Privacy policy

Who we are

SkyCanvass is a contractor property-intelligence product operated by Onyx, Inc. (“SkyCanvass”, “we”, “us”). We provide property reports, storm event history, building-code reference packets, photo packets, and roof measurement packets to roofing and restoration contractors.

This policy explains what information we collect when you use skycanvass.com and the SkyCanvass apps, how we use it, who we share it with, and the choices you have. It applies to account holders and to visitors of our public site.

Information we collect

Account information you provide: your name, email address, company name, and phone number. You give us this when you create an account, contact support, or update your profile.

Property lookups you perform: the addresses and parcels you search, the reports and packets you generate, and any notes, projects, or photos you attach to them. This is the working content of your account.

Payment information: when you subscribe or buy credits, our payment processor (Stripe) collects and processes your card details. SkyCanvass never receives or stores full card numbers — we keep only a Stripe customer reference and the last four digits and card brand that Stripe returns for display.

Usage and device data: pages and product surfaces you view, server-function calls you make, the features you use, and error and performance events. We collect this through our analytics and error-monitoring tools to operate, secure, and improve the product.

Communications: support requests, feedback, and the transactional emails we send (and whether they were delivered).

How we use your information

To provide the product: run your property lookups, generate reports and packets, store your projects, and sync your apps.

To bill your account: process subscriptions and credit purchases through Stripe and send receipts.

To support you: respond to requests, troubleshoot issues, and send service notices about your account or material changes to this policy.

To secure and improve the product: detect and prevent abuse, debug errors, measure performance, and understand which features are used so we can make them better.

We do not use your property lookups or account content to train third-party AI models, and we do not use managed-AI vendors that retain your prompts or content.

We do not sell your personal information

SkyCanvass does not sell or rent your personal information, and we do not share it for cross-context behavioral advertising. We have not done so in the preceding twelve months.

We share data only with the service providers (“subprocessors”) listed below, who process it on our behalf under contract, and only as required by law or to protect rights and safety.

Service providers (subprocessors)

We use a small set of third-party providers to run SkyCanvass. Each processes only the data needed for its function:

Stripe — payment processing. Receives your billing details and card information directly; we never see full card numbers.

Hetzner Online GmbH — cloud hosting and database infrastructure (data centers in the United States and the European Union, Germany). Stores your account data and the content you create.

Cloudflare, Inc. — object storage (R2) for files you upload and the reports and packets you generate, plus content delivery for our site.

PostHog, Inc. — product analytics and session replay, used to understand product usage and diagnose UX problems.

Sentry (Functional Software, Inc.) — application error and performance monitoring.

Resend (Plus Five Five, Inc.) — delivery of transactional email such as receipts, password resets, and account notices.

We do not add new subprocessors that receive personal information without updating this list.

Cookies and analytics

We use first-party cookies for authentication and session management, scoped to .skycanvass.com. These are required for the product to work.

We use PostHog for product analytics and session replay. Session replay reconstructs how users move through the app to help us fix usability issues; we configure it to mask input fields and exclude sensitive content from capture. We use Sentry to capture error and performance data.

We do not run third-party advertising cookies or ad-network trackers.

Data retention

We retain your account data and the content you create for as long as your account is active, and for a short period afterward to handle billing, support, and legal obligations.

Backups are retained for 90 days. When you delete content or close your account, we purge the associated records from our active systems and they age out of backups within that window.

Analytics and error data are retained according to each provider's standard retention period and are not kept longer than needed for the purposes described above.

Your rights and choices

Access and portability: you can export a copy of your account data from your account settings, or request a copy by emailing support@skycanvass.com.

Correction: update your account and profile information from your account settings, or ask us to correct it.

Deletion: you may request access to, or deletion of, your data at support@skycanvass.com. We will complete verified deletion requests within 30 days, subject to legal retention requirements.

Analytics opt-out: turn off product analytics from your account settings under Privacy.

Depending on where you live, you may have additional rights under laws such as the California Consumer Privacy Act (CCPA/CPRA) or the EU/UK General Data Protection Regulation (GDPR) — including the rights to know, access, correct, delete, and not be discriminated against for exercising them. We honor these rights for all users regardless of location. You will not be charged a different price for exercising any privacy right.

For EU/UK users, our lawful bases for processing are: performance of our contract with you (providing the product and billing), our legitimate interests (securing and improving the product), and your consent where required (such as optional analytics).

How to exercise your rights

Email support@skycanvass.com with your request. We may need to verify your identity before acting on it, and we will respond within the timeframe required by applicable law.

If we ever decline a request, we will explain why, to the extent the law allows.

Data security

We protect your information with encryption in transit, access controls, and infrastructure we operate directly rather than through managed-agent vendors that retain content. No method of transmission or storage is perfectly secure, but we work to protect your data and to limit who can access it to what their role requires.

International data transfers

Our infrastructure provider operates data centers in the United States and the European Union. Depending on your location and our configuration, your information may be processed in either region. Where required, we rely on appropriate safeguards for cross-border transfers, such as standard contractual clauses.

Children

SkyCanvass is a business tool intended for use by contractors and is not directed to children. We do not knowingly collect personal information from anyone under 16.

Changes to this policy

We may update this policy as the product and our practices evolve. When we make material changes, we will update the effective date and, where appropriate, notify account holders. Continued use of SkyCanvass after a change means you accept the updated policy.

Not legal or claims advice

SkyCanvass provides property data, storm event history, and building-code reference material. It is a documentation and intelligence tool, not a legal, claims, or insurance service. Nothing in our reports or this policy is legal advice, a coverage determination, or claims advice. Building codes and data we surface are reference material — verify them with the authority having jurisdiction (AHJ) before relying on them.

Contact us

Privacy questions or requests: support@skycanvass.com.

Onyx, Inc., operator of SkyCanvass.