Privacy Policy

1. Introduction

SkyDome AdNetwork ("SkyDome", "we", "us", "our") is a mobile advertising network operated by SkyL4rk (Pty) Ltd, a company registered in South Africa, with its principal place of business in Ballito, KwaZulu-Natal ("SkyL4rk", "Company"). SkyDome connects Advertisers, who wish to display advertising creative, with Publishers, who integrate the SkyDome SDK or API into their mobile applications ("Publisher Apps") to serve that creative to End Users.

This Privacy Policy explains what information we collect across the SkyDome platform — including our dashboard, APIs, SDK, and ad-serving infrastructure — how we use it, who we share it with, and the choices and rights available to you. It applies regardless of whether you interact with SkyDome as a Publisher, an Advertiser, or an End User of a Publisher App that has integrated SkyDome.

2. Who This Policy Covers

3. Information We Collect

3.1 Information from Publishers and Advertisers

• Account information: name, email address, username, hashed password, company name, contact details.
• Billing information: payment terms, invoicing details, and (where applicable) payment method metadata processed via our payment partners — SkyDome does not itself store full card numbers.
• App metadata submitted by Publishers: app name, package name/bundle ID, app category, and app store listing details.
• Creative assets and campaign metadata submitted by Advertisers: ad images, video, HTML5 creative, target dimensions, click-through URLs, budget, and flight dates.

3.2 Information Collected via the SDK / API (End Users)

When a Publisher App requests an ad via our API (e.g. getAdsByApp) or records an ad event (trackAds), SkyDome's servers receive and log:

• Device and network identifiers: IP address, user-agent string, and, where the Publisher App provides it, a device or advertising identifier.
• App identifiers: the Publisher's app secret/package name, used to determine which ads are eligible to serve.
• Ad interaction events: impressions and clicks, each tagged with an ad UUID, event type, and timestamp.
• Approximate location inferred from IP address, used for basic geographic reporting and fraud detection — SkyDome does not collect precise GPS location.

SkyDome does not knowingly collect names, email addresses, or other direct identifiers of End Users through the SDK or ad-serving APIs. Any such collection would only occur if a Publisher App misconfigures its own integration, which is against our Publisher Terms.

3.3 Information Collected Automatically on Our Own Properties

• Standard web server logs (IP address, browser type, pages visited, referring URL) when you use skydome.co.za or dashboard.skydome.co.za.
• Session identifiers used to keep you logged in to the dashboard.
• Activity logs recorded within the dashboard (e.g. login events, password changes) for security and audit purposes.

4. How We Use Information

• Ad delivery — selecting and serving the most appropriate, least-recently-run ad for a given ad slot and app.
• Measurement & reporting — calculating impressions, clicks, click-through rate (CTR), and revenue for Publishers, Advertisers, and internal reporting.
• Billing — calculating amounts owed to Publishers and amounts owed by Advertisers based on delivered impressions/clicks and applicable rate cards.
• Account administration — authenticating dashboard users, managing sessions, and enforcing role-based access between Administrators and regular Users.
• Fraud & abuse prevention — detecting invalid traffic, click fraud, and abnormal serving patterns using IP address, user-agent, and event frequency data.
• Security — logging authentication events and investigating suspicious account activity.
• Legal compliance — meeting our obligations under South African and other applicable law, and responding to lawful requests.

5. Legal Basis for Processing

SkyDome processes personal information in accordance with the Protection of Personal Information Act, 2013 (POPIA) of South Africa. Where End Users, Publishers, or Advertisers are located in the European Economic Area or United Kingdom, we also apply the relevant principles of the General Data Protection Regulation (GDPR). Our processing relies on one or more of the following bases:

• Performance of a contract — processing necessary to provide the SkyDome platform to Publishers and Advertisers under our Terms of Service.
• Legitimate interests — operating, securing, and improving the ad network, including fraud prevention and analytics, balanced against individual privacy interests.
• Consent — where required by applicable law for certain tracking technologies (see Section 7).
• Legal obligation — where processing is required to comply with tax, accounting, or regulatory requirements.

6. How We Share Information

SkyDome does not sell personal information. We share information only in the following circumstances:

• Between Advertisers and Publishers, in aggregate form — e.g. an Advertiser can see aggregate impressions/clicks generated by a Publisher's app; a Publisher does not receive Advertiser billing details.
• Service providers — hosting, database, and infrastructure providers who process data solely on our instructions and under confidentiality obligations.
• Payment processors — for the limited purpose of processing Publisher payouts and Advertiser billing.
• Legal and safety reasons — where required to comply with a legal obligation, enforce our Terms of Service, or protect the rights, property, or safety of SkyDome, our users, or the public.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to equivalent privacy protections.

7. Cookies & Tracking Technologies

Our public site and dashboard use strictly necessary cookies (such as session cookies used for login) and, where applicable, analytics cookies. The SkyDome SDK does not use browser cookies inside native apps; it relies on request-level identifiers (app secret, ad UUID) passed via API calls. Where local law requires consent for non-essential tracking, we obtain it before such technologies are activated.

8. Data Retention

9. Data Security

We apply administrative, technical, and physical safeguards appropriate to the sensitivity of the data involved, including password hashing, role-based dashboard access separating Administrator and User privileges, encrypted connections (HTTPS/TLS) for data in transit, and restricted database access. No system is completely secure, and we cannot guarantee absolute security, but we continuously review and improve our safeguards.

10. Your Rights

Depending on your location, you may have the right to:

• Request access to, or a copy of, personal information we hold about you;
• Request correction of inaccurate or incomplete information;
• Request deletion of your personal information, subject to legal retention requirements;
• Object to, or request restriction of, certain processing activities;
• Withdraw consent, where processing is based on consent;
• Lodge a complaint with a supervisory authority — in South Africa, the Information Regulator.

To exercise these rights, contact us using the details in Section 14. We will respond within the timeframes required by applicable law.

11. Children's Privacy

SkyDome is not directed at children, and we do not knowingly collect personal information from children under the age of 18 (or the applicable age of consent in the End User's jurisdiction) through our SDK or dashboard. Publishers are contractually required to ensure their apps' use of SkyDome complies with applicable children's privacy laws, including any restrictions on ad personalisation for child-directed apps.

12. International Data Transfers

SkyDome is based in South Africa, and data may be processed on servers located in South Africa or other jurisdictions where our infrastructure providers operate. Where personal information is transferred internationally, we take reasonable steps to ensure it receives an adequate level of protection consistent with POPIA and, where applicable, GDPR transfer mechanisms.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified to dashboard Users via the platform or by email, and the "Last Updated" date above will be revised. Continued use of SkyDome after changes take effect constitutes acceptance of the revised Policy.

14. Contact Us

For privacy-related questions, requests, or complaints, contact SkyL4rk (Pty) Ltd at:

Email: privacy@skydome.co.za
Postal Address: SkyL4rk (Pty) Ltd, Ballito, KwaZulu-Natal, South Africa