Privacy policy
What we collect, why, who helps us run Skimbly, and how to delete it all.
Last updated October 24, 2026
Who we are
Skimbly is operated by Wensity Private Limited, a company registered in India (CIN U62013UW2026PTC256410) with its registered office in Noida, Uttar Pradesh. We decide how your data is used, so we are its controller (data fiduciary under India's Digital Personal Data Protection Act). Questions about privacy go to hello@skimbly.com; we send the full registered address on request.
This policy covers skimbly.com and the Skimbly app. It is written to be read, so if anything is unclear, ask us.
What we collect
- Your account: your email address (you log in with a link sent to it), your name and your time zone.
- What you write and upload: posts, drafts, follow-ups, templates, signatures, tags and the images and videos you attach.
- Connected accounts: the public profile of each social account you connect (name, handle, picture) and the tokens that let us post for you. For Bluesky, that is an app password you create. Tokens and app passwords are encrypted (AES-GCM) before they are stored.
- Usage: counters for your plan's limits, like posts, AI rewrites and X credits used this month, and a record of what happened to each post (scheduled, posted, failed).
- Billing status: your plan and whether your subscription is active. We never see or store card details: Dodo Payments handles payments.
- Basic technical logs: our hosting keeps short-lived request logs (like IP address and browser) to keep the service secure and working. These logs are deleted after a few days.
Why we use it
- To run the service: log you in, save your posts and show your calendar.
- To publish what you schedule, at the time you pick, to the accounts you pick.
- To send service emails: when a post fails, when an account needs reconnecting, and a weekly summary. You can turn the weekly summary and failure emails off in Settings.
- To manage your plan and billing.
- To keep Skimbly secure and fix problems.
Legal basis
We use your data to provide the service you signed up for (performance of a contract), to keep it secure and improve it (legitimate interests), and to meet legal duties such as tax records (legal obligation).
Who helps us run Skimbly
These companies process data for us, only to provide their part of the service:
- Supabase: database and login, hosted in Singapore.
- Cloudflare: hosting (Workers) and file storage for your images and videos (R2).
- Resend: sending service emails.
- Groq: AI help. Only the text you send when you ask for a rewrite goes to Groq, nothing else.
- Dodo Payments: our Merchant of Record. Dodo sells you the subscription, takes payment and handles tax.
- The networks you connect: LinkedIn, Meta (for Threads, Instagram and Facebook), X and Bluesky receive the posts you schedule to them.
Some of them process data outside your country. Where the law requires it, they do so under safeguards such as standard contractual clauses.
We do not sell your data, and we do not share it with advertisers.
Your social network data
We only post what you schedule. We do not read your feed, your messages, your followers or other people's posts. We use each network's access only to publish your posts and follow-ups, show the account you connected, and check that the connection still works.
We use LinkedIn's sign-in to get your name, profile picture and a token to post on your behalf. We publish the posts you schedule to your profile. We do not access your connections, messages or feed.
Meta: Threads, Instagram and Facebook
For Threads, we receive your profile (username, name, picture) and permission to publish posts and replies. For Instagram, we work with professional (Business or Creator) accounts: we receive the account's profile and permission to publish posts and comments. For Facebook, you choose which Pages to connect in Facebook's own dialog: for each one we receive its name, picture and a Page token to publish the posts you schedule to it. We do not read your personal profile, friends, direct messages, insights or other people's content. You can remove Skimbly's access at any time in Meta's settings, and see our data deletion instructions.
X
We receive your profile and permission to post and reply. We do not read your timeline or messages.
Bluesky
You connect with an app password you create. We use it only to post and reply. You can revoke it in Bluesky's settings at any time.
Disconnecting an account in Skimbly deletes its tokens from our database.
How long we keep it
We keep your data while you have an account. You can delete your account at any time in Settings, Delete account. That removes your posts, media, connected accounts and their tokens, and your profile.
Images and videos you upload but never attach to a post are cleared after a day.
Database backups may hold deleted data for up to 30 days, until they expire. Payment and tax records are kept by Dodo Payments as tax law requires. See data deletion for the details.
Your rights
You can ask us to:
- show you the data we hold about you, and send you a copy;
- correct anything that is wrong (most of it you can change yourself in Settings);
- delete your data (or do it yourself in Settings);
- stop or limit some uses of it.
Email hello@skimbly.com and we will reply within 30 days. You can also complain to your local data protection authority.
Children
Skimbly is not for anyone under 18. If you think a child has given us data, email hello@skimbly.com and we will delete it.
Changes to this policy
If we make important changes, we will email you before they take effect. The date at the top shows the last change.
Contact
Questions, requests or worries about your data: hello@skimbly.com.
Grievance officer (India): Parth Sharma, hello@skimbly.com. We acknowledge complaints within 48 hours and resolve them within 30 days.