Privacy Policy

1. Introduction and Scope

Skyward Solutions ("Skyward," "we," "us," or "our") provides custom software development, AI automation, website design, and marketing services to businesses ("Clients"). This Privacy Policy explains how we collect, use, store, protect, and share information when you visit our website at skywardsolutions.co, contact us, or use the software, portals, and systems we build and operate for you.

By using our website or engaging our services, you agree to the practices described in this policy. If you do not agree, please do not use our website or services.

2. Our Core Privacy Commitment

We do not review, access, or use Client data or your customers' data except where strictly necessary to troubleshoot, maintain, secure, or repair the systems we build, or where required by law.

• We do not sell Client data or your end users' data. Ever.
• We do not use Client data to market to you or your customers on behalf of third parties.
• We do not use Client data to train public AI models.
• Any access for troubleshooting is limited to the minimum data needed, for the minimum time needed, and is done only to resolve the specific issue.

3. Information We Collect

4. How We Use Information

• To respond to inquiries and provide quotes and proposals.
• To design, build, deliver, host, support, and maintain our services.
• To troubleshoot errors, fix defects, and restore service.
• To protect against fraud, abuse, spam, and security threats, including reviewing inquiry origin data.
• To send service-related communications such as updates, invoices, and support messages.
• To improve our website and services using aggregated, non-identifying information.
• To comply with legal obligations and enforce our agreements.

5. Access to Client Data for Troubleshooting

Skyward does not routinely view, monitor, or analyze Client Data. Access occurs only in these limited circumstances:

• A Client reports a problem and access is needed to diagnose or fix it.
• We detect an error, outage, or security issue affecting a system we maintain.
• A Client requests data migration, recovery, or export.
• We are legally compelled to provide access.

Where possible, we troubleshoot using logs, error messages, and test data rather than live Client Data. Anyone at Skyward with access is bound by confidentiality obligations, and we will not copy, retain, or use Client Data beyond what the troubleshooting task requires.

6. Artificial Intelligence Features

Some solutions we build include AI-powered features such as automation, classification, or content generation. When AI features process Client Data, that processing is performed only to deliver the feature to the Client. Data submitted to AI providers is handled under those providers' service terms, and we select providers and configurations that do not use submitted data to train public models wherever such options are available. AI output can be inaccurate; Clients are responsible for reviewing AI-generated content before relying on it.

7. How We Share Information

We do not sell your personal information. We share information only in these situations:

• Service providers: trusted vendors that help us operate, such as hosting, database, email delivery, analytics, payment processing, and AI infrastructure providers. They may process data only to perform services for us and are expected to protect it.
• Legal reasons: when required by law, subpoena, court order, or to protect the rights, property, or safety of Skyward, our Clients, or others.
• Business transfers: in connection with a merger, acquisition, or sale of assets, with continued protection of your information.
• With your consent or at your direction.

8. Data Security

We use reasonable administrative, technical, and organizational safeguards to protect information, including:

• Encryption of data in transit using HTTPS/TLS.
• Secure, access-controlled cloud infrastructure and role-based permissions.
• Secure storage of credentials and API keys, kept out of source code.
• Limiting internal access to those who need it to perform their work.
• Regular review of systems and prompt attention to known vulnerabilities.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Clients are responsible for keeping their own account credentials confidential and for configuring user access within their systems appropriately.

9. Data Retention and Deletion

We retain website inquiry information for as long as needed to respond to you and maintain our business records. Client Data is retained for the duration of our engagement and any agreed hosting or support period. Upon written request or termination of services, we will return or delete Client Data within a reasonable time (generally within 60 days), except where we must retain it to comply with law, resolve disputes, or enforce agreements. Routine backups may persist for a limited period before being overwritten.

10. Cookies and Tracking Technologies

Our website may use cookies and similar technologies that are necessary for the site to function or that help us understand general usage. You can control cookies through your browser settings. Disabling cookies may affect some website features. We do not respond to browser "Do Not Track" signals at this time.

11. Your Privacy Rights

Depending on where you live (including under laws such as the California Consumer Privacy Act and similar state laws), you may have the right to:

• Request access to the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your personal information.
• Opt out of the sale or sharing of personal information (we do not sell personal information).
• Not be discriminated against for exercising your rights.

To exercise these rights, contact us using the details below. We may need to verify your identity. If your information is held within a Client's software, we will direct your request to that Client, since they control that data.

12. Client Responsibilities

Because Clients own and control Client Data, each Client is responsible for:

• Having a lawful basis and any required consents to collect and process data from its own customers and users.
• Publishing its own privacy policy and terms for its end users.
• Complying with laws that apply to its industry (for example HIPAA, GLBA, or PCI-DSS). Unless we agree otherwise in writing, our standard services are not designed to store protected health information or payment card data directly.
• Informing us promptly of any suspected security incident involving its systems.

13. Data Breach Notification

If we become aware of a confirmed security breach affecting Client Data in systems under our control, we will notify affected Clients without unreasonable delay and provide the information reasonably needed for them to meet their own legal obligations.

14. Children's Privacy

Our website and services are intended for businesses and are not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

15. Third-Party Links and Services

Our website may link to third-party sites or integrate third-party tools. We are not responsible for the privacy practices or content of those third parties and encourage you to review their policies.

16. International Users

Skyward is based in the United States, and information may be processed and stored in the United States or other locations where our service providers operate. By using our services you consent to this transfer.

17. Limitation of Liability and Disclaimer

Our website and this policy are provided "as is." To the fullest extent permitted by law, Skyward is not liable for indirect, incidental, special, or consequential damages arising from use of our website or from unauthorized access caused by factors outside our reasonable control, including Client-side credential misuse, third-party platform failures, or acts of malicious actors despite reasonable safeguards. Liability for our services is governed by the written agreement between Skyward and each Client, which controls if it conflicts with this policy. This policy is informational and does not create a contract or warranty beyond those terms.

18. Changes to This Policy

We may update this policy from time to time. The updated version will be posted on this page with a revised effective date. Continued use of our website or services after changes means you accept the updated policy.

19. Governing Law

This policy is governed by the laws of the State of Arizona, without regard to conflict of law principles. Any disputes will be resolved in the state or federal courts located in Arizona, unless a written Client agreement states otherwise.