Privacy Policy
Last updated: 9/11/2025
This Privacy Policy explains how SkyntCo LLC (“we”, “our”, “us”) collects, uses, and protects information in connection with EmailResponder and our related websites and services (the “Service”). See Data Protection & Security below for details on encryption, retention, and access controls.
What we collect
- Account information (e.g., name, email) from our authentication provider when you sign in.
- Email data you authorize when connecting a provider (e.g., Google): message metadata (sender, recipient, subject, timestamps) and message content only as needed to generate a draft reply you control.
- Billing information processed by Stripe. We do not store full card numbers on our servers.
- Telemetry and logs (device/browser info, performance data, event logs) to operate, secure, and improve the Service.
How we use it
- To provide core functionality (e.g., drafting email replies).
- To maintain security, prevent abuse, and troubleshoot issues.
- To communicate about your account, billing, and product updates.
- To improve features and quality of the Service.
Sharing
We do not sell personal data. We share data only with trusted service providers who process it on our behalf under contract (e.g., secure cloud hosting, Stripe for billing) and as required by law. We remain responsible for their handling of your data consistent with this Policy.
Data Protection & Security
- Encryption in transit & at rest: All traffic uses HTTPS/TLS. Any stored data is encrypted at rest.
- Least-privilege access: Production access is role-based and limited to authorized personnel for support or security purposes.
- Segregation & secrets management: OAuth tokens, keys, and application secrets are stored separately from application data and never committed to source code.
- Monitoring & logging: We log authentication, access, and configuration changes to detect misuse.
- Secure development: Changes are reviewed and deployed via controlled CI/CD; dependencies are monitored for vulnerabilities.
- Backups & resilience: Encrypted backups and redundancy support continuity.
Data minimization & retention
- We process email content ephemerally to generate drafts and avoid persisting message bodies unless strictly necessary for a feature you choose (e.g., saved templates you create).
- OAuth tokens are stored securely and can be revoked by you at any time in your account with the email provider (e.g., Google Account → Security → Third-party access).
- Diagnostic logs exclude message content wherever possible. Where data must be stored, we retain it only as long as needed to provide the Service or comply with law, then delete it securely.
Your choices & rights
- Disconnect provider access at any time (e.g., in your Google Account security settings).
- Request access, correction, or deletion by emailing support@skyntco.com. We will honor requests except where retention is required by law or to protect the Service.
- You can also contact privacy@skyntco.com for privacy-specific questions.
Incident response
We maintain an incident response process. If we become aware of unauthorized access affecting your data, we will investigate, mitigate, and notify affected users and regulators as required.
Compliance with Google API Services
Our use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We only access, use, store, and share Google user data to provide or improve user-facing features of EmailResponder, and we never transfer Google user data to third parties except as required to provide the Service or comply with the law.
Children’s data
The Service is not directed to children under 13 (or the age defined by your local law). We do not knowingly collect personal data from children.
Changes to this policy
We may update this Privacy Policy from time to time. The “Last updated” date above reflects the most recent changes. Material updates will be notified through the Service or by email when appropriate.
Contact
Questions? Email support@skyntco.com.
This document is provided for transparency and does not constitute legal advice. Please review with your counsel.