Introduction

Ikonomos Inc., doing business as Skyvern ("Company," "we," "us," or "our"), respects your privacy and is committed to protecting it through our compliance with this policy.

This policy describes the types of information we may collect from you or that you may provide when you use our website skyvern.com (our "Website") and our AI-powered browser automation platform and services (collectively, the "Services"), and our practices for collecting, using, maintaining, protecting, and disclosing that information.

This policy applies to information we collect:

On this Website.
Through our Services, including automation task payloads, screenshots, and session recordings.
In email, text, and other electronic messages between you and our Company.
Through our API and any software applications provided by us.

It does not apply to information collected by:

Us offline or through any other means, including on any other website operated by Company or any third party; or
Any third party, including through any application or content (including advertising) that may link to or be accessible from or through the Website or Services.

Please read this policy carefully to understand our policies and practices regarding your information and how we will treat it. If you do not agree with our policies and practices, your choice is not to use our Website or Services. By accessing or using this Website or our Services, you agree to this privacy policy. This policy may change from time to time (see Changes to Our Privacy Policy). Your continued use of this Website or Services after we make changes is deemed to be acceptance of those changes, so please check the policy periodically for updates.

Children Under the Age of 16

Our Website and Services are not intended for children under 16 years of age. No one under age 16 may provide any information to or on the Website or through the Services. We do not knowingly collect personal information from children under 16. If you are under 16, do not use or provide any information on this Website or through any of its features or our Services. If we learn we have collected or received personal information from a child under 16 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 16, please contact us at support@skyvern.com.

Residents of certain states under 13, 16, or 18 years of age may have additional rights regarding the collection and sale of their personal information. Please see Your State Privacy Rights for more information.

Information We Collect About You and How We Collect It

We collect several types of information from and about users of our Website and Services, including information:

By which you may be personally identified, such as name, postal address, email address, telephone number, or any other identifier by which you may be contacted online or offline ("personal information");
About your internet connection, the equipment you use to access our Website or Services, and usage details; and
Sensitive personal information that you provide as part of automation task payloads (see Sensitive Personal Information below).

We collect this information:

Directly from you when you provide it to us, including through automation task payloads.
Automatically as you navigate through the site or use our Services. Information collected automatically may include usage details, IP addresses, and information collected through cookies and other tracking technologies.
From third parties, for example, our business partners.

Information You Provide to Us

The information we collect on or through our Website and Services may include but is not limited to:

Information that you provide by filling in forms on our Website or when creating an account. This includes information provided at the time of registering to use our Services, subscribing to our service, or requesting further services. We may also ask you for information when you report a problem with our Website or Services.
Records and copies of your correspondence (including email addresses), if you contact us.
Your responses to surveys that we might ask you to complete for research purposes.
Details of transactions you carry out through our Services and of the fulfillment of your orders. You may be required to provide financial information before placing an order for our Services.
Automation task payloads, which may include form data, login credentials, and other information necessary to complete the automated workflows you request (see Sensitive Personal Information below).

Sensitive Personal Information

Depending on the automation tasks you request, you may provide us with sensitive personal information as defined under applicable privacy laws. This may include but is not limited to:

Government-issued identification numbers, including Social Security numbers, passport numbers, and national ID numbers;
Account login credentials, including usernames and passwords for third-party websites and services;
Financial information, including credit card numbers and billing information;
Immigration or citizenship status information;
Personal photographs, including passport photos; and
Health-related information, if provided in connection with insurance or visa application automation.

We collect and process sensitive personal information solely to perform the automation services you request. We do not use facial recognition technology on any photographs you provide.

Please note that screenshots captured during automation may display sensitive information you have entered into forms. These screenshots are processed by our LLM providers to enable automation.

Google User Data

Skyvern offers optional integrations with Google services — Gmail, Google Drive, and Google Sheets — that you may connect to your Skyvern account using Google OAuth. If you connect one of these integrations, we access only the Google user data needed to provide the specific feature you enable:

Gmail (read-only): we search and read email messages in your connected mailbox to retrieve information needed by the automations you configure — for example one-time passcodes and verification codes, or messages matching search criteria you define (such as folder, sender, subject, or a description of the email you are looking for). Message content may be processed by our large language model providers solely to identify and extract the information your automation requests; it is not used to train models. We do not send email, modify or delete messages, or use your email content for any other purpose.
Google Drive: we upload files produced by your automation workflows to the Drive folders you designate, and read file and folder metadata needed to locate those folders. Because you can designate any existing folder (for example by pasting a folder link or ID), connecting this integration grants Skyvern full access to the files in your Google Drive; we use that access only for the uploads and folder lookups described here, and do not read, modify, or delete your other Drive content.
Google Sheets: we read and write spreadsheet data in spreadsheets you select or that the integration creates on your behalf, to import inputs and export results of your automation workflows. To let you choose a spreadsheet, we also list the names and IDs (file metadata, not contents) of spreadsheets in your My Drive and shared drives; we do not read the contents of spreadsheets you do not select.

How we protect and retain this data. Google OAuth tokens are encrypted at rest and all data is transferred over encrypted (TLS) connections. We retain Google user data only as long as needed to provide the feature. You can disconnect a Google integration at any time from your Skyvern settings; upon disconnection we revoke our access with Google and delete the stored credentials. You may also revoke Skyvern's access at any time via your Google Account security settings at myaccount.google.com/permissions.

Limited Use. Skyvern's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, do not sell it, and do not allow humans to read it except with your explicit permission, when required for security or legal compliance, or when the data has been aggregated and anonymized.

Information We Collect Through Automatic Data Collection Technologies

As you navigate through and interact with our Website and Services, we may use automatic data collection technologies to collect certain information about your equipment, browsing actions, and patterns, including:

Details of your visits to our Website and use of our Services, including traffic data, location data, logs, and other communication data and the resources that you access and use.
Information about your computer and internet connection, including your IP address, operating system, and browser type.

The information we collect automatically may include personal information, or we may maintain it or associate it with personal information we collect in other ways or receive from third parties. It helps us to improve our Website and Services and to deliver a better and more personalized service, including by enabling us to estimate our audience size and usage patterns, store information about your preferences, speed up your searches, and recognize you when you return to our Website.

The technologies we use for this automatic data collection may include:

Cookies (or browser cookies). A cookie is a small file placed on the hard drive of your computer. You may refuse to accept browser cookies by activating the appropriate setting on your browser. However, if you select this setting you may be unable to access certain parts of our Website or Services. Unless you have adjusted your browser setting so that it will refuse cookies, our system will issue cookies when you direct your browser to our Website.
Web Beacons. Pages of our Website and our emails may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit the Company, for example, to count users who have visited those pages or opened an email and for other related website statistics.

Do Not Track Disclosure

We also may use these technologies to collect information about your online activities over time and across third-party websites or other online services (behavioral tracking).

Some web browsers permit you to broadcast a signal to websites and online services indicating a preference that they "do not track" your online activities. At this time, we do not honor such signals and we do not modify what information we collect or how we use that information based upon whether such signal is broadcast or received by us.

However, you can opt out of behavioral tracking through the following methods:

Adjusting your browser settings to refuse cookies
Managing your privacy preferences in your account settings

Data Generated During Service Execution

When you use our automation Services, we generate and store the following data:

Screenshots of each automation step, which you can view in your dashboard;
Video recordings of browser sessions; and
Diagnostic and logging data.

Third-Party Use of Cookies and Other Tracking Technologies

Some content or applications on the Website are served by third parties, including PostHog (analytics) and Google (GTM/Google Ads), Apollo, and RB2B (marketing). These third parties may use cookies alone or in conjunction with web beacons or other tracking technologies to collect information about you when you use our website.

Based on our most recent scan, our Website uses the following categories of cookies:

Necessary cookies
Analytics cookies, including PostHog.
Marketing cookies and tracking technologies, including Google (GTM/Google Ads), Apollo, and RB2B.

The information these third parties collect may be associated with your personal information, or they may collect information about your online activities over time and across different websites and other online services.

We do not control these third parties' tracking technologies or how they may be used. If you have any questions about cookies or tracking technologies, you should contact the responsible provider directly or email us at support@skyvern.com.

Managing Your Preferences. Consent for analytics and marketing cookies is collected through our cookie consent banner. You can change or withdraw your consent at any time using the banner's Manage Preferences control. You can also set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent. If you disable or refuse cookies, please note that some parts of this site may then be inaccessible or not function properly.

How We Use Your Information

We use information that we collect about you or that you provide to us, including any personal information:

To present our Website and its contents to you.
To provide you with our Services, including performing the automation tasks you request.
To provide you with information, products, or services that you request from us.
To fulfill any other purpose for which you provide it.
To carry out our obligations and enforce our rights arising from any contracts entered into between you and us, including for billing and collection.
To notify you about any material changes to our Website or any products or services we offer or provide through it.
For analytics purposes to improve our Services.
To train and improve our machine learning models using anonymized data.
In any other way we may describe when you provide the information.
For any other purpose with your consent or as allowed under applicable law.

Disclosure of Your Information

We may disclose anonymized information about our users, and information that does not identify any individual, without restriction.

We may disclose personal information that we collect or you provide, that does not individually identify you, as described in this privacy policy:

To our subsidiaries and affiliates.
To contractors and/or service providers if applicable.
To a buyer or other successor in the event of a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of Ikonomos Inc.'s assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which personal information held by Ikonomos Inc. about our Website and Services users is among the assets transferred.
To fulfill the purpose for which you provide it.
For any other purpose disclosed by us when you provide the information.
With your consent.

We may also disclose your personal information:

To comply with any court order, law, or legal process, including to respond to any government or regulatory request.
To enforce or apply our Terms of Use and other agreements, including for billing and collection purposes.
If we believe disclosure is necessary or appropriate to protect the rights, property, or safety of Ikonomos Inc., our customers, or others.

Data Sharing

To provide our Services, we share data with the following:

LLM Providers: We send screenshots to LLM providers (including OpenAI, Anthropic, Google Gemini, Azure OpenAI, and AWS Bedrock) for AI-powered visual analysis and automation processing. These screenshots may contain visible user data, including sensitive information you have entered into forms during automation tasks.
Cloud Infrastructure: We use AWS for cloud infrastructure and data storage.
Proxy Network Providers: We use residential proxy networks to perform automation tasks.

Choices About How We Use and Disclose Your Information

We strive to provide you with choices regarding the personal information you provide to us. We have created mechanisms to provide you with the following control over your information:

Tracking Technologies. You can set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent. If you disable or refuse cookies, please note that some parts of this site may then be inaccessible or not function properly.
Promotional Offers from the Company. If you do not wish to have your contact information used by the Company to promote our products or services, you can opt out at any time by sending us an email stating your request to support@skyvern.com.

Residents of certain states may have additional personal information rights and choices. Please see Your State Privacy Rights for more information.

Accessing and Correcting Your Information

You may send us an email at support@skyvern.com to request access to, correct, delete any personal information that you have provided to us or exercise any other individual privacy rights in your jurisdiction. We may not accommodate a request to change information if we believe the change would violate any law or legal requirement or cause the information to be incorrect.

Residents of certain states may have additional personal information rights and choices. Please see Your State Privacy Rights for more information.

Your State Privacy Rights

State consumer privacy laws may provide their residents with additional rights regarding our use of their personal information.

California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Montana, Oregon, Tennessee, Texas, Utah, Virginia and other applicable states that provide (now or in the future) their state residents with rights to:

Confirm whether we process their personal information.
Access and delete certain personal information.
Correct inaccuracies in their personal information, taking into account the information's nature and processing purpose (excluding Iowa and Utah).
Data portability.
Opt-out of personal data processing for targeted advertising (excluding Iowa), sales, or profiling in furtherance of decisions that produce legal or similarly significant effects (excluding Iowa and Utah).
Either limit (opt-out of) or require consent to process sensitive personal data.

The exact scope of these rights may vary by state. To exercise any of these rights please email us at support@skyvern.com.

California Shine the Light Law

California Civil Code Section 1798.83 permits users of our Website and Services who are California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes.

We do not share personal information with third parties for their direct marketing purposes as defined by this law. However, California residents may request information about our compliance with this law by contacting us at support@skyvern.com.

Any such request must include "California Shine the Light Request" in the subject line and include your name, street address, city, state, and ZIP code. Please note that we are only required to respond to one request per customer each year, and we are not required to respond to requests made by means other than through the provided email address.

Data Security

We have implemented measures designed to secure your personal information from accidental loss and from unauthorized access, use, alteration, and disclosure.

The safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to certain parts of our Website or Services, you are responsible for keeping this password confidential. We ask you not to share your password with anyone.

Unfortunately, the transmission of information via the internet is not completely secure. Although we do our best to protect your personal information, we cannot guarantee the security of your personal information transmitted to our Website or through our Services. Any transmission of personal information is at your own risk. We are not responsible for circumvention of any privacy settings or security measures contained on the Website or within the Services.

Data Retention

We retain your data for as long as necessary to provide our Services and as required by applicable law. You may request deletion at any time by contacting support@skyvern.com.

Changes to Our Privacy Policy

It is our policy to post any changes we make to our privacy policy on this page. If we make material changes to how we treat our users' personal information, we will notify you by email to the primary email address specified in your account and/or through a notice on the Website home page. The date the privacy policy was last revised is identified at the top of the page. You are responsible for ensuring we have an up-to-date active and deliverable email address for you, and for periodically visiting our Website and this privacy policy to check for any changes.

Contact Information

To ask questions or comment about this privacy policy and our privacy practices, contact us at:

support@skyvern.com