Privacy Policy

Sky Crafy Company ("we", "us", "our") is committed to protecting your privacy and handling personal data with transparency, security, and respect. This Privacy Policy explains what information we collect, how we use it, who we share it with, how long we keep it, and the rights available to you.

This Policy applies to all visitors, registered members, and administrators interacting with SKAIFR websites, dashboards, and related services (the "Platform"). It should be read together with our Terms & Conditions and Platform Trust Guidelines.

1. Data controller

Sky Crafy Company operates the Platform and is responsible for personal data processed in connection with account registration, authentication, financial operations, and security monitoring. For privacy-related requests, contact us at:

2. Information we collect

3. How we collect information

• Directly from you — when you register, complete your profile, upload documents, submit deposits/withdrawals, or contact support.
• Automatically — through session cookies, server logs, and security monitoring when you access the Platform.
• From administrators — when compliance teams review and record authentication or transaction decisions.
• From third-party references — such as market data providers used for dashboard price displays (no personal data is sold to them).

4. How we use your information

We use personal data only for legitimate business purposes, including:

• Creating, authenticating, and maintaining your account
• Processing deposits, withdrawals, bonuses, and reward calculations
• Verifying identity and preventing fraud, abuse, or unauthorized access
• Enforcing our Terms & Conditions and platform security policies
• Communicating service updates, security alerts, and account notifications
• Improving reliability, performance, and user experience through aggregated analytics
• Complying with legal obligations, audit requirements, and lawful requests

We do not use your personal data for third-party advertising profiling on the authenticated dashboard.

5. Legal bases for processing

Depending on your jurisdiction, we rely on one or more of the following legal bases:

• Contract performance — processing necessary to provide the Services you registered for.
• Legal obligation — retention and disclosure required by applicable law, fraud prevention, or regulatory inquiry.
• Legitimate interests — securing the Platform, preventing abuse, and improving services — balanced against your rights.
• Consent — where required for optional features (such as marketing communications, if offered).

6. How we share information

We do not sell your personal information. We may share data only in these circumstances:

• Platform administrators — authorized staff who review authentication, deposits, and withdrawals.
• Service providers — hosting, infrastructure, email, or CDN vendors bound by confidentiality obligations.
• Legal & safety — when required by court order, subpoena, or to protect rights, safety, and Platform integrity.
• Business transfers — in connection with a merger, acquisition, or asset sale, subject to continued protection.

7. International data transfers

Your data may be processed on servers located outside your country of residence. Where required, we implement appropriate safeguards — such as contractual protections and access controls — to ensure your information receives an adequate level of protection consistent with this Policy.

8. Data retention

9. Security measures

We implement administrative, technical, and organizational safeguards designed to protect your data, including:

• Industry-standard password hashing (passwords are never stored in plain text)
• HttpOnly session cookies with SameSite protections
• CSRF tokens on sensitive forms and authenticated actions
• Rate limiting on login and registration endpoints
• Role-based admin access with separation of user and administrator panels
• Restricted access to verification documents on a need-to-review basis
• HTTPS/TLS encryption recommended for all production deployments

No system is 100% secure. You play a vital role by using a strong unique password and notifying us promptly of suspected unauthorized access.

10. Cookies & similar technologies

We use essential cookies and session storage necessary to:

• Keep you signed in securely across dashboard pages
• Protect forms with CSRF validation tokens
• Maintain security and rate-limit state during your visit

We do not deploy third-party advertising cookies within the authenticated member dashboard. Optional third-party services on public pages (such as Google Fonts or reCAPTCHA, if enabled) may set their own cookies subject to their policies.

11. Third-party services

The Platform may integrate with external services including:

• Google reCAPTCHA (optional) — bot protection on registration/login
• Google Fonts — typography delivery on public pages
• CoinGecko & public APIs — reference market pricing for dashboard displays (information only)

These providers process data under their own privacy policies. We recommend reviewing their documentation for details on data handling.

12. Your privacy rights

Depending on your location, you may have the right to:

• Access — request a copy of personal data we hold about you
• Correction — request correction of inaccurate or incomplete data
• Deletion — request deletion subject to legal retention requirements
• Restriction — request limited processing in certain circumstances
• Portability — receive your data in a structured, commonly used format where applicable
• Objection — object to processing based on legitimate interests where permitted
• Withdraw consent — where processing is based on consent, without affecting prior lawful processing

To exercise these rights, submit a verified request through official support channels. We may ask for identity confirmation before fulfilling requests to protect your account.

13. Regional notices

EEA/UK users: You may lodge a complaint with your local data protection authority if you believe our processing violates applicable law.

California residents (CCPA/CPRA): We do not sell personal information. You may request disclosure of categories collected and deletion subject to legal exceptions.

14. Children's privacy

The Platform is not directed to individuals under 18 years of age. We do not knowingly collect personal information from minors. If you believe a minor has created an account, contact us immediately and we will take steps to delete the account and associated data.

15. Data breach notification

In the event of a personal data breach that poses a risk to your rights, we will investigate promptly and notify affected users and relevant authorities as required by applicable law, including steps taken to mitigate harm.

16. Marketing communications

We may send service-related notices about your account, security events, or material policy changes. Promotional communications, if any, will include opt-out instructions. You cannot opt out of essential security or transactional notices while maintaining an active account.

17. Changes to this Policy

We may update this Privacy Policy to reflect legal, technical, or operational changes. The "Last updated" date at the top indicates the current version. Material changes will be posted on this page and in the Help Center. Continued use after updates constitutes acknowledgment of the revised Policy.

18. Contact us

For privacy inquiries, data subject requests, or concerns about how your information is handled, contact platform support:

Include your Member ID and registered email to help us respond efficiently.