Privacy Policy
Who We Are
This Privacy Policy ("Policy") applies to app.skoros.ai and is operated by Skoros, LLC ("Company," "we," "us," or "our"). The SKOROS platform is a cryptocurrency token analytics and data intelligence software platform. By using the platform, you consent to the data practices described in this Policy.
I. Information We Collect
We may collect the following personally identifiable information:
- First and last name
- Email address
- Payment and billing information (collected when you purchase a subscription)
The following information is collected automatically for every session and HTTP request:
- IP address (used for rate limiting, geolocation, fraud screening, and sanctions compliance)
- Browser type and version (User-Agent string, truncated to 512 characters)
- Language preference and HTTP headers (Accept-Language, Origin, Referer)
- Geographic country, derived from your IP address via IPQualityScore
- Request metadata (timestamps, request IDs, proxy chain)
- Authentication tokens necessary to maintain your session
- Usage data (pages visited, features used)
What we do not collect: We do not capture, store, or transmit the values of cookies sent with your requests. We do not fingerprint your device beyond the standard HTTP headers listed above. We do not use third-party advertising trackers.
We do not knowingly collect personally identifiable information from children under the age of 13. If you are under 13, you must obtain your parent or guardian's permission before using the platform.
We do not collect biometric data.
II. How We Use Your Information
We use your personal information to:
- Authenticate your sessions and maintain account access
- Provide token analytics and risk scoring services
- Personalize your experience and improve platform functionality
- Send account notices, confirmations, and service communications
- Process subscription payments and enforce billing agreements
- Prevent fraud, abuse, and unauthorized access
- Screen for sanctions compliance (see Section IV)
- Comply with applicable laws, regulations, legal processes, or governmental requests
- Notify you of material changes to the platform or this Policy
We may also use your information to communicate with you about other products or services available from the Company.
III. Sharing Information with Third Parties
We do not sell, rent, or lease your personal information to third parties. We do not share your data for advertising or marketing purposes. We do not sell biometric data.
We may share data with trusted service providers solely to operate the platform (see Section V). All such providers are prohibited from using your personal information for any purpose other than providing services to the Company and are required to maintain confidentiality.
We may disclose your personal information without notice if required by law or in good-faith belief that such action is necessary to: (a) comply with legal process; (b) protect the rights or property of the Company; or (c) protect the personal safety of users or the public.
IV. Email Vetting, Fraud Screening, and Sanctions Compliance
When you submit an access request or create an account, we run three automated checks:
Email validation: Your email address is shared with IPQualityScore (ipqualityscore.com) to verify deliverability and detect disposable, honeypot, or spam-trap addresses.
IP reputation: Your IP address is shared with IPQualityScore to evaluate VPN, proxy, Tor, datacenter, and bot indicators.
Sanctions screening: Geographic country is derived from your IP address via IPQualityScore. This derived country code is checked against the U.S. Treasury OFAC comprehensive sanctions list and related export-control sanctions. Submissions originating from sanctioned jurisdictions are refused.
IPQualityScore holds GDPR, ISO, and SOC compliance certifications. Data is transmitted over TLS. We retain the vetting result alongside your access request; raw provider responses are deleted after 180 days.
We retain limited audit records of refused submissions (email attempted, IP address, derived country, User-Agent, and timestamp) for the legally required retention period — typically 7 years per U.S. Treasury BSA record-keeping guidance. These audit records may not be deleted on request during the retention window. See Section VIII (Your Rights) for details.
V. Security and Third-Party Service Providers
We employ industry-standard administrative, technical, and physical safeguards to protect your personal information from unauthorized access, acquisition, disclosure, or use.
The following third-party providers are used to operate and secure the platform:
- AWS (Amazon Web Services) — cloud infrastructure and data storage (United States)
- Stripe — payment processing
- Amazon Cognito — user authentication
- IPQualityScore — fraud detection and sanctions screening
No data transmission over the Internet can be guaranteed to be 100% secure. While we strive to protect your personal information, you acknowledge that security and privacy limitations inherent to the Internet are beyond our control, and the security of information exchanged through this platform cannot be guaranteed absolutely.
VI. Data Breach Notification
In the event of a security incident involving personal information, the Company will promptly investigate and provide notice to affected individuals and, where required, to applicable regulatory authorities, in the manner and within the timeframes prescribed by applicable law.
VII. Data Storage and Retention
All data is stored on AWS infrastructure located in the United States.
Your account data is retained for as long as your account is active. If you delete your account or request data removal, we will delete your information promptly, subject to the exceptions below.
Sanctions audit records (in our compliance records) are retained for 7 years from the date of the refused submission, per U.S. Treasury BSA record-keeping guidance. These records contain only the email attempted, IP address, derived country, User-Agent, and timestamp — no other personal data.
We may also retain your information as necessary to: complete transactions; detect or prosecute fraudulent or illegal activity; debug platform errors; comply with California Electronic Communications Privacy Act; fulfill legal obligations; or as otherwise required by law.
VIII. Your Rights
Access, correction, and deletion: You may request access to, correction of, or deletion of your personal data at any time by emailing support@skoros.ai. We will process your request and confirm once your data has been addressed.
Legal-retention exception: Certain records, including sanctions audit logs, are subject to legally mandated retention periods and cannot be deleted on request until the retention period expires. We will identify any such record in our response and indicate the applicable expiration date.
California residents (CCPA): You have the right to know what personal information we collect, how it is used, and to request deletion. We do not sell your personal information. To exercise your rights under the CCPA, contact us at support@skoros.ai.
IX. Cookies and Local Storage
SKOROS stores authentication tokens in your browser's localStorage for session management. We do not use third-party tracking cookies.
X. Google OAuth and Third-Party Account Connection
When you sign in with Google, we receive only your email address and basic profile information (name). We do not access your Google account data beyond what is required for authentication.
By connecting your SKOROS account to a third-party account, you consent to the continuous release of information about you in accordance with your privacy settings on those third-party sites. If you do not want information about you shared in this manner, do not use this feature.
You may disconnect your Google account access at any time by visiting your Google Account security settings at myaccount.google.com and revoking SKOROS from the list of connected apps. You may also contact us at support@skoros.ai for disconnection assistance.
XI. Email Communications
We may contact you via email to provide account notices, confirmations, alerts, and service-related communications.
If you would like to stop receiving marketing or promotional emails, you may opt out by clicking the unsubscribe link included in any such email, or by contacting us directly at support@skoros.ai.
XII. Changes to This Policy
We reserve the right to update this Policy from time to time. When changes are material, we will notify you via email to the primary address on your account and/or by prominent notice on the platform. Your continued use of the platform after such changes constitutes your acknowledgment and agreement to the updated Policy.
XIII. Contact
Questions or requests regarding this Policy should be directed to:
Skoros, LLC
4140 Oceanside Blvd, Suite 159-1420
Oceanside, California 92056
Email: support@skoros.ai
Phone: 442-444-0090