Effective date: 1 January 2026 · Data controller: Burilabs, Christoph-Wagner-Str. 25, 74405 Gaildorf, Germany · Contact: [email protected]

1. Scope

This policy describes how SkyPrime (a brand operated by Burilabs, "we") processes personal data when you use skyprime.io and any sub-domain (voice.skyprime.io, dataqueen.skyprime.io), our mobile apps (KeyFlair, Vault OTP) and our enterprise products (Skyla, ORION, KomplianZ360, DataQueen, BuriOS, BuriTV, SkyPrime Marine OS, AeroPersonal OS). Processing complies with the EU GDPR and the German BDSG.

2. What we collect

Website & marketing: page views, IP-derived country, UTM parameters — via privacy-preserving analytics (no cross-site cookies). Contact forms collect the data you submit (name, email, organisation, message). Enterprise products collect the data you configure them to process under your DPA. KeyFlair vaults and Vault OTP seeds are stored client-side and end-to-end encrypted — we never see plaintext.

3. Purpose & legal basis

We process personal data to deliver the products you request (Art. 6(1)(b) GDPR), to comply with statutory obligations such as LkSG and NIS2 reporting (Art. 6(1)(c)) and based on your consent for analytics and product communications (Art. 6(1)(a)). You can withdraw consent at any time via the cookie banner or by emailing [email protected].

4. Data residency & retention

Production data is hosted in Frankfurt and Falkenstein (EU). We do not transfer personal data outside the EU/EEA unless contractually required and covered by SCCs. Default retention: 24 months for contact data, lifetime of the contract for enterprise tenants, plus statutory archival periods.

5. AI processing

Sky XT7 (our proprietary LLM) and ORION run on our own infrastructure. We do not train foundation models on customer data unless you sign a specific opt-in. Inference logs are retained 30 days for safety and quality assurance, then purged.

6. Your rights

You have the right to access, rectify, erase, restrict, and port your personal data, and to object to processing. Direct requests to [email protected]. You may also lodge a complaint with the Baden-Württemberg data protection authority.