Privacy Notice

Effective date: 2026-09-12

1. Who we are

Skeleton Crew Syndicate Ltd("we", "us"), operates private business systems available only to authorised employees, contractors, and other approved personnel (the "Systems"). We are responsible for the personal data described in this notice.

2. Information we collect

When you sign in using Google, we receive the information needed to authenticate you and match you to an authorised account. Depending on the permissions shown during sign-in, this may include:

your Google account's stable identifier;
your email address and whether Google has verified it; and
your name and profile image.

We may also collect information generated through your use of the Systems, including login times, IP address, device and browser information, security events, activity and audit logs, support communications, and information you enter into the Systems.

We receive Google account information from Google. We receive other information directly from you, from the organisation through which you provide services, or through your use of the Systems.

3. How we use information

We use personal data only to:

authenticate you and determine whether you are authorised to use the Systems;
administer your account and provide System functionality;
protect the security of the Systems, investigate suspected misuse, and maintain audit records;
provide support and troubleshoot problems;
administer our working relationship with you or the organisation through which you provide services; and
comply with legal and contractual obligations.

We do not sell Google user data, use it for advertising, or use it to build advertising profiles. Our use of information received from Google APIs complies with the Google API Services User Data Policy, including its Limited Use requirements where applicable.

4. Legal bases

Where data-protection law requires a legal basis, we process personal data as necessary for our legitimate interests in operating secure business systems and managing authorised access; to perform or administer a contract with you or the organisation through which you provide services; and to comply with our legal obligations.

Where we rely on legitimate interests, those interests include protecting company information, preventing unauthorised access, maintaining reliable business records, and supporting our operations. You may contact us for more information about the balancing assessment relevant to your data.

We may share personal data with:

personnel who administer, secure, audit, or support the Systems;
service providers that provide identity, hosting, infrastructure, monitoring, security, communications, or professional services; and
regulators, courts, law-enforcement authorities, counterparties, or professional advisers where disclosure is required by law or reasonably necessary to protect rights, security, or legal claims.

Service providers may use personal data only for the relevant service and under appropriate confidentiality, data-protection, and security obligations. We do not permit them to use Google user data for their own advertising.

6. International transfers

Some recipients may process personal data outside the country in which you work or live. Where applicable law requires it, we use recognised safeguards for these transfers, such as an adequacy decision or approved contractual clauses. Contact us for information about safeguards relevant to your data.

7. Retention

We retain account information while you are authorised to use the Systems and for a reasonable period afterward for account closure, security, audit, and legal purposes. Security and activity logs are kept only for as long as reasonably necessary for those purposes. Information may remain in protected backups until those backups are overwritten in the ordinary course.

We may retain particular records for longer when required by law, contract, an investigation, a dispute, or the establishment, exercise, or defence of legal claims. Our internal retention schedules determine the applicable period for each record type.

8. Security

We use technical and organisational measures designed to protect personal data, including access controls, encrypted network connections, logging, and restricted administrative access. No system can be guaranteed completely secure.

9. Your rights and choices

Depending on the law that applies to you, you may have rights to access, correct, delete, restrict, or object to the processing of your personal data, and to receive a portable copy of certain data.

You can disconnect the application from your Google account through your Google account settings. Disconnecting it does not automatically delete records that we must or are permitted to retain.

10. Changes to this notice

We may update this notice when our practices or legal obligations change. We will update the effective date above and provide additional notice where required.