Skubl

Privacy Policy

Last updated: February 21, 2026

Skubl Ltd (“Skubl”, “we”, “us”) operates the skubl.com website and platform. This policy explains how we collect, use, store, and protect your information when you use our services.

1. Information We Collect

Account Information

When you create an account, we collect your name, email address, and optionally your company name. If you sign in via Google or GitHub OAuth, we receive your name, email, and profile picture from those providers.

Project & Usage Data

We store data you create within Skubl, including project names, domains, dashboards, alerts, exports, and configuration settings. We also collect usage analytics such as page views and feature usage to improve the product.

Third-Party Platform Data

When you connect external platforms (Google Search Console, Google Analytics, Google Ads, Meta Ads, etc.), we access data from those platforms on your behalf using OAuth tokens you authorize. Specifically:

Google API Services: Skubl’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
  • Google Search Console: We access search performance data (queries, clicks, impressions, click-through rates, average positions, and page URLs) using the webmasters.readonly scope. This data is read-only — we cannot modify your Search Console settings.
  • Google Analytics: We access reporting data using the analytics.readonly scope.
  • Google Ads: We access campaign performance data using the adwords scope.

Payment Information

Payments are processed by Stripe. We do not store credit card numbers or bank details on our servers. Stripe’s privacy policy applies to payment data.

Cookies

We use essential cookies for authentication and session management. We do not use third-party advertising cookies. See our Cookie Policy for details.

2. How We Use Your Information

  • To provide, operate, and maintain the Skubl platform
  • To sync and display marketing data from connected platforms
  • To generate dashboards, reports, and alerts you configure
  • To authenticate your identity and secure your account
  • To communicate product updates, security notices, and support responses
  • To improve our services based on aggregated, anonymised usage patterns

3. How We Store & Protect Your Data

Your data is stored in Supabase (hosted on AWS infrastructure) with the following protections:

  • Encryption at rest (AES-256) and in transit (TLS 1.3)
  • Row-level security (RLS) ensuring users can only access their own project data
  • OAuth tokens are stored encrypted in our database and are never exposed to the browser
  • Access tokens are automatically refreshed server-side when they expire

4. Data Sharing

We do not sell your data. We share information only with:

  • Infrastructure providers: Supabase (database), Vercel (hosting), Stripe (payments) — solely to operate the service
  • At your direction: When you export data to destinations you configure (BigQuery, Google Sheets, S3, etc.)
  • Legal requirements: If required by law, regulation, or valid legal process

5. Google API Limited Use Disclosure

Skubl only uses Google user data to provide the features you see in the product — syncing search queries, displaying performance metrics, and generating reports. We do not use Google data for advertising, do not transfer it to third parties (except infrastructure providers necessary to operate the service), and do not use it to build user profiles for purposes unrelated to the Skubl product.

6. Data Retention & Deletion

  • Account data is retained while your account is active
  • You can delete your project data at any time from the dashboard settings
  • You can disconnect any integration, which removes stored OAuth tokens immediately
  • If you delete your account, all associated data is permanently deleted within 30 days
  • OAuth refresh tokens are deleted immediately when you disconnect a platform

7. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Delete your data (“right to be forgotten”)
  • Export your data in a portable format
  • Withdraw consent for data processing
  • Revoke Google OAuth access at any time via Google Account Permissions

To exercise any of these rights, contact us at privacy@skubl.com.

8. International Transfers

Your data may be processed in the United States and European Union via our infrastructure providers. We ensure appropriate safeguards are in place for international data transfers in compliance with applicable data protection laws including GDPR.

9. Children

Skubl is not intended for use by individuals under the age of 16. We do not knowingly collect data from children.

10. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes via email or an in-product notice. Continued use of Skubl after changes constitutes acceptance of the updated policy.

11. Contact

For privacy-related questions or requests:

Skubl Ltd
Email: privacy@skubl.com
Web: skubl.com