SkillsPass

Privacy Policy

Summary

SkillsPass collects only the information needed to provide our service. We store candidate data (such as resumes and skills) provided by our Customers (users) and account details for users. We never sell or share your data with third parties. We use AI tools (via Groq) to structure the CV data, but we remove any personal identifiers first, and Groq explicitly does not retain or train on your data. We only use essential cookies (for example, a session cookie to keep you logged in) and Stripe's payment cookies. You or your company can delete your data at any time, and inactive accounts are removed after six months of inactivity. If you have any questions, please contact us at hello@skillspass.co.

Information We Collect

  • Candidate Data. We store personal information from candidate profiles and resumes (names, contacts, work history, skills, etc.) as provided by our Customer. This is the core data needed to power our skills-based hiring tools.
  • Customer/Account Information. We collect account registration details (such as email address and company name) to create and manage user accounts. Authentication is handled by Clerk, a third-party service that securely processes login credentials on our behalf.
  • Payment Information. We use Stripe to process payments. We do not store or have access to your credit card or banking details. For example, our subscription payments are handled securely through Stripe, and we will never see or retain your full card information.
  • Usage and Log Data. We collect minimal technical data (such as usage metrics or error logs) to maintain and improve our platform, but these logs do not include any personal identifiers. Any logs we keep are stripped of personal data.

How We Use Your Data

  • Provide and Improve Services. We use data to deliver our core service (skills analysis and reporting) and to improve its performance. For example, we may analyze aggregate skill trends or debug issues, but this is done without attaching personal identities. As with many services, we use information to operate and enhance our platform.
  • Communications. We may use your email or contact information to send important account-related notifications (such as password resets or service updates). We do not use personal data for unsolicited marketing.
  • Payments and Billing. We process payments via Stripe. We supply only the information Stripe needs to complete transactions (such as transaction amount and user email); Stripe handles the payment details and security. We never store your payment credentials.
  • Security and Fraud Prevention. We use data (such as login attempts or payment flags) to help secure the service and prevent abuse, consistent with industry practices.

Data Sharing with Third Parties

  • No Marketing Sharing. We do not sell, rent, or trade your personal data. We do not share data with third parties for marketing or advertising.
  • Essential Service Providers. We may share data with trusted third-party service providers only as needed to run the service. For example, we share necessary information with Stripe for payments and with cloud hosting providers to store data. These partners are contractually bound to use data only for the purpose of providing that service.
  • AI Processing (Groq). We use Groq's AI platform to process and analyze text (such as extracting skills from resumes). Before sending any data to Groq, we remove all personal identifiers. Groq's policy confirms they do not permanently retain or train on your prompts or data.
  • Authentication (Clerk). We use Clerk for user authentication. Clerk's privacy policy clarifies that the account holder (SkillsPass) is the data controller and Clerk acts only as a processor for authentication data. In other words, you (or your employer) control any personal data entered into Clerk, and Clerk follows our instructions to manage it.
  • Logs. We do not retain chat or document logs containing personal data beyond what is needed for system operation. As with other services, we do not store complete conversation transcripts or resume files long-term. Our providers (like Groq or Clerk) also do not use your data for any purpose other than providing the service.

Cookies and Tracking

We do not use any advertising or analytics cookies. We only use essential cookies that are necessary for the site to function: for example, a session cookie to keep you logged in and a Stripe cookie to manage the secure payment process. These cookies do not track your browsing across other sites. You can disable all cookies in your browser, but then you may not be able to log in or make payments.

Data Retention and Deletion

We retain personal data only as long as necessary to provide our service. There is no fixed legal requirement to keep data for any set period. In practice:

  • Account Closure. If a Customer (organization) chooses to delete their SkillsPass account, all data associated with that account (including all candidate data they provided) will be permanently deleted. Only the organization's owner or admin can initiate the full account deletion.
  • Inactive Accounts. We may delete data from accounts that have been inactive for more than six months, unless we receive contrary instructions.
  • Candidate Data Deletion. Candidates have the right to request erasure of their personal data. Because the hiring company (our Customer) is the data controller of that information, candidates should request deletion through that company. We will cooperate with Customer directives. For example, under GDPR a person can request the "right to be forgotten" and the controller must delete their data without undue delay. SkillsPass, as a processor, will follow the controller's instructions in such cases.

Your Rights under GDPR

If you are in the EU (or otherwise covered by GDPR), you have certain data rights: the right to access your personal data, to correct inaccuracies, and to request deletion, among others. In particular, you have the right to have your personal data erased when we no longer have a legitimate need for it. To exercise these rights, customers (data controllers) can log into their SkillsPass account to update or delete data. Candidates should contact the HR professional who provided their data; that company can then use SkillsPass's tools to delete or export the data. If you have trouble or questions about accessing or deleting your data, you can email us at hello@skillspass.co and we will assist you.

Contact Us

If you have any questions or concerns about this Privacy Policy or how we handle data, please contact us at hello@skillspass.co. We are committed to addressing all inquiries related to privacy and data protection.

Last updated: December 2024