Privacy Policy

1. Information We Collect

We collect information you provide directly to us, information created through your use of Skkrum, and limited technical information needed to operate, secure, improve, and measure the Services.

Account and profile information, including name, email address, mobile number, company name, country, profile photograph, and account settings.

Collaboration content, including private messages, group and project conversations, tasks, project information, files, attachments, notes, and other content you choose to create or upload.

Workspace and relationship information, including group membership, project membership, invitations, roles, permissions, and account ownership information.

Payment and subscription information. Payments may be processed through Stripe or PayPal. We do not need to store full payment-card credentials when they are handled by those payment processors.

Technical and usage information, such as IP address, device and operating-system information, application version, log-in and security events, diagnostic data, feature usage, and similar service telemetry.

Analytics information from Google Analytics on our website and, where implemented, comparable analytics needed to understand service usage.

Support communications and information you provide when you contact us.

2. How We Use Information

Provide, authenticate, operate, maintain, and secure Skkrum.

Deliver messaging, groups, projects, tasks, file sharing, notifications, collaboration, and account administration.

Process subscriptions, payments, invoices, and account entitlements.

Prevent fraud, abuse, unauthorized access, security incidents, and violations of our Terms or Acceptable Use Policy.

Provide customer support and troubleshoot technical problems.

Improve product performance, reliability, usability, and features.

Send service, security, billing, account, and other operational communications.

Comply with applicable law, enforce agreements, protect rights and safety, and respond to valid legal process.

Provide AI-enabled functions when you deliberately invoke them, as described below.

3. Private and Group Communications

Skkrum does not provide workspace owners, company administrators, project owners, group owners, or other users with a general ability to read another user's private one-to-one messages. Private messages are intended to be visible to the participants in that conversation. Group and project conversations are available to authorized members of the relevant group or project.

Skkrum uses server-side processing and is not end-to-end encrypted. This means Hubroot's systems technically process and store communications in order to provide the Services. Hubroot restricts internal access to user content and may permit access by authorized personnel only when reasonably necessary for service operation, security, abuse prevention, technical support, compliance with law, or protection of Hubroot, users, or others. Access should be subject to appropriate technical and organizational controls.

4. Security and Encryption

Skkrum is designed to protect data in transit using encrypted network connections and to protect stored service data using encryption at rest, subject to the technical implementation of the hosting environment. We also use access controls, authentication safeguards, logging, backups, and other reasonable administrative, technical, and organizational measures appropriate to the nature of the Services.

No electronic system is completely secure. Users are responsible for protecting their credentials, devices, and access to their Skkrum accounts and should notify us promptly of suspected unauthorized access.

5. AI Features

Skkrum may offer AI-assisted features such as rewriting text, generating notes or summaries, or an AI chatbot. AI processing will be activated through a user action or feature interaction. When you use an AI feature, the content needed to fulfill your request may be transmitted to an AI service provider acting as a service provider or processor for that functionality.

We will identify material AI providers in our subprocessor disclosures when those features are launched. Users should not submit information to an AI feature unless they are authorized to do so.

6. Payments

Stripe and PayPal may process payment and billing information for Skkrum subscriptions. Their processing of information is governed by their respective privacy terms. Hubroot receives information needed to confirm payment, manage subscriptions, prevent fraud, and maintain appropriate financial and transaction records.

7. Analytics

We use Google Analytics on our website to understand visits and usage. Depending on your location and applicable law, we may provide consent controls for non-essential analytics technologies. We do not intend to sell personal information. If our advertising or analytics practices materially change, we will update this Policy and provide legally required choices.

8. Service Providers and Disclosures

We may disclose information to service providers that help us operate Skkrum, including cloud hosting and infrastructure providers, payment processors, analytics providers, communications providers, security and support vendors, and future AI providers. We require service providers to handle information for authorized purposes and subject to appropriate contractual and security protections.

We may also disclose information when reasonably necessary to comply with applicable law or valid legal process; protect the rights, property, safety, or security of Hubroot, Skkrum, our users, or others; investigate fraud or abuse; or complete a merger, acquisition, financing, reorganization, or sale of assets subject to appropriate protections.

9. Hosting and International Data Transfers

Skkrum may use established cloud and infrastructure providers, including Google Cloud, DigitalOcean, Cloudways, or replacement providers. The specific infrastructure may change as the Service develops. Personal information may therefore be processed in countries other than the country in which you live.

Where applicable law restricts international transfers, Hubroot will use legally recognized transfer mechanisms, contractual safeguards, consent where appropriate, or other permitted methods. We may introduce regional hosting or data-location options as the Service grows.

10. Retention and Deletion

We retain account information and collaboration content for as long as reasonably necessary to provide the Services, maintain the relevant account or workspace, fulfill the purposes described in this Policy, and comply with legal obligations. Users may delete content where the product provides that functionality, and organizations may manage their workspaces in accordance with their permissions and subscription.

If you request deletion of your Skkrum account, we will target deletion or de-identification of personal information associated with the account from active systems within 30 days after completing reasonable verification, except where information must or may be retained for legal, tax, billing, fraud prevention, security, dispute-resolution, backup-cycle, or other legitimate purposes. Residual copies may remain in protected backups until overwritten in the ordinary backup cycle.

11. Your Privacy Rights

Depending on where you live and the law that applies, you may have rights to access or obtain information about your personal data, correct inaccurate data, request deletion, obtain a portable copy, object to or restrict certain processing, withdraw consent where processing relies on consent, opt out of certain targeted advertising or sale/sharing activities where applicable, and appeal or complain to a privacy regulator.

To exercise a privacy right, contact us using the details below. We may verify your identity and authority before acting on a request. We will respond within the period required by applicable law.

12. Business Customers and Workspaces

Where an organization uses Skkrum to manage its workforce, clients, projects, or other business activities, that organization may determine purposes and means of processing certain personal data, while Hubroot may process that data to provide the contracted Services. The applicable Data Processing Agreement governs processor/service-provider obligations where required.

13. Children

Skkrum is intended only for persons aged 18 or older. We do not knowingly offer Skkrum to children. If we learn that a person under 18 has created an account in violation of this requirement, we may suspend or delete the account and associated personal information, subject to applicable law.

14. Data Breaches and Security Incidents

Hubroot maintains an incident-response process for investigating suspected unauthorized access, loss, disclosure, alteration, or destruction of personal information. Where a security incident constitutes a legally reportable personal-data breach, we will notify affected customers, individuals, regulators, or other authorities as required by applicable law.

15. Changes to This Policy

We may update this Privacy Policy to reflect changes in the Services, law, technology, or our data practices. We will post the updated version with a revised effective date and provide additional notice when required by law.

16. Regional Privacy Terms

Additional rights or obligations may apply under the India, Africa, and United States regional provisions included in this legal package. If a regional provision conflicts with this Privacy Policy, the regional provision controls to the extent required by applicable law.

17. Contact

Hubroot Solutions LLC Skkrum Privacy Team 16192 Coastal Hwy Lewes, DE 19958 United States Privacy requests may be submitted through the Skkrum support/contact channel published on skkrum.com or through the in-product support function.