Effective Date: November 24, 2025
Company: Skippr Ltd. ("Skippr", "we", "us", "our")
Registered office: 99 Milton Keynes Business Centre, Foxhunter Drive, Linford Wood, Milton Keynes, Buckinghamshire MK14 6GD, England
Email: privacy@skippr.ai | DPO: dpo@skippr.ai
This Privacy Policy explains how we collect, use, disclose, and protect personal information when you use:
If you do not agree with this Policy, please do not use the Services.
Account details (name, work email, company, hashed password if you create one), workspace/project names, content you upload, support requests, and community contributions. Prompts, comments, and project chats you create to review and improve your application.
Log data (IP address, device/browser info, pages viewed, timestamps) and cookie-based analytics/functional data as described in Section 5.
When—and only when—you run a full analysis of a page, the extension may capture:
We do not monitor in the background, read other tabs, or collect browsing history.
Live Chat Features (Multimodal): When using our live chat feature with voice enabled, audio input is transmitted in real-time to trusted AI processing services for voice interaction, and screenshots may be captured during the conversation to provide contextual assistance. Both audio and live chat screenshots are processed in real-time and not stored by Skippr after the session ends (unlike Captured Content from full page analyses, which is saved to your project).
Screenshots/DOM stored for your project. When you trigger an analysis, we may save the screenshot and selected DOM fragments to your project workspace so they can be included in your report, compared over time, and viewed by authorized workspace members. You control if/when to share or export these captures externally.
Sensitive data caution. Page content you choose to analyze may contain personal or sensitive data. Only capture content you're authorized to process and avoid secrets (e.g., credentials). You may archive a capture in the product to hide it from normal views; to permanently delete (erase) a capture or project, email privacy@skippr.ai (see Section 17).
Diagnostics/monitoring (extension). We collect limited telemetry (e.g., feature usage events, error rates, performance metrics) to monitor reliability and address bugs. This is not background browsing history.
LLM/AI clarity. For extension analyses, we transmit only the captured page content and prompts necessary for the analysis, plus minimal technical context (e.g., language, an anonymized project/workspace ID). We do not include your account email or similar direct identifiers in AI requests. Our contracts restrict AI processors from using your content for model training or advertising.
We rely on:
Where we store captures in your project, our legal basis is performance of a contract and/or our legitimate interests, balanced with your controls and rights.
We do not sell personal information. We share information only with:
If our websites use advertising or remarketing tools, that may be "sharing" for cross-context behavioral advertising in certain US states. You can opt out at any time via our "Do Not Sell or Share My Personal Information" link and via GPC signals where applicable.
We maintain a current list of sub-processor categories and can provide details upon request.
(Cookies do not apply to extension storage; extension telemetry is covered in Section 1(c).)
We keep personal information only as long as needed for the purposes described or as required by law.
When deletion isn't immediately possible (e.g., backups), we isolate and delete on the next rotation.
We use reasonable and appropriate safeguards, including encryption in transit/at rest (where applicable), role-based access controls with MFA for staff, secure development practices, logging/monitoring, vulnerability management, and an incident response process.
We operate from the United Kingdom with cloud infrastructure in the EEA and United States. Where required, we use recognized transfer mechanisms (e.g., adequacy decisions, standard contractual clauses with UK addendum, or other appropriate safeguards).
The Services are not directed to children under 13 and the extension is intended for professional use. We do not knowingly collect personal information from children. If we learn we have, we will delete it.
Depending on your location, you may have rights to access, correct, delete (including permanent deletion of captures and project artifacts by request), restrict or object, withdraw consent, or data portability. You may also opt out of marketing at any time.
Contact privacy@skippr.ai to exercise your rights. We verify requests and respond within required timeframes.
We currently do not respond to legacy DNT signals (no industry standard). Where required by law, we honor GPC or other recognized universal opt-out signals for "sale"/"sharing" or targeted advertising.
activeTab (access only the tab you invoke when you run a full analysis), scripting (inject analysis helpers on demand), storage (save extension preferences locally), identity (workspace sign-in), sidePanel (in-product UI).
"Skippr will capture a screenshot and selected DOM fragments of this page when you run a full page analysis. These captures are saved to your project so they can appear in your reports and history. Content may include personal data visible on the page. You control whether to share or export captures outside your workspace. Learn more: skippr.ai/privacy."
The extension does not run in the background, read other tabs, or collect browsing history.
If you archive a capture in the product, you may request permanent deletion at any time via privacy@skippr.ai as described in Section 17.
We may update this Policy. The "Effective Date" will change and, for material updates, we will provide reasonable notice.
This Policy is governed by the laws of England and Wales, with exclusive jurisdiction of its courts.
Data Protection Officer: dpo@skippr.ai
General privacy inquiries: privacy@skippr.ai
Postal: Skippr Ltd., address above.
Submit privacy requests by emailing privacy@skippr.ai from the email on your account. Include:
We may verify identity and (for workspace requests) administrative authority.
For approved permanent deletion requests, we erase specified captures (screenshots/DOM), derived analyses, project artifacts, and related metadata from active systems and instruct sub-processors to delete corresponding data. We retain data we must keep by law (e.g., billing records, security logs) for the required period only.
We respond within legal timeframes (generally 30 days). Erasure from active systems is typically completed within 30 days of approval; backups are overwritten on the next scheduled rotation (typically within 35 additional days).
We may decline or limit a request where identity/authority cannot be verified, where it would adversely affect others' rights, or where retention is legally required. If denied, we explain why and how to appeal if applicable.
Your responsibilities. As Controller, you determine whether to store, share, export, or request deletion of captured screenshots/DOM and are responsible for ensuring a lawful basis for processing the content you analyze. Avoid capturing secrets or sensitive data unless lawful to do so, and request deletion promptly if captured in error.