Privacy Policy

This Privacy Policy describes how Skipr Technologies LLC ("SecureConnect", "we", "us", or "our") handles personal data collected through the SecureConnect platform, application (including iOS, Android, macOS, and Windows versions), website (secureconnect.network), and related enterprise services.

This Privacy Policy applies to approved enterprise organizations, subscribed enterprise customers, prospective customers, business contacts, and authorized users operating within approved organizations, as well as visitors to our website.

For website visitors, this Privacy Policy should be read together with the SecureConnect Cookie Policy, which explains how cookies and similar technologies are used on the SecureConnect website.

We process your data in compliance with applicable data protection laws, including the EU General Data Protection Regulation ("GDPR") and the German Federal Data Protection Act ("BDSG"), where applicable.

The specific role SecureConnect plays depends on the nature of the processing and the contractual relationship between SecureConnect and the subscribing organization.

When SecureConnect acts as a Data Processor: Where SecureConnect is deployed by an enterprise customer, that customer generally acts as the Data Controller for information processed through its deployment. SecureConnect acts as a Data Processor or service provider acting on the customer's instructions to provide the autonomous access and control platform.

When SecureConnect acts as a Data Controller: For information collected directly by us through our website, for administrative, billing, or direct support purposes regarding the enterprise account, Skipr Technologies LLC acts as the Data Controller.

Skipr Technologies LLC — Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, U.A.E.

For privacy-related questions or requests, please contact: info@skipr.network

SecureConnect is an autonomous access and control platform that governs how connections to enterprise infrastructure are created, controlled, monitored, and removed in real time.

SecureConnect is delivered as an enterprise platform and application for use by approved organizations and their authorized users. It is designed to help organizations manage and govern access to infrastructure, systems, applications, networks, and related resources.

The information processed by SecureConnect depends on how an organization uses the platform and how an individual interacts with the application or website.

Information Collected When You Visit the Website

Each time you open our website, our hosting infrastructure automatically records technical data needed to deliver and secure the pages:

IP address, date and time of the request, the page or resource requested, the referring URL, and your browser type and operating system (user-agent).

Enterprise Account Information

When an organization subscribes to SecureConnect, we may process information necessary to establish, configure, administer, and support the enterprise account, including:

• Organization details
• Administrative, contracting, and billing contacts
• Deployment configuration information
• Authorized user information supplied by the organization

Operational Service Information (App and Platform)

The SecureConnect platform may process operational information required to provide and secure the service, including:

• Identity and authentication context
• Device and system context (across iOS, Android, macOS, and Windows platforms)
• Access-control decisions and policy evaluation results
• Connection metadata
• Service diagnostics, security events, and operational logs

Where applicable, such information is processed under the direction and authority of the subscribing enterprise organization (the Data Controller).

Communications and Support

If you choose to contact SecureConnect through website forms, email communications, support requests, sales inquiries, or other communication channels, we process the information you voluntarily provide, which may include your full name, company or organization, business email address, phone number (optional), inquiry type, and the contents of your message.

Our website uses strictly necessary cookies—for example, security and delivery cookies set by our infrastructure provider, and a cookie that remembers your cookie choice. These are exempt from consent requirements under applicable laws (such as § 25(2) TDDDG in Germany) because the website cannot function securely without them.

We do not use advertising cookies, behavioral profiling, or cross-site tracking. Our mobile and desktop applications do not use cookies in the same manner as the website. For detailed information about the cookies used on our website, please see our separate Cookie Policy.

SecureConnect may use information to:

• Operate and provide the SecureConnect service (website and applications)
• Authenticate and authorize access
• Evaluate and govern connection requests
• Administer enterprise accounts and fulfill contractual obligations
• Deliver customer support
• Maintain platform security
• Detect fraud, abuse, and unauthorized activity
• Comply with legal and regulatory requirements
• Improve platform reliability, stability, and security

SecureConnect does not sell personal information.

Depending on the nature of the information and the context in which it is processed, SecureConnect may rely on one or more of the following legal bases under the GDPR:

• Performance of a contract (Art. 6(1)(b)): To provide the services requested by the enterprise customer or to take steps prior to entering into a contract.
• Legitimate interests (Art. 6(1)(f)): For operating, securing, maintaining, and improving the service, including the website.
• Compliance with legal obligations (Art. 6(1)(c)): To meet regulatory requirements.
• Consent (Art. 6(1)(a)): Where required by applicable law (which may be withdrawn at any time).

SecureConnect may share information with service providers that assist in building, hosting, securing, delivering, and supporting the service. These providers process information only as necessary to perform services on our behalf and are subject to appropriate contractual and data protection obligations.

• Website hosting and delivery: The website is built on Lovable (Lovable Labs Incorporated), whose managed hosting runs on the infrastructure of Netlify, Inc. (United States). The domain is mapped to that hosting by DNS.
• Infrastructure and Data Storage: We utilize Amazon Web Services (AWS) data centers for robust and secure data storage.
• Network and Security: Cloudflare, Inc. provides network infrastructure, content delivery, and security services.
• Email processing: Email communications, including contact form submissions and support inquiries, are handled via Google Workspace (Google LLC, United States), operating under Google's Data Processing Amendment. Google may process email data on servers located in the United States and other jurisdictions in accordance with applicable data transfer safeguards.

We may also disclose information to comply with legal obligations, respond to lawful requests from public authorities, protect the security of SecureConnect, investigate abuse, or in connection with a corporate transaction permitted by law.

Skipr Technologies LLC is based in the United Arab Emirates. We aim to ensure a high level of data protection globally.

Certain service providers used to operate and support SecureConnect (such as AWS, Cloudflare, Lovable, and Netlify) may process information outside your country of residence, including outside the European Economic Area (EEA).

Where international transfers occur, SecureConnect implements appropriate safeguards in accordance with Chapter V of the GDPR and applicable data protection laws. Such safeguards may include:

• Standard Contractual Clauses (SCCs)
• Adequacy decisions
• Participation in approved international data-transfer frameworks (e.g., Cloudflare participates in the EU–U.S. Data Privacy Framework)

SecureConnect retains information only for as long as reasonably necessary to provide the service, fulfill contractual obligations, maintain security and audit capabilities, resolve disputes, enforce agreements, and comply with legal and regulatory requirements.

• Server logs: Kept only as long as needed to operate and secure the Site, then deleted.
• Contact-form inquiries: Kept as long as needed to handle the inquiry and any follow-up. Where an inquiry leads to a contract or has tax/commercial relevance, statutory retention periods may apply (e.g., German HGB up to 6 years, AO up to 10 years), after which the data is deleted.

Enterprise Audit and Operational Data

For enterprise deployments, SecureConnect retains audit logs, connection records, security events, policy evaluation results, and other operational data to support compliance, security, and governance requirements. These records include information about who connected, when connections occurred, access decisions, alerts, and related events.

Retention periods for enterprise audit data are determined by applicable compliance frameworks and legal requirements, including ISO 27001 and the General Data Protection Regulation (GDPR), as well as any local or jurisdictional requirements that may apply to the subscribing organization. Enterprises may export their audit data at any time. Deletion of audit data is permitted only where required or permitted by applicable compliance requirements or legal obligations.

Retention periods for all other enterprise data are determined based on the purpose for which the information was collected, contractual requirements, and applicable limitation periods. Information is deleted, anonymized, or securely disposed of when it is no longer required unless retention is required by law.

Depending on applicable law (including the GDPR and BDSG) and the role SecureConnect or the subscribing organization plays in processing information, individuals may have rights relating to:

• Access (Art. 15 GDPR): To request information about what personal data is being processed.
• Rectification (Art. 16 GDPR): To demand the correction of inaccurate or incomplete personal data.
• Erasure (Art. 17 GDPR): To request the deletion of your personal data.
• Restriction (Art. 18 GDPR): To request limits on the processing of your data.
• Data Portability (Art. 20 GDPR): To receive your data in a structured, commonly used format.
• Objection (Art. 21 GDPR): Where we rely on legitimate interests, you may object on grounds relating to your particular situation.

Important Note for Authorized Users: Because SecureConnect typically acts as a Data Processor for enterprise deployments, authorized users should generally direct privacy requests (such as access or deletion requests) to their organization administrator in the first instance.

Requests regarding data where SecureConnect acts as the Data Controller (e.g., website visitors) may be submitted directly to us using the contact information in Section 2. We will respond within one month (Art. 12(3) GDPR).

Individuals located in jurisdictions that provide such rights may lodge a complaint with their local data protection authority or supervisory authority if they believe their information has been processed in violation of applicable data protection laws. We encourage individuals to contact SecureConnect first so that we may attempt to resolve concerns directly.

We may update this Privacy Policy from time to time to reflect changes in our services, infrastructure, legal obligations, security practices, or operational requirements. The "Last updated" date at the top indicates when it was most recently revised. Material changes will be communicated appropriately and published on our website.