This Privacy Policy explains how Penstairs Labs (“we”, “us” or “our”) collects, uses and protects personal data when you use SkillFlow and this website. We handle personal data in line with Singapore’s Personal Data Protection Act 2012 (PDPA) and other laws that apply to us.
What stays on your computer
SkillFlow is a desktop application. Your workflows, task files, outputs and local conversation history are stored on your own computer. When you use your own Claude Code or Codex account, requests go from your computer directly to that provider under your account and its privacy terms.
Data we collect
- Account data: name, email address, sign-in identifiers and the profile details you choose to show.
- Billing data: plan, orders, invoices, credit balance and transaction records. Card details are handled by our payment processors; we do not store full card numbers.
- Usage and metering data: for hosted AI usage, the model used, token counts, credits charged, timestamps and request status, so we can bill accurately and prevent abuse.
- Content sent to hosted AI: prompts and files included in SkillFlow Claw requests are processed to generate a response and passed to our AI model providers for that purpose. We do not use your content to train AI models.
- Published content: works, showcase sites and marketplace listings you choose to publish, which are visible to others.
- Connections: when you connect a third-party account, we store the authorization token in encrypted form. Data from that service is read on demand by the plugin on your computer and is not copied into our databases.
- Technical data: app version, operating system, IP address and diagnostic logs you choose to send.
- Communications: information you give us through our contact form or when you book a call.
How we use data
- to provide, operate and secure the Service;
- to process payments, meter usage and calculate creator revenue shares;
- to answer support requests and send service notices;
- to understand aggregate product usage and improve the Service;
- to detect fraud and abuse, and to meet legal obligations.
International transfers
Our service providers may process data outside Singapore. When they do, we take steps required by the PDPA to make sure your data receives a comparable standard of protection.
Retention and security
We keep personal data for as long as your account is active and as needed to provide the Service. We keep billing and transaction records for the periods required by law. We protect data with access controls, encryption of sensitive credentials and other reasonable security measures.
Your choices and rights
You can ask to access or correct your personal data, withdraw consent, or delete your account by submitting our contact form. We will respond within 30 days. Withdrawing consent may mean we can no longer provide parts of the Service.
Children
The Service is not intended for anyone under 18, and we do not knowingly collect personal data from children.
Changes and contact
We will post updates to this Policy on this page and notify you of material changes. For privacy questions or requests, contact Penstairs Labs through our contact form. See also our Terms of Service.