Legal
Privacy Policy
Last updated 16 October 2026. This policy explains what personal information SKAi Entertainment collects, why we collect it and the choices you have. SKAi Entertainment is operated by African Skyblue Technologies and Investments Pty Ltd.
What we collect
We only collect what we need to run an AI entertainment platform: an account, a profile, the media you publish and an understanding of how the service is used.
Account data
Created through Supabase Auth: your email address, authentication identifiers, hashed credentials and the sign-in method you chose.
Profile data
Display name, handle, avatar, banner, bio, country, social links and anything else you choose to add to your public profile.
Uploaded media metadata
Titles, descriptions, artwork, audio and video files, transcripts, tags, timestamps and the AI declaration attached at upload.
Usage & analytics
Plays, views, searches, follows, watch history, device and browser details, approximate locale and referrer information.
How we use it
We process personal information to deliver the service you signed up for and nothing beyond it. Specifically, we use it to:
- Operating your account, session and profile across web and mobile.
- Hosting, streaming and recommending the content you publish and watch.
- Reviewing uploads for AI declarations, provenance and copyright compliance.
- Processing orders, revenue-share accounting and creator payouts.
- Detecting spam, abuse and policy breaches, and keeping the service secure.
- Understanding aggregate platform usage so we can improve the product.
AI content & provenance data
The declaration travels with the release
SKAi Entertainment is strictly dedicated to AI-generated entertainment. Because of that, every upload carries an AI declaration: the tools and models used, the percentage of the work that is generated versus human-assisted, the ownership claim and the distribution rights cleared. We store those fields alongside provenance signals produced by SKAi Verify.
This data powers the public content labels, the moderation queue and any ownership or copyright dispute. It is part of the permanent record of the release and is treated as content metadata, not as a marketing profile. Read the full rules in our AI content policy.
Payments
Handled by PayFast, never stored by us
Marketplace checkout is processed by PayFast. We never receive, store or log your full card number, CVV or bank credentials — those stay with PayFast under PCI-compliant handling. We keep a transaction record: order reference, amount, currency, status and timestamps, together with the creator revenue-share calculation attached to it. Orders are marked as paid only after a verified PayFast ITN callback confirms settlement.
Cookies & local storage
Auth session
Your Supabase Auth session is persisted so you stay signed in between visits. Clearing site data signs you out.
Service worker caching
The app shell and media are cached locally so pages load fast and keep working on slow connections.
Theme & preferences
Theme, locale and player preferences are stored locally to keep the interface consistent between sessions.
We do not run third-party advertising cookies or sell behavioural profiles. You can clear these values at any time from your browser; signing out clears the auth session.
Third-party services
We work with a small set of processors. Each is bound by its own terms and only receives the data required for its role.
Database, authentication, storage and row-level security for all account and catalogue data.
Used only when a creator connects a Google account to publish or verify content on YouTube.
Used only when a creator connects a Spotify for Artists account to their profile.
Server-side gateway for AI generation requests. Keys stay on the server and prompts are never exposed publicly.
Powers maps on event and creator pages when location data is displayed.
Processes marketplace checkout. Card and bank details are handled entirely by PayFast.
Data retention & deletion
We keep personal information for as long as your account is active, and afterwards only where a legal, tax, fraud-prevention or rights-provenance obligation requires it. You may request deletion of your account and associated personal information at any time by emailing privacy@skaitube.ai or from your account settings.
Supabase row-level security isolates each user's rows, so a deletion request removes data that is yours without touching other creators' records. Published content you have licensed to the platform is removed with the release; provenance records needed to resolve an active dispute or payout are retained until the matter closes.
International transfers
SKAi Entertainment is built and operated from South Africa, but our infrastructure providers host and process data in other jurisdictions, including the European Union and the United States. Where personal information crosses borders, we rely on the safeguards offered by our processors — standard contractual clauses, encryption in transit and at rest, and contractual commitments to protect the information — and we only share what is necessary for the service to work.
Your rights
POPIA and GDPR-style rights
If you are in South Africa, the Protection of Personal Information Act (POPIA) gives you specific rights over your personal information. If you are elsewhere, notably in the European Union or United Kingdom, you enjoy equivalent GDPR-style rights. In practice, wherever you live, you can:
Access
Ask for a copy of the personal information we hold about you.
Rectification
Correct inaccurate or incomplete information, starting with your profile.
Erasure
Request deletion of your account and associated personal information.
Restriction & objection
Ask us to limit, or object to, certain processing of your information.
Portability
Receive your data in a structured, commonly used machine-readable format.
Complaint
Lodge a complaint with the Information Regulator (South Africa) if you are unhappy with our response.
To exercise any of these rights, email privacy@skaitube.ai. We respond within the periods required by applicable law, usually within 30 days.
Security measures
- Row-level security isolates every user's data at the database layer.
- Server-side secrets such as the service role key never reach the browser bundle.
- Storage uploads use short-lived signed URLs instead of public object links.
- All traffic is encrypted in transit with TLS, and sensitive columns at rest.
- Least-privilege access for staff, with audit trails on administrative actions.
- Continuous monitoring for abuse, credential leaks and anomalous queries.
Contact
African Skyblue Technologies and Investments Pty Ltd is the responsible operator of SKAi Entertainment. For privacy questions, data requests or complaints, contact privacy@skaitube.ai. You can also review related documents — our AI content policy, Terms of Service and community guidelines.
