Last updated: 6 July 2026
This Privacy Policy explains how BoGames Software Ltd ("SkewLab", "we", "us"), a company registered in England and Wales under company number 17100237, with registered office at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom, collects, uses and protects your personal data when you use the SkewLab platform at skewlab.io (the "Service").
We are the data controller for the purposes of the UK General Data Protection Regulation ("UK GDPR"), the Data Protection Act 2018 and, where applicable to users in the European Economic Area, the EU General Data Protection Regulation ("GDPR").
For any privacy matter, contact us at hello@skewlab.io.
1. Data we collect
Account data. When you register we collect your email address, display name and, if you sign in with Google, the basic profile information Google shares with us (name, email address, profile picture). We never receive your Google password.
Billing data. Payments are processed by Stripe. We do not store your card number. We receive from Stripe your subscription status, plan, billing country and the last four digits of your card for support purposes. Invoices may include your billing address and VAT number where you provide them.
Usage data. We collect information about how you use the Service: strategies, portfolios and backtests you create (which are your content), pages visited, features used, device and browser type, IP address, and technical logs needed to operate and secure the platform.
Communications. If you contact us through the contact form or by email, we keep the correspondence, including your email address and the content of your message.
Marketing and analytics data. Subject to your consent (see our Cookie Policy), we use analytics and advertising technologies, including the TikTok Pixel, which collect information about your visit through cookies and similar technologies.
2. Why we process your data and on what legal basis
| Purpose | Legal basis |
|---|---|
| Providing the Service, running your backtests, storing your strategies and portfolios | Performance of a contract (Art. 6(1)(b)) |
| Billing, invoicing, tax and accounting obligations | Legal obligation (Art. 6(1)(c)) |
| Securing the platform, preventing fraud and abuse | Legitimate interests (Art. 6(1)(f)) |
| Responding to your support requests | Performance of a contract / legitimate interests |
| Product analytics to improve the Service | Consent (Art. 6(1)(a)), where required, otherwise legitimate interests |
| Advertising measurement (e.g. TikTok Pixel) | Consent (Art. 6(1)(a)) |
| Sending service communications (e.g. changes to terms, security notices) | Performance of a contract / legal obligation |
We do not use your data for automated decision-making that produces legal or similarly significant effects on you. We do not sell your personal data.
3. Who we share data with (sub-processors)
We share personal data only with service providers who process it on our behalf under data-processing agreements:
- Stripe — payment processing and subscription billing
- Vercel — hosting of the web application
- Google — sign-in with Google (OAuth)
- Resend — transactional email delivery (e.g. replies to contact requests)
- Cloud infrastructure providers — hosting of backend infrastructure and databases
- TikTok — advertising measurement via the TikTok Pixel, only with your consent
We may also disclose data where required by law, to enforce our Terms of Service, or in connection with a corporate transaction (merger, acquisition), in which case this policy will continue to apply to your data.
4. International transfers
Some of our providers are located outside the UK/EEA (for example in the United States). Where data is transferred internationally we rely on adequacy decisions or appropriate safeguards such as the UK International Data Transfer Agreement / EU Standard Contractual Clauses put in place by our providers.
5. How long we keep your data
- Account data: for as long as your account exists, then deleted or anonymised within 30 days of account closure.
- Your strategies, portfolios and backtest results: until you delete them or close your account.
- Billing records: retained for 6 years as required by UK tax law.
- Support correspondence: up to 24 months after resolution.
- Analytics/advertising data: according to the retention periods described in our Cookie Policy.
6. Your rights
Under the UK GDPR and GDPR you have the right to access, rectify and erase your personal data; to restrict or object to its processing; to data portability; and to withdraw consent at any time (without affecting processing carried out before withdrawal). You can exercise these rights by writing to hello@skewlab.io. We respond within one month.
You also have the right to lodge a complaint with a supervisory authority — in the UK, the Information Commissioner's Office (ico.org.uk); in the EU, the authority of your country of residence.
7. Security
We apply appropriate technical and organisational measures, including encryption in transit (TLS), access controls, and segregation of production infrastructure. No system is perfectly secure; if a breach affecting your rights occurs, we will notify you and the competent authority as required by law.
8. Children
The Service is not directed to persons under 18, and we do not knowingly collect data from them. If you believe a minor has provided us data, contact us and we will delete it.
9. Changes to this policy
We may update this policy from time to time. Material changes will be notified through the Service or by email. The date at the top indicates the latest revision.
10. Language
This policy may be provided in several languages for convenience. In case of discrepancy, the English version prevails.