Privacy Policy

Last Updated: 2026/06/16
Effective Date: 2026/06/08
 
This Privacy Policy explains how Avlanche Pty Ltd, of 132 Bower Street, Manly, NSW, Australia (“Skippz”, “we”, “us”, or “our”), collects, uses, stores, shares, and protects personal information in connection with the Skippz platform, websites, applications, and related services (the “Service”).
 
We are based in Australia and serve customers globally. We aim to comply with the Australian Privacy Act 1988 and the Australian Privacy Principles, the EU and UK General Data Protection Regulation (“GDPR”) where it applies to you, and other applicable data protection laws.
 
For the purposes of the GDPR, Avlanche Pty Ltd is the data controller of the account and usage data described in Section 3. For Content you upload and the personal data it may contain about your own viewers or contacts, we generally act as a data processor on your behalf, as explained in Section 4.
 

1. Who This Policy Covers

This Policy applies to: account holders and their team members; visitors to our websites and apps; people who contact our support and help channels; and Viewers who access Content through players, share pages, embeds, playlists, Spotlights, or custom domains served by the Service.
 

2. Scope and Your Choices in Brief

We collect only what we need to operate, secure, bill, and improve the Service. We do not sell personal information. You can access, correct, export, or delete your information as described in Section 11.
 

3. Information We Collect

Account information. Name, email address, password (stored only in hashed form), optional profile photo, and company and billing details where you provide them.
 
Sign-in information. If you sign in with Google, we receive basic profile information from your Google account (such as your name and email address) to create and authenticate your Account. We do not receive your Google password.
 
Billing information. Payments are processed by Stripe. We receive limited transaction and subscription data (such as plan, status, and the last digits and type of card) but do not store your full card number.
 
Content and metadata. The Content you upload and create, together with related metadata such as titles, descriptions, tags, duration, folders, playback settings, visibility, and processing status. See Section 4 for our role regarding Content.
 
Usage and analytics data. Information about how the Service is used, and, when Content is viewed, data such as IP address, general location, device and browser type, and playback behaviour (for example, watch time and drop-off). This is used to provide analytics to the relevant account holder and to operate and improve the Service.
 
Support data. Information you provide when you contact support, submit a ticket, or use our help and roadmap tools.
 

4. Our Role: Controller and Processor

We are the controller of your account, billing, support, and usage data, and we decide how that information is handled, as described in this Policy.
 
For the Content you upload, including any personal data of your viewers, customers, or contacts contained within it (for example, faces or voices in videos, or data submitted through your forms), we act as a processor on your behalf. You are the controller of that data and are responsible for having a lawful basis to upload and process it, for providing any required notices to the individuals concerned, and for honouring their rights. We process Content only to provide the Service and on your instructions, including your configuration of the Service.
 
Where required, enterprise customers may enter into a separate Data Processing Addendum with us governing this processing.
 

5. How We Use Information and Legal Bases

We use personal information to: create and administer your Account; provide, encode, deliver, and secure the Service; process payments and prevent fraud; provide analytics; respond to support requests; send service, security, and billing communications; comply with legal obligations; and operate, improve, and protect the Service and our users.
 
Where the GDPR applies, our legal bases are: performance of our contract with you; our legitimate interests in operating, securing, and improving the Service; compliance with legal obligations; and, where required, your consent (for example, for certain cookies or marketing).
 
Communications. We send service, security, billing, and legal notices that are necessary to operate your Account, and you cannot opt out of these while you have an Account. We send marketing or promotional messages only where permitted, and you can unsubscribe from them at any time.
 

6. Content Processing and Technical Assets

To deliver your Content we generate and store technical assets including encoded renditions, adaptive-bitrate streams, thumbnails, hover-preview sprites, captions, and chapters. A temporary working copy of your original file may be processed on our encoding infrastructure during transcoding and is removed once encoding is complete. We retain your original file so you can download it, until you delete the video. Automated captions and chapters are generated using AI tools and may contain errors.
 

7. Cookies and Similar Technologies

We use cookies and similar technologies for essential purposes (such as keeping you signed in and securing the Service) and, where applicable, for analytics and performance.
 
The analytics and behavioural tools we use are:
  • Google Analytics 4 (GA4) — across our website and within the Skippz app, to understand usage and improve the Service.
  • Hotjar and Microsoft Clarity — on our marketing website only, to understand visitor behaviour and improve our marketing.
These tools are operated by third parties (Google, Hotjar, and Microsoft) who process the relevant data under their own privacy policies. Where required by law, we ask for your consent before setting non-essential cookies, and you can withdraw consent at any time. You can also control cookies through your browser settings, though some features may not work without them.
 

8. How We Share Information

We do not sell your personal information. We share it only as follows:
 
Service providers (subprocessors). We use trusted third parties to operate the Service, including: cloud storage and hosting providers (located in the United States); a content delivery network and edge providers; a payment processor (Stripe); AI transcription and language providers; analytics and behavioural-analytics providers (see Section 7); and customer support tooling. These providers may process personal information only to provide their services to us and under appropriate contractual safeguards. A current list of our named subprocessors is available on request at support@skippz.com.
 
At your direction. Where you connect your own payment gateway (for example, for Spotlights) or your own provider accounts (BYOK), data flows according to your configuration and those providers’ own terms.
 
Legal and safety. We may disclose information where required by law, to enforce our terms, or to protect the rights, safety, and security of Skippz, our users, or the public.
 
Business transfers. If we are involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to this Policy.
 

9. International Transfers

We are based in Australia, and our storage and several of our service providers are located in the United States. This means your information, and Content you upload, may be transferred to and processed in countries outside your own, including the United States. Where the GDPR applies, we rely on appropriate safeguards for such transfers, such as the European Commission’s Standard Contractual Clauses or an equivalent mechanism.
 

10. Data Retention

We keep personal information for as long as needed to provide the Service and for legitimate business or legal purposes.
  • Cancellation and grace period. When you cancel, your subscription ends at your cycle-end date. We then retain your Account and any Content you have not deleted for a 14-day grace period. If you do not reactivate within that period, your Account and all associated Content and data are permanently deleted and cannot be recovered. You may also delete everything immediately yourself, or request deletion at any time.
  • Deleted Content. When you delete a video, its files and associated data are removed promptly and permanently, and we do not keep backups of deleted Content.
  • Account and billing records. We may retain limited account, transaction, and tax records for as long as required by law after Account closure.
  • Encoding copies. Temporary working copies created for encoding are deleted once encoding completes.

 

11.Your Rights

Depending on where you live, you may have the right to: access the personal information we hold about you; correct inaccurate information; request deletion or restriction; object to certain processing; receive your data in a portable format; and withdraw consent where processing is based on consent.
 
To exercise these rights, contact us at support@skippz.com. Where we act as a processor for Content, requests from individuals about that Content should usually be directed to the relevant account holder, and we will assist that account holder as required.
 
If you are in the EU, EEA, or UK, you may also lodge a complaint with your local supervisory authority. If you are in Australia, you may contact the Office of the Australian Information Commissioner (OAIC).
 

12. Security

We take reasonable and appropriate measures to protect personal information, including encryption of account data at rest and access controls that prevent our staff from signing in to your Account or reading your encrypted credentials. We support two-factor authentication, which we recommend you enable. No method of transmission or storage is completely secure, and you are responsible for safeguarding your own credentials.
 
If we become aware of a data breach that is likely to result in a risk to your rights, we will notify the relevant authorities and affected individuals as required by applicable law, including Australia’s Notifiable Data Breaches scheme and the GDPR.
 

13. Children

The Service is not directed to, and may not be used by, children under 18 (or the age of majority in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.
 

14. Changes to This Policy

We may update this Policy from time to time. The current version will always be available on our website, and we will notify you of material changes by email or in-app notice.
 

15. Contact Us

Avlanche Pty Ltd 132 Bower Street, Manly, NSW, Australia Privacy and data requests: support@skippz.com Copyright and illegal content: copyrights@skippz.com