SkyraExec Privacy Policy
Effective October 1, 2026
1. Who we are and scope
Inflection Point Studio, LLC, a Florida limited liability company (“we,” “us,” “our”) operates the SkyraExec application and website (the “Service”), business operating software for executive teams, currently in beta.
This Policy explains how we collect, use, share, and retain personal information. It does not cover third-party sites or services we do not control. “Your organization” (or “Customer”) means the company or entity that agreed to the Terms of Service. A “workspace” is a Customer’s separate SkyraExec environment. Your organization may also have its own privacy notices that apply to your use of SkyraExec. If this Policy conflicts with the Terms of Service regarding how Customer Content is handled, the Terms of Service control.
2. Roles
-
Controller. For account data, security and audit data, service-usage data, communications, and beta feedback, we decide how and why the data is used, so we act as controller.
-
Processor. For Customer Content, which is business data your organization and its users put into a workspace, we act as processor (service provider) and handle it on your organization’s instructions under the Terms of Service. Your organization controls Customer Content and is responsible for it.
-
Administrators. Your organization’s administrators and other authorized users can see Customer Content and member information according to roles and permissions inside the Service.
-
Our personnel. Authorized Inflection Point Studio personnel may access a workspace, including Customer Content, only as needed to support, secure, and maintain the Service. That access is logged.
3. Information we collect
| Category | What it includes | Source |
|---|---|---|
| Account data | Name, work email, optional profile picture, organization, role, access settings. Passwords are handled by our authentication provider and stored as hashes. | You or your organization |
| Customer Content | Strategy materials, goals, KPIs, action items, meeting agendas and notes, reviews, status updates, files, and related records. May include personal information if someone enters it. | You and other users |
| Security and audit data | IP address, user agent, request metadata, timestamps, session identifiers, and audit events such as sign-in success or failure and administrative actions (which may include actor name, email, IP address, and user agent) | Automatically |
| Service-usage data | Feature usage, pages viewed, performance metrics, and error logs | Automatically |
| Communications | Email address and message metadata for invitations, welcome messages, magic links or one-time codes, resets, and service notices; support and feedback emails | You; us |
| Beta feedback | Comments, bug reports, suggestions, and screenshots you send us, and other information you choose to give us through surveys, interviews, feedback forms, support interactions, or beta evaluations | You |
We do not intentionally collect sensitive categories of personal information, and the Terms of Service prohibit submitting restricted data (for example, export-controlled data, payment card data, government ID numbers, or health data). If restricted data is submitted anyway, we may delete it.
If you give us personal information about someone else, you must be entitled to do so.
4. How we use information
We use information to provide, operate, maintain, secure, troubleshoot, and support the Service; authenticate users; manage invitations and workspaces; enforce access controls; investigate misuse and security incidents; maintain audit and security logs; communicate with users and Customer contacts; comply with law; enforce our agreements; and analyze usage and performance to improve the Service.
We may use aggregated or de-identified information for analytics, reliability, security, capacity planning, and product improvement where permitted by law, provided the resulting information does not identify Customer or an individual and is not reasonably capable of being used to reconstruct Customer Content.
We do not sell personal information or use it for targeted advertising.
As of the date of this Policy, SkyraExec does not send Customer Content to an external generative AI or large-language-model provider, and we do not use Customer Content to train generalized AI or machine-learning models. If that changes, we will update this Policy and, where required, provide additional notice or ask your organization to accept the change before the new processing begins. Separately, if your organization's administrator turns on agent access and a user connects an AI tool, the Service gives that tool the Customer Content the user allows, and the tool's provider handles it under its own terms.
5. How we share information
We share personal information only as described in this Policy.
Service providers: application hosting, database, authentication, file storage, email delivery, analytics, monitoring, security, and support. They process information on our behalf under agreements that require confidentiality and appropriate safeguards.
Legal and safety disclosures: we may disclose information when reasonably necessary to comply with law, legal process, court orders, protect rights or safety, investigate fraud or abuse, or protect the security of the Service.
Business transfers: if we are involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction, subject to this Policy.
6. Cookies and similar technologies
The Service uses only the cookies and similar storage needed for sign-in, session security, basic operation, and your display preferences. We use analytics from our hosting provider to measure page views and performance. We do not use advertising or cross-site tracking technologies. If we add other non-essential technologies, we will update this Policy and first give any notice or choice the law requires.
7. Retention and deletion
We retain account data, Customer Content, and related information for as long as reasonably necessary to provide and secure the Service, support beta operations, comply with law, resolve disputes, enforce agreements, and maintain appropriate backups.
During beta, we may need to migrate, reset, or discontinue environments, so you should not treat beta storage as a permanent archive. Before a planned change or shutdown that materially affects Customer Content, we will give your organization notice and, where feasible, a reasonable opportunity to export it.
When your organization asks us to delete Customer Content, or you ask us to delete your personal information under Section 9, we will complete the request within 30 days, except for information we need to keep for the purposes above, such as security and audit logs, legal holds, or records required by law. Copies in backups are removed as the backups roll off. We may keep de-identified or aggregated information that does not identify you.
8. Security
We use administrative and technical measures appropriate to the nature of the information and the beta Service, including encrypted connections (HTTPS), access controls, authentication controls, organization-scoped permissions, and security and audit logging.
No method of transmission or storage is completely secure. We cannot guarantee absolute security.
If we determine that a security incident affects your personal information or Customer Content, we will provide notice as required by applicable law and our agreement with your organization.
9. Your rights and choices
Depending on where you live and the applicable law, you may have rights to access, correct, delete, or export your personal information. To make a privacy request, contact info@inflectionpointstudio.com. We may need to verify your identity and, where applicable, confirm your relationship to an organization. If your request concerns Customer Content, we will refer it to your organization, which controls that data. We will respond within the time required by applicable law.
10. Where we process information
During the beta, SkyraExec is offered only to organizations located in the United States, for use by their personnel in the United States. We host the Service and store information in the United States.
11. Children
SkyraExec is a business software product and is not directed at children. We do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has provided personal information through the Service, contact us, and we will take appropriate steps consistent with applicable law.
12. Changes to this Policy
We may update this Policy and will change the effective date when we do. For material changes, we will notify organization administrators by email or in the Service before the change takes effect, and where the change materially expands how we use Customer Content, we will ask an administrator to accept the change on your organization’s behalf under the Terms of Service. Continued use after the effective date means the updated Policy applies to that use, except where applicable law requires a different approach.
13. Contact
Inflection Point Studio, LLC
Email: info@inflectionpointstudio.com
For privacy requests, data-protection questions, or concerns about this Policy, use the email above.