Data Protection and Privacy Notice

This Privacy Policy explains how Skylabs Technology LLC ("we", "us", or "our") collects, uses, discloses, and protects your personal data when you use our website, mobile application, and services (collectively, the "Services").

We are committed to protecting your privacy and ensuring that your personal data is handled in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

By using our Services, you acknowledge that you have read and understood this Privacy Policy.

2. Data Controller

Skylabs Technology LLC acts as the data controller for the personal data collected through our Services. If you have any questions about this Privacy Policy or our data practices, please contact us at [email protected].

3. Personal Data We Collect

We collect the following categories of personal data:

3.1 Information You Provide:
- Account registration data: name, email address, phone number
- Identity verification data: government-issued ID, proof of address, selfie photos
- Financial information: bank account details, transaction history
- Communications: messages, support requests, feedback

3.2 Information Collected Automatically:
- Device information: IP address, device type, operating system, browser type
- Usage data: pages visited, features used, time spent on the platform
- Location data: approximate location based on IP address
- Cookies and similar technologies: as described in our Cookie Policy

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

4.1 Contract Performance: Processing necessary to provide our Services and fulfill our contractual obligations to you.

4.2 Legal Obligations: Processing required to comply with anti-money laundering (AML), know-your-customer (KYC), and other regulatory requirements.

4.3 Legitimate Interests: Processing necessary for our legitimate business interests, such as fraud prevention, security, and service improvement.

4.4 Consent: Processing based on your explicit consent, which you may withdraw at any time.

5. How We Use Your Data

We use your personal data for the following purposes:

- To create and manage your account
- To verify your identity and comply with KYC/AML requirements
- To process transactions and provide our Services
- To communicate with you about your account and our Services
- To detect and prevent fraud, unauthorized access, and other illegal activities
- To improve and personalize our Services
- To comply with legal and regulatory obligations
- To send marketing communications (with your consent)

6. Data Sharing and Disclosure

We may share your personal data with:

6.1 Service Providers: Third-party vendors who assist us in providing our Services, such as payment processors, identity verification services, and cloud hosting providers.

6.2 Regulatory Authorities: Government agencies, law enforcement, and regulatory bodies when required by law or to protect our legal rights.

6.3 Business Transfers: In connection with a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity.

We do not sell your personal data to third parties.

7. International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

8. Data Retention

We retain your personal data for as long as necessary to:

- Provide our Services and maintain your account
- Comply with legal and regulatory requirements
- Resolve disputes and enforce our agreements
- Protect against fraud and abuse

When your data is no longer needed, we will securely delete or anonymize it.

9. Your Rights Under GDPR

You have the following rights regarding your personal data:

9.1 Right of Access: You can request a copy of the personal data we hold about you.

9.2 Right to Rectification: You can request correction of inaccurate or incomplete data.

9.3 Right to Erasure: You can request deletion of your personal data in certain circumstances.

9.4 Right to Restrict Processing: You can request that we limit the processing of your data.

9.5 Right to Data Portability: You can request your data in a structured, machine-readable format.

9.6 Right to Object: You can object to processing based on legitimate interests or for direct marketing purposes.

9.7 Right to Withdraw Consent: Where processing is based on consent, you can withdraw it at any time.

To exercise these rights, please contact us at [email protected].

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

- Encryption of data in transit and at rest
- Regular security assessments and penetration testing
- Access controls and authentication mechanisms
- Employee training on data protection
- Incident response procedures

11. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience, analyze usage patterns, and deliver personalized content. You can manage your cookie preferences through your browser settings or our cookie consent tool.

12. Children's Privacy

Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have collected data from a minor, please contact us immediately.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on our website or sending you an email. Your continued use of our Services after such changes constitutes acceptance of the updated policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: [email protected]

You also have the right to lodge a complaint with a supervisory authority if you believe your data protection rights have been violated.

15. Effective Date

This Privacy Policy is effective as of January 1, 2026.