Privacy Policy

1. Information We Collect

This policy explains how Nextlayer Labs ("we") handles your data on Skylyer. We collect account information (name, email address), your organization/workspace data, the files and folders you upload (both their content and metadata like name and size), and usage data such as an internal activity log of actions taken on your account (sharing, renaming, uploading, and similar). If your organization is on a paid plan while payments are enabled, we also process payment/transaction records for that purchase — see "Data Sharing" below for how that's handled.

2. How We Use Information

We use collected information to operate the service, provide support, secure your account, send you transactional email (verification, password reset, sharing notifications, billing receipts), and enforce the limits of your plan.

3. Cookies We Use

Skylyer sets three strictly-necessary, first-party session cookies — one each for a customer account, an admin account, and a partner account — used only to keep you signed in. They're httpOnly (not readable by page scripts) and cleared when you log out.

• session_token — customer account sign-in
• admin_session_token — admin panel sign-in
• partner_session_token — partner portal sign-in

4. Data Sharing

We do not sell your data. We share it only with the service providers necessary to run Skylyer: our cloud storage provider (stores the actual bytes of files you upload), our email delivery provider (sends transactional email on our behalf), and — only for organizations on a paid plan while payments are enabled — Razorpay, our payment gateway, to process that transaction. We do not store your card or UPI details ourselves. If your workspace is mapped to a reseller partner, that partner can see your plan and usage in order to manage your subscription on your behalf.

5. Security

All traffic to and from Skylyer runs over HTTPS/TLS. Sessions use httpOnly cookies, access to your workspace's files is controlled by role- and permission-based access rules, and account/file actions are recorded in an internal audit log.

6. Data Retention

Deleting a file or folder moves it to Trash, where it stays until you either restore it or empty Trash yourself — deletion isn't automatic on any schedule. Your account and workspace data is retained for as long as your account is active. To close your account and request deletion of your data, contact support — this is currently handled directly by our team rather than through a self-serve "delete my account" option.

7. Your Rights

You may request access to, correction of, or deletion of your personal data at any time by contacting our support team.

8. Changes to This Policy

We'll update the "last updated" date above whenever this policy changes in a way that affects how your data is handled.