Privacy Policy

We collect information you provide directly:

• Account data: email address, display name, username, and profile information you add voluntarily (bio, website, social links). • Skill data: content, descriptions, and metadata of skills you publish. • Payment data: processed securely through Stripe. We store only the last 4 digits of your card and Stripe customer ID — never full card numbers. • Usage data: pages visited, search queries, skills downloaded or accessed via API, API call counts. • Technical data: IP address, browser type, device information, and cookies (see our Cookie Policy).

We use your data to:

• Operate the SkillDepot platform and process transactions. • Authenticate your identity and maintain session security. • Show you relevant skill recommendations. • Calculate earnings, process payouts, and maintain financial records. • Send essential transactional emails (receipts, API key notifications, payout confirmations). • Investigate fraud, abuse, or violations of our Terms of Service. • Improve our platform based on aggregate, anonymized usage patterns.

We do not sell your personal data to third parties. We do not use your data for behavioral advertising.

We share data only as follows:

• Public profile: Your username, display name, avatar, and published public skills are visible to all users. • Payment processor: Stripe receives payment information to process transactions. • Infrastructure: Supabase (database and auth), Vercel (hosting). Both are contractually bound to data protection standards. • Legal requirements: We may disclose information when required by law or to protect our legal rights.

We never share your email, API keys, download history, or private skills with third parties for marketing purposes.

We implement industry-standard security measures:

• All data transmitted over HTTPS/TLS. • Passwords hashed with bcrypt; never stored in plain text. • API keys stored as hashed values. • Database access restricted by Row Level Security (RLS). • Supabase handles at-rest encryption for all stored data.

No system is 100% secure. You are responsible for keeping your password and API keys private. Notify us immediately at security@skilldepot.dev if you suspect unauthorized access.

We retain your data as long as your account is active. When you delete your account:

• Your profile, skills, and personal data are deleted within 30 days. • Transaction and payout records are retained for 7 years for legal and accounting compliance. • Anonymized usage statistics (with no personal identifiers) may be retained indefinitely.

You can request export or deletion of your data at any time by emailing privacy@skilldepot.dev.

Depending on your jurisdiction, you may have the right to:

• Access: Request a copy of data we hold about you. • Rectification: Correct inaccurate data in your profile settings. • Erasure: Request deletion of your account and associated data. • Portability: Receive your data in a machine-readable format. • Objection: Object to certain processing activities.

To exercise these rights, email privacy@skilldepot.dev or use the settings in your Dashboard. We will respond within 30 days.

We use strictly necessary cookies for authentication and optional analytics cookies. See our full Cookie Policy at skilldepot.dev/cookies for details on what we set and how to opt out.

SkillDepot is not directed at children under 18. We do not knowingly collect data from minors. If you believe a minor has created an account, contact us at privacy@skilldepot.dev and we will delete the data.

We may update this Privacy Policy. Significant changes will be communicated via email or a prominent banner on the Platform. Your continued use of SkillDepot after the effective date constitutes acceptance.

Data controller: SkillDepot Email: privacy@skilldepot.dev For support: skilldepot.dev/support