Privacy Policy

Introduction

At Skyshots, we value your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use our platform through our website today, and through our mobile application once it launches. Some features described below — including in-app booking and payments — apply when those capabilities go live.

By using Skyshots, you agree to the collection and use of information in accordance with this policy. We will not use or share your personal information except as described here.

Information We Collect

Personal Information

When you register for an account, we collect information such as your name, email address, phone number, and payment details. For venue owners, we also collect information about your venue, including location, capacity, and amenities.

Usage Information

We collect information about how you interact with our platform, including the venues you view, bookings you make, and features you use. This helps us improve our services and provide personalized recommendations.

Device Information

We collect information about your device, including browser type, device category (phone, tablet or desktop), operating system and page performance timings. This helps us optimise our platform for different devices and troubleshoot issues.

Location and Network

When you visit, our edge network resolves an approximate location from your connection. We record and store:

• City, state or region, and country — so we know which cities to launch in next. This is the level of detail we keep; we do not collect or store your precise location, GPS coordinates, street address or postal code.
• Your network operator (for example, your mobile carrier or broadband provider), used to diagnose performance problems affecting particular networks.
• Your time zone, so we can report when our site is busy in local time.
• A shortened form of your IP address only. The last part of the address is removed at our edge network before anything is written down — we keep the network block your connection belongs to, not the address that identifies your connection. The full address is never stored in our database or our logs.

Analytics and Returning Visits

Our analytics are first-party: we measure activity on our own site and do not use advertising cookies, cross-site trackers, or any technique that identifies you across other websites. We do not build a device fingerprint.

To tell first-time visits from repeat ones, we store a single yes/no marker in your own browser. It contains no identifier, is readable only by our site, and clearing your browser data removes it. We also assign each browsing session a random identifier that is discarded when you close the tab, so that the pages viewed in one visit can be counted as one visit.

Automated traffic — search engine crawlers, link previewers and uptime monitors — is identified and counted separately so it does not distort our figures.

How Long We Keep Your Information

We keep personal data only as long as it serves the purpose it was collected for. Our retention periods are:

• Detailed visit records (individual page views, with the location, network and device details described above): 65 days, after which they are permanently deleted automatically.
• Search terms entered on our site: 12 months, so we can see which venues people look for and cannot find.
• Aggregate statistics (daily totals, and counts by city, device and time of day): kept indefinitely. These are summary counts that do not identify anyone, and they are what allow us to compare this year with last.
• Visit summaries (one record per browsing session, with its approximate location and the path taken through the site): kept while relevant to understanding how people use the platform, and deleted on request.
• Waitlist sign-ups, enquiries and venue submissions: kept until you ask us to delete them, or until they are no longer needed for the purpose you sent them for.
• Records of your privacy choices: kept for as long as we rely on that consent, plus a reasonable period afterwards, because they are the evidence of what you agreed to and when.

Where we are required to keep information longer to meet a legal, tax or accounting obligation, or to resolve a dispute, we keep only what that obligation requires.

How We Use Your Information

• To provide and maintain our services
• To process venue bookings and payments
• To communicate with you about bookings, updates, and promotions
• To personalize your experience and provide relevant venue recommendations
• To improve our platform and develop new features
• To comply with legal obligations and resolve disputes

Sharing Your Information

We may share your information with:

• Venue owners when you make a booking
• Payment processors to complete transactions
• Service providers who help us operate our platform
• Legal authorities when required by law

We do not sell your personal information to third parties. Any third-party service providers we work with are bound by confidentiality agreements and are only permitted to use your information as necessary to provide services to us.

Data Security

We implement appropriate security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. This includes encryption, secure server facilities, and regular security audits.

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

Your Rights

Depending on your location, you may have certain rights regarding your personal information, including the right to:

• Access and receive a copy of your personal information
• Correct inaccuracies in your personal information
• Request deletion of your personal information
• Object to or restrict the processing of your personal information
• Data portability (receiving a copy of your data in a structured format)

How to exercise them

The quickest route is the data request form. You can also email privacy@theskyshots.com and we will file it for you on the day it arrives.

We will send a confirmation link to the email address on the request. We do not act on a request until that link is clicked, because otherwise anyone could ask us to hand over or delete another person's data. If you cannot use the link, reply from the address on your original submission and we will verify you that way instead.

We respond within 30 days of receiving the request. If we need something from you before we can continue, we will say so and the clock pauses until you reply.

Because our visit records are stored against a random session identifier rather than your name, some of them cannot be connected to you at all. When that is the case we will tell you exactly which records we could not link, rather than quietly leaving them out. Records of your cookie choices are stored the same way, deliberately unconnected to your name or email so that they cannot be used to profile you.

Grievances about how we have handled your data go to the same address — privacy@theskyshots.com, marked for the attention of the Grievance Officer. If you are in India and we have not resolved it, you may escalate to the Data Protection Board of India.