Account and Data Deletion

Sky is a business platform, not a consumer product. There is no sign-up. Nobody can create a Sky account for themselves, and the Sky by SkyFirst mobile app does not register users — it only signs in accounts that already exist.

Accounts come into existence in one way:

1. A company signs a contract with SPECIAL OPTION, LDA (trading as Sky First Labs). We provision that company's workspace and its first administrator.
2. That administrator creates the remaining accounts and decides who keeps one.

So your Sky account belongs to your employer, not to you — in the same way as your work email address. That determines who can delete it.

Ask your workspace administrator. They can remove your account, which revokes your access and deletes your profile, credentials, sessions, push tokens, and device identifiers. This is usually whoever manages IT or operations at your company.

If you cannot identify or reach your administrator, write to info@skyfirstlabs.com from your work address. For the content inside a workspace, your employer is the data controller and we act on their instructions, so we will pass your request to them and support them in acting on it. We will confirm to you that we have done so.

For the account, device, and diagnostic data where we are the controller, you can exercise your erasure right with us directly at the same address.

Only the customer organisation can request this, through an administrator or the signatory of the contract. When a contract ends, or when a customer asks us to, we delete the workspace and the business data in it in accordance with the Data Processing Agreement signed with that customer.

Deleting a workspace removes every account in it. It is permanent, and we cannot reverse it once actioned.

• Database backups — deleted data persists in encrypted backups for up to 30 days, then is overwritten. It is not restored into the live service except in a disaster recovery event.
• Security and application logs — retained for 90 days for security, abuse prevention, and fault investigation.
• Accounting and invoicing records — we keep the records that Portuguese tax and accounting law requires us to keep, for the period that law sets. These concern the contracting organisation, not any individual's use of Sky.

These periods match section 08 of our Privacy Policy.

• Removal by an administrator takes effect immediately.
• Requests sent to us are acknowledged within 5 working days and completed within 30 days, as required by Article 12(3) GDPR.
• Backup copies are overwritten within a further 30 days.

Erasure is one of several rights you hold under Articles 15 to 22 GDPR. You may also request access, rectification, restriction, or portability, or object to processing. Write to info@skyfirstlabs.com. Where your employer is the controller, we will route the request to them. You can also lodge a complaint with the Portuguese supervisory authority, Comissão Nacional de Proteção de Dados (CNPD), or with the authority where you live.