Privacy Policy

Last updated: 2 October 2026

1. Who processes the data

Two kinds of data live in SkydalProjects:

• Workspace data (projects, tasks, comments, files, hours and the data of each workspace's users): the controller is the customer organisation that subscribes to the workspace. SkydalSolutions processes it as a processor, only to provide the service and following the customer's instructions.
• Platform data (contact details of customers and of the people who administer the platform): the controller is SkydalSolutions.

2. What data we process

• Account data: name, email address, language and password (stored only in encrypted, irreversible form).
• The content users enter into their workspace.
• Technical data needed for security: sign-in records, failed attempts and the change audit log.

3. What we use it for

To provide the service (giving access, saving work, sending the notifications each user has enabled and invitation or password reset emails), to keep it secure and to answer support requests. We do not sell data, use it for advertising or share it with third parties for their own purposes.

4. Legal basis

Performance of the contract with the customer and, for security measures and logs, our legitimate interest in protecting the service and its users.

5. Cookies

We only use one technical session cookie, which is essential to keep you signed in and to protect forms. We do not use analytics, advertising or third-party cookies.

6. Where data is stored and who else is involved

Each workspace has its own database, separate from other customers. To provide the service we rely on hosting and email delivery providers, who only access data as far as their role requires and under the appropriate safeguards.

7. Retention

Workspace data is kept while the customer uses the service. After the workspace is closed it is permanently deleted; backups are deleted when their retention cycle ends.

8. Security

We apply technical and organisational measures to protect data: each workspace isolated in its own database, encrypted connections, encrypted passwords, sign-in attempt limits, an audit log and regular backups.

9. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability. If your data is part of a workspace, please contact the organisation that manages it first; we will help it handle your request. For platform data, contact us.

10. Changes to this policy

We will publish any changes on this page, with their update date.