Who we are
Sky provides an AI-native back office for travel agencies. In this policy, "Sky", "we", and "us" mean the company that operates the Sky service and this website.
We act in two different roles. For this marketing website and for people who contact us, Sky is the data controller. For the case, client, and document data an agency puts into the Sky product, the agency is the controller and Sky is a processor acting on the agency's instructions — that agency's own privacy policy governs how it handles its travellers' data.
Information we collect
From website visitors
If you request access, book a call, or contact us, we collect the details you provide — such as your name, work email, agency name, and anything you write to us. We also collect limited technical and usage data through cookies, only in line with your choices (see Cookies below).
From agencies and their travellers (product data)
When an agency uses Sky, the product processes the data that agency and its clients send through it, which can include: client identity details, passport and ID documents, trip and service details, messages from WhatsApp, email, and social channels, payment records and milestones, and supplier and partner information. Sky processes this on the agency's behalf to run their operations.
How we use data
- To operate, secure, and improve the Sky product and this website.
- To respond to access requests, demos, and support enquiries.
- To structure inbound conversations into cases, check documents, run workflows, and coordinate the work an agency asks Sky to do.
- To meet legal, security, and compliance obligations.
We do not sell personal data, and we do not use the documents or client data inside an agency's workspace to train public AI models.
AI processing
Sky uses AI to triage messages, draft replies, extract case details, and check documents. AI proposes work — it does not finalise it. Pricing, payments, visa, and supplier commitments always require a person on the agency's team to approve before anything is sent. Sky is an operational tool, not legal or immigration advice, and does not guarantee any visa or travel outcome.
How we protect data
- Personal data is encrypted field-by-field with AES-256, and in transit with TLS.
- Passports and ID documents are stored privately and reachable only through short-lived signed links — never on a public URL.
- Each agency’s data is isolated to its own workspace and only ever queried within that agency, never across tenants.
- Channel credentials are encrypted, access is permission-scoped, and two-factor authentication is available.
- Privileged actions are written to an append-only audit trail.
Cookies
On first visit we ask for your cookie choices. Strictly necessary cookies keep the site working and remember your consent; analytics and marketing cookies are off unless you turn them on. You can change your choice anytime from the "Cookie preferences" link in the footer.
Sharing and sub-processors
We share data only with service providers that help us run Sky, under contracts that require them to protect it. These fall into a few categories:
- Cloud hosting and storage.
- Payment processors, for billing agencies for the Sky service.
- Messaging and email delivery, for the channels Sky connects to.
- AI model providers, for the AI features described above.
- Error monitoring and analytics.
We do not sell personal data or share it with advertisers.
Data retention
We keep personal data only as long as needed for the purposes above, to provide the service to an agency, and to meet legal obligations. Product data is retained per our agreement with each agency; when an agency closes its account, we delete or return its data within a reasonable period, except where law requires us to keep records.
International transfers
Sky may process data in countries other than where you are located. Where we transfer personal data across borders, we use appropriate safeguards required by applicable law.
Your rights
Depending on where you live, you may have the right to access, correct, delete, port, or object to the processing of your personal data. To exercise these rights for data Sky controls, contact us using the details below.
If you are a traveller whose data an agency put into Sky, that agency is the controller — please contact the agency directly, and we will support them in responding.
Children
Sky is a business tool and is not directed to children. We do not knowingly collect personal data from children. Agencies remain responsible for any traveller data they process, including minors travelling with their families.
Changes to this policy
We may update this policy as Sky evolves. When we make material changes, we will update the date above and, where appropriate, notify you.
Contact us
Questions about this policy or your data? Email us at privacy@usesky.io.