Home · Privacy

Privacy Policy

Effective: July 13, 2026 · Version: 1.0

Skupa is sold and operated by Brandon James, an individual doing business as Skupa ("Skupa", "we", "us"), based in North Carolina, USA. This policy explains what personal data we do and do not handle. The short version: the Skupa application runs entirely on your machine and sends us no telemetry, no scan data, and no credentials. The only personal data we ever receive is what you give us to buy a license or ask for help.

1. Privacy by design

Skupa performs read-only analysis of the data sources you configure, on your own computer. Your connection strings, credentials, database contents, and the dependency graphs Skupa produces never leave your machine and are never transmitted to us. We operate no analytics, tracking, or usage-telemetry pipeline in the application.

2. What we collect, and why

We only receive personal data in three situations:

• When you purchase a license. Checkout is handled by our payment processor, Stripe. We receive from Stripe your email address and name, the product purchased, and confirmation of payment — so we can generate and email your license key, provide receipts, honor refunds, and provide support. We never receive or store your full card number; card data is handled entirely by Stripe.
• When you recover a lost key. If you use the key-recovery page, we use the email address you enter to look up your purchase and re-send your key.
• When you submit an in-app problem report. The report you send from within Skupa includes the email address you provide, the category, title, and description you write, and technical context you choose to include to help us reproduce the issue — such as your Skupa version, operating-environment details, error messages, and a recent application diagnostics log. We use this only to respond to you and to fix the problem.

We do not collect: your scan results, database contents, credentials or connection strings, location, advertising identifiers, or any behavioral/usage analytics.

3. Optional AI features

Skupa's AI-assisted features are off unless you enable them with your own configuration. When enabled, metadata (such as object names and relationships) is sent at your direction to the AI provider you configure — either Anthropic or your own organization's Azure OpenAI deployment — under your own agreement and keys with that provider. That data does not pass through us, and we receive nothing from it.

4. Who we share data with (processors)

We use a small number of service providers strictly to run the business. We do not sell personal data, ever.

• Stripe — payment processing (see Stripe's Privacy Policy).
• Microsoft — Azure hosts the small licensing service, and Microsoft 365 delivers our email (your license key and support replies).
• GitHub — an in-app problem report may be recorded as a private, tracked issue so we can follow up; it contains the report contents described in Section 2.

5. How long we keep it

We retain purchase records (email, name, product, license key) for as long as needed to support your perpetual license and to meet tax and accounting obligations. Support reports are kept while the issue is open and for a reasonable period afterward for reference. You can ask us to delete data we are not legally required to keep.

6. Your rights

Depending on where you live (including under the EU/UK GDPR and the California CCPA/CPRA), you may have the right to access, correct, delete, or export the personal data we hold about you, and to object to certain processing. To exercise any of these, email sales@skupa.io and we will respond within the time required by applicable law. We do not sell or "share" personal data for cross-context behavioral advertising.

7. The website

skupa.io is a static informational site. It sets no tracking or advertising cookies. This site uses Vercel Web Analytics to collect anonymous, aggregated page-view counts (no personal data, no cookies, no cross-site tracking). When you click a "Buy" link you are taken to Stripe's secure checkout, where Stripe's own privacy terms apply.

8. Security

Secrets used by the licensing service are stored as encrypted platform configuration, and email/key delivery runs over authenticated, encrypted connections. No method of transmission or storage is perfectly secure, but because the application holds your sensitive data locally and we hold very little, the exposure surface is deliberately small.

9. Children

Skupa is a professional developer tool and is not directed to children under 16. We do not knowingly collect data from children.

10. International users

We operate from the United States. If you contact us or purchase from outside the U.S., your personal data will be processed in the United States and other countries where our processors operate.

11. Changes

We may update this policy; the "Effective" date above will change and the current version will always be posted here. Material changes will be reflected in the version number.

12. Contact

Questions or requests: sales@skupa.io.

See also the EULA, Terms of Sale, and Refund Policy.