← Back

Privacy Policy

Effective Date: May 28, 2026

Version: 1.1 This Privacy Policy describes how Skamble Systems, LLC ("Skamble Systems," "we," "us," or "our") collects, uses, stores, and protects information when you use the Ceruleo platform (the "Service").

We take the privacy and confidentiality of your information seriously. Ceruleo is built for teams working on projects of significant commercial sensitivity, including pre-public intellectual property, merger and acquisition deliberations, and creative work whose unauthorized disclosure could cause substantial business harm. This policy describes the commitments we make to protect that information.

1. Information We Collect

Account Information. When you create an account, we collect your name, email address, organization affiliation, and authentication credentials.

Project Material. Any content, files, documents, images, designs, comments, discussions, or other material you upload to the Service ("Project Material") is stored on our infrastructure to provide the Service to you.

Usage Information. We collect technical information about how you use the Service, including IP addresses, device information, browser type, and pages accessed. This information is used to operate, maintain, and improve the Service.

Communications. If you contact us for support or feedback, we keep records of those communications.

2. How We Use Information

We use your information only to:

  • Provide, operate, and maintain the Service
  • Authenticate your access and prevent unauthorized use
  • Communicate with you about the Service (e.g., security alerts, service announcements)
  • Improve the Service through aggregated, de-identified analytics
  • Comply with legal obligations

We do not use your Project Material for any purpose other than providing the Service to you and your authorized collaborators. Specifically, we do not:

  • Train machine learning models on your Project Material
  • Share your Project Material with advertisers, marketing partners, or data brokers
  • Mine your Project Material for insights about you or your business
  • Use your Project Material for product development, demos, or marketing without your explicit written consent

3. Confidentiality of Project Material

Ceruleo is built with the understanding that Project Material may be among the most sensitive information our customers have. We design and operate the Service to protect that sensitivity.

Tenant isolation. Each organization's data is logically isolated. Users from one organization cannot access another organization's Project Material under any circumstance.

Access controls. Project Material is accessible only to users explicitly invited to the relevant project or sandbox. Permission grants are enforced at multiple layers of the platform.

Encryption in transit and at rest. All Project Material is encrypted in transit using TLS 1.2 or higher, and at rest using AES-256 or equivalent.

Audit logs. Access to Project Material is logged. Logs are retained for operational and security purposes.

Employee access. Skamble Systems employees and contractors do not access your Project Material except to provide support you request, to respond to a security incident, or to comply with a valid legal order. Such access is logged and audited.

No public exposure. Files in our storage are served via signed, time-limited URLs. Plain public URLs are not used for any confidential material.

4. Sharing of Information

We share your information only:

  • With your authorized collaborators within the Service (which is the purpose of the Service)
  • With service providers acting on our behalf under written confidentiality obligations (e.g., infrastructure providers, payment processors)
  • When required by law, such as in response to a valid subpoena, court order, or government request, after notifying you where legally permitted
  • As part of a corporate transaction (merger, acquisition, asset sale), with notice to you and subject to commensurate privacy protections

We never sell your data.

5. Data Storage and Retention

Your information is stored on infrastructure operated by trusted third-party providers (including Supabase, Vercel, and AWS) located primarily in the United States. While your data is on the Service, we retain it indefinitely to provide the Service.

When you delete content or terminate your account, we delete the underlying data within thirty (30) days, except where retention is required by law or for legitimate operational purposes (e.g., backups, audit logs).

You may export your Project Material at any time through the Service or by contacting support.

6. Your Rights

Depending on your jurisdiction, you may have rights under data protection law, including:

  • The right to access your personal data
  • The right to correct inaccurate information
  • The right to delete your personal data
  • The right to restrict or object to certain processing
  • The right to data portability

To exercise any of these rights, contact us at privacy@skamble.app.

7. Children

The Service is not directed to individuals under the age of 18, and we do not knowingly collect information from children. If we learn that we have collected information from a child, we will delete it promptly.

8. Security

We employ reasonable administrative, technical, and physical safeguards to protect your information. No system is perfectly secure, but we are committed to ongoing improvement of our security posture.

If we become aware of a breach affecting your data, we will notify you without undue delay and as required by applicable law.

9. International Users

By using the Service from outside the United States, you consent to the transfer, processing, and storage of your information in the United States. We will protect your information in accordance with this Privacy Policy regardless of where it is processed.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated to you at least thirty (30) days before they take effect. Continued use of the Service after the effective date constitutes acceptance.

11. Contact

Questions about this Privacy Policy or our privacy practices? Contact us at privacy@skamble.app.