Privacy Policy

1. Information We Collect

Account Information

When you create an account, we collect your email address and authentication credentials. Account creation is required to access premium tools and save work history.

Usage Data

We collect anonymized usage data including pages visited, tools used, feature interactions, and session duration. This data helps us improve our services and is not linked to your personal identity.

Tool Input Data

When you use our AI-powered tools, the data you provide (text prompts, uploaded images, map selections, document content) is processed to generate results. We do not store your input data beyond what is necessary to deliver the service, except for work history saved to your account at your request.

File Uploads & Personal Information

Several tools accept file uploads (resumes, contracts, invoices, screenshots, audio recordings, and similar documents). Uploaded files are processed in memory or temporary server storage to deliver the requested service and are not retained server-side after the request completes, except for thumbnails or derived outputs you choose to save to your work history. We do not scan uploaded files for purposes unrelated to the tool you are using. You remain responsible for ensuring you have the right to upload any document containing personal data of others. Do not upload protected health information (PHI), financial account credentials, government identifiers, or other sensitive data not necessary for the tool's stated purpose.

Browser-Only Tools

Some tools run entirely in your browser (for example the image, PDF, video, audio, data and calculator tools marked “No sign-in”). You can use them without an account. The files you open in them are processed on your device and are not uploaded to SkillEra. Using them still makes ordinary web requests: your browser downloads the tool's code and, for some tools, processing components or models from public content networks (such as unpkg and Hugging Face), which see a normal request from your browser, and we record page and tool views as described under Usage Data.

If you are signed in, a short record of each run you finish is saved to your work history: the tool, the options you chose, and counts such as the number of files, pages or rows. The PII redactor saves a record for pasted text when you copy or download the result, and the financial calculators only when you export a schedule as CSV, a Pro feature. A record never includes your files, their names or their contents. The options and counts are encrypted with a key tied to your account; the tool's name, the record's size and its dates are stored with it unencrypted so your history can be listed, sorted and expired. Each time a run is saved, older unpinned runs of that tool beyond your 50 most recent are deleted, and an unpinned run expires after a year and is then deleted by our regular cleanup. Runs you pin are kept until you unpin or delete them, and how many you can pin depends on your plan. You can delete any run at any time from your work history.

Payment Information

SkillEra.IO is operated by SkillEra IO LLC. Payment processing is handled entirely by Stripe on our behalf. We do not store credit card numbers, bank account details, or other sensitive financial information on our servers. We retain only transaction references for billing records. Our subscription, cancellation, and refund terms are set out in Terms of Use §14.

Third-Party Data Sources

Some tools query third-party data sources including OpenStreetMap and Nominatim (geographic and address data), Open-Meteo (elevation and weather data), and job-search APIs (JSearch, Adzuna, SerpAPI). Your queries are sent to these services to fulfill your requests. These services have their own privacy policies.

Organization & Team Accounts

If you join an organization or team account, the organization owner can see usage records and outputs created under that organization's billing scope. Your personal-account work history is not shared with the organization. You may leave an organization at any time; departing members retain their personal account but lose access to organization-specific work.

2. How We Use Your Data

• To provide and improve our AI tools and services
• To process your transactions and manage your subscription
• To save your work history and templates (when you choose to save)
• To send service-related communications (account updates, billing)
• To analyze usage patterns and improve product quality (anonymized)
• To enforce our Terms of Use and prevent abuse
• To comply with legal, tax, accounting, and regulatory obligations

3. AI-Specific Data Practices

Our tools rely on third-party AI and content providers to process your inputs. Depending on the specific tool, your inputs may be processed by one or more of: OpenAI, Anthropic, Replicate, ElevenLabs, and D-ID. Geographic, search, and supplementary tools may also call: OpenStreetMap, Nominatim, Open-Meteo, JSearch, Adzuna, and SerpAPI.

When you use these tools:

• Your input data (text, images, audio, documents, prompts) is sent to the relevant provider for processing
• Each provider operates under its own published privacy and data-handling policy
• Where contractually available, we have selected configurations that disable training on your inputs (for example, the OpenAI API does not, by default, train on inputs sent through it). We cannot guarantee provider behavior beyond our contract — review each provider's policy for definitive terms
• Generated outputs (text, images, 3D models, documents, audio, video) are returned to you and are not shared with other users
• AI-generated content may be stored in your work history if you choose to save it

4. Data Storage, Security & Retention

Storage & Security

Your data is stored using Supabase (hosted on AWS) with encryption at rest and in transit. We implement industry-standard security measures including:

• HTTPS encryption for all data transmission
• Secure authentication via Supabase Auth
• API rate limiting to prevent abuse
• Server-side validation of all inputs

Data Retention Periods

• Account data — retained while your account is active; deleted within 30 days of an account-deletion request, except where longer retention is required for billing, tax, or legal purposes
• Work history — retained until you delete it or close your account
• Uploaded files — not retained server-side after the request completes, except thumbnails or derived outputs you save to work history
• Logs (server access, error logs) — retained up to 90 days for diagnostic purposes, then automatically deleted
• Billing records — retained 7 years to comply with tax and accounting requirements
• Authentication tokens — rotated regularly; expired tokens are deleted

Breach Notification

In the event of a confirmed data breach affecting your personal data, we will notify you by email without undue delay and, in any case, within 72 hours of confirmation, consistent with GDPR Article 33 obligations and applicable US state breach-notification laws. Notice will describe the nature of the breach, data categories involved, likely consequences, and remediation steps we are taking.

5. Cookies and Tracking

We use essential cookies for authentication and session management. We use anonymized analytics to understand how our services are used. We do not sell your data to third parties or use invasive tracking technologies.

6. Children's Privacy

SkillEra.IO is intended for users 16 years of age and older. We do not knowingly collect personal data from anyone under 16. If we learn that we have collected such data, we will delete it. Parents or legal guardians who believe their child has provided personal data should contact us at the email below so we can take appropriate action.

7. Your Rights

Subject to your jurisdiction, you may have rights to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Export your work history and saved data
• Opt out of non-essential communications
• Object to or restrict certain processing
• Lodge a complaint with a supervisory authority

California Residents (CCPA / CPRA)

If you reside in California, you have the rights to know, delete, correct, opt out of sale or sharing, limit use of sensitive personal information, and non-discrimination for exercising any right. We do not sell personal information. We will verify your request through email confirmation and respond within 45 days, extendable by an additional 45 days where reasonably necessary.

Other US State Residents

If you reside in Virginia, Colorado, Connecticut, Texas, Utah, Oregon, Montana, Iowa, Indiana, Tennessee, Florida, Delaware, New Jersey, New Hampshire, Kentucky, Maryland, Minnesota, or Rhode Island, you have rights similar to those above under your state's comprehensive privacy law, including access, correction, deletion, and portability. Contact us at the email below to exercise these rights; we will respond within the timeframe required by your state's law.

EU / UK / EEA Users (GDPR)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR) and equivalent local laws apply.

Lawful basis for processing:

• Contract performance — to provide the service you requested
• Legitimate interest — to improve the service, prevent abuse, and analyze aggregate usage
• Consent — for optional features you explicitly enable, such as marketing communications
• Legal obligation — for tax, accounting, and regulatory requirements

Your rights include access, rectification, erasure, restriction, portability, objection, and the right to lodge a complaint with your local supervisory authority. You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

International transfers: Some processing occurs in the United States. Where personal data is transferred outside the EEA/UK, we rely on Standard Contractual Clauses (SCCs) and provider-level safeguards.

Data Protection Officer: We have not appointed a DPO as we do not meet the GDPR Article 37 thresholds for mandatory appointment. Privacy questions should be directed to the contact email below.

To exercise any of these rights, contact us at Connect@SkillEra.IO.

8. SkillEra Companion Browser Extensions

SkillEra offers two optional, single-purpose browser extensions that connect to your SkillEra account: the Career Suite (job-fit analysis, résumé & cover-letter drafting, LinkedIn optimization, and application tracking) and the Prompt Optimizer (refining your prompt wording on AI chat sites). They are separate extensions — each requests only the permissions it needs — and their data practices are described below. The rest of this policy applies to both.

Career Suite — page content it reads

The Career Suite only reads page content when you explicitly activate it (for example, clicking “Analyze fit” on a job posting or “Optimize” on your own LinkedIn profile). It reads only the specific text needed for that action to produce your result. It does not run analyses in the background across your browsing, does not transmit any page content unless you activate a feature, and does not collect your browsing history.

Career Suite — data it stores in your account

When you choose to save it, the Career Suite stores the following with your SkillEra account (in Supabase, encrypted in transit and at rest): your résumé text and target roles, optional coaching-interview answers, the outputs it generates for you (job-fit analyses, cover letters, tailored résumés, growth plans), and the jobs you choose to track (title, company, link, status, notes, and the fit score). This lets your profile and history follow you across browsers and devices. You control all of it — see “Managing and deleting your data” below.

Prompt Optimizer — what it reads, and what it does not store

On supported AI chat sites (Claude, ChatGPT, Gemini, and Perplexity) the Prompt Optimizer shows an optional “Optimize” button on your prompt box. It reads the text you have typed into that box only when you click Optimize, and sends that prompt to SkillEra to return an improved version (SkillEra generates the improved prompt using the third-party AI providers listed in Section 3). It does not read your conversation history, the AI's responses, or anything you do not submit for optimization; it only refines the wording of your request and leaves any code or content you included untouched. The feature is on by default but can be turned off entirely or per-site from the extension's popup, and each optimization uses tokens from your SkillEra balance. The Prompt Optimizer does not collect or store any résumé, profile, or other personal data — only your optimizer settings and session token are kept locally in the extension.

Authentication

Each extension authenticates using your existing skillera.io session or a scoped access token minted on skillera.io and stored locally in that extension. The token is limited to the extension's features and can be revoked at any time (“Sign out all extension sessions” on the Companion hub), which invalidates every existing token for your account.

Retention

Saved résumé, coaching context, and generated outputs (Career Suite) are retained until you delete them or close your account. Tracked applications are retained on a rolling window from their last update — 60 days on Basic and 190 days on Pro — after which they are cleared automatically; export to CSV to keep a permanent copy. The Prompt Optimizer stores no account-side data to retain.

Managing and deleting your data

On skillera.io/companion you can view, edit, export (CSV), and delete your Career Suite data at any time, including a one-click “Delete all my companion data” that permanently removes your saved profile, history, and tracked applications and signs the extension out. (The Prompt Optimizer keeps no such data — only local settings, which you can clear by removing the extension.) We do not sell this data and use it only to provide the features you request.

9. Changes to This Policy

We may update this privacy policy from time to time. Significant changes will be communicated via email or a prominent notice on our website. Continued use of our services after changes constitutes acceptance of the updated policy.

10. Contact

For privacy-related inquiries, contact us at Connect@SkillEra.IO.