you consent to the transfer of your data to these locations. We ensure appropriate safeguards are in place for any international data transfers.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service. The “Last updated” date at the top of this page indicates when the policy was last revised. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at support@skygrow.app.