Privacy Policy

Skybase ("Skybase," "we," "us," or "our") is a company knowledge platform — a shared workspace and AI agent that helps teams capture, organize, and find institutional knowledge. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have.

By using Skybase, you agree to this Privacy Policy. If you do not agree, please do not use the Service. Capitalized terms not defined here have the meanings in our Terms of Service.

We collect information in the following categories:

• Account information. Name, email address, profile image, and authentication identifiers associated with your account (including data provided through our identity provider).
• Workspace and company data. Content you create or store in Skybase (pages, notes, titles, structure, comments, skills, settings) and metadata about workspaces, members, and roles.
• Integration data. Content and metadata ingested when you connect third-party services such as Slack, Notion, Google Drive, GitHub, Linear, or custom MCP servers. The scope depends on the permissions you grant and the data those services expose.
• Pasted and uploaded content. Text, files, links, and other materials you paste, upload, or attach while using the Service (including chat and agent inputs).
• Chat and agent interaction logs. Messages you send to the agent, agent responses, tool/skill invocations, context references (e.g. mentioned pages or links), and related logs needed to operate the agent.
• Usage data. How you interact with the Service (feature use, pages viewed, performance metrics, device/browser type, and similar telemetry).
• Billing information. Subscription plan, workspace billing status, and payment-related identifiers. Full payment card details are processed by our payment processor and are not stored by Skybase in full.
• Support communications. Information you provide when you contact us for support or questions.

• Direct input. When you create an account, edit pages, paste content, upload files, chat with the agent, or contact us.
• OAuth and integrations. When you authorize Skybase to connect to third-party apps (Slack, Notion, Drive, GitHub, Linear, etc.) or configure MCP endpoints.
• Automatically. Through cookies, local storage, logs, and analytics tools as you use the product (including authentication and session management).
• From your organization. Workspace admins may invite you, assign roles, or connect integrations that process data on behalf of the workspace.

We use personal and workspace data to:

• Provide, maintain, and secure the Service (including the company knowledge base and workspace features).
• Power agent answers, search, summarization, and related AI features using your workspace content and connected sources as context.
• Operate integrations, syncs, and tools you enable.
• Process billing and enforce plan limits.
• Provide customer support and respond to inquiries.
• Monitor reliability, debug issues, and improve product quality and performance.
• Communicate product updates and security notices. You can opt out of non-essential marketing if we send any.

We rely on outside services to run Skybase. They only process data as needed to provide their part of the Service. Examples include:

• Hosting: Vercel (application hosting and edge delivery).
• Database and backend: Convex.
• Authentication: Clerk.
• AI / LLM providers: model providers such as Anthropic, OpenAI, xAI, and others we may enable for agent features. Relevant prompts, context, and outputs may be sent to these providers to generate responses.
• Analytics: tools we may use to understand usage and reliability.
• Payment processors: providers that handle subscription billing on our behalf.
• Integration providers: Slack, Notion, Google, GitHub, Linear, and any MCP or third-party services you choose to connect (data is exchanged according to your connection settings and their policies).

We do not sell your personal information.

We may share data in these situations:

• With the service providers above, solely to operate the Service.
• With AI model providers. When you use agent or AI features, content you submit (including chat messages, selected workspace pages, and integration-sourced context included in a request) may be transmitted to our LLM providers to generate outputs. Workspace admins should assume that agent context may leave our systems to reach the selected model provider.
• Within your organization. Workspace members and admins can access content and settings according to roles and permissions you configure.
• With your direction. For example when you share a public page link or connect an integration.
• When required. If we are legally compelled to disclose information, or if we reasonably believe disclosure is needed to protect the rights, safety, or security of Skybase or our users.

• Active accounts. We retain account, workspace, page, chat, and integration data for as long as your account or workspace remains active and as needed to provide the Service.
• Account or workspace deletion. When you delete your account, or when a workspace is deleted by an authorized admin, we will delete associated content within a reasonable period (typically within 30 days), except where we must keep information for billing disputes or backup recovery. Residual copies in backups may persist for a limited additional period before automatic purge.
• Logs. Operational logs may be retained for a period depending on security and product needs.
• After cancellation. If a subscription ends but the workspace is not deleted, we retain data until the workspace or account is deleted, subject to our Terms of Service.

We take reasonable steps to protect your data, including encryption in transit (TLS) and access controls for our systems. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

Skybase is a business productivity service and is not intended for children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us personal data, contact jon.kushta@gmail.com and we will take steps to delete it.

We use cookies and similar technologies for:

• Essential operations — authentication, session management, security, and load balancing.
• Preferences — remembering settings such as theme or UI state.
• Analytics — understanding product usage and performance (where enabled).

You can control cookies through your browser settings. Disabling essential cookies may prevent the Service from functioning correctly.

We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the effective date. Continued use of the Service after the effective date constitutes acceptance of the updated Policy.

For privacy questions or to request deletion of your data, email us at jon.kushta@gmail.com.