Privacy Policy

1. Information We Collect

We collect information to provide and improve our services:

• Account Information: Name, email address, password (encrypted)
• Career Information: Job title, industry, experience level, salary information
• Usage Data: Pages visited, features used, time spent on platform
• Payment Information: Processed securely through Stripe (we don't store credit card details)

2. How We Use Your Information

We use your information to:

• Generate personalized career risk assessments and recommendations
• Provide skill development plans and career path suggestions
• Improve our algorithms and service quality
• Send important account updates and optional marketing emails (you can opt out anytime)
• Provide customer support

3. Data Security

We implement industry-standard security measures:

• 256-bit SSL encryption for all data transmission
• Encrypted storage for sensitive career information
• Regular security audits and penetration testing
• Access controls limiting employee access to user data

4. Data Sharing

We do not sell your personal data. We may share data only in these limited circumstances:

• Service Providers: Third-party tools that help us operate (analytics, email service, payment processing) - all bound by strict confidentiality agreements
• Aggregated Data: Anonymous, aggregated statistics that cannot identify you individually
• Legal Requirements: If required by law or to protect rights and safety

5. Cookies and Tracking

We use cookies and similar technologies to improve your experience, remember your preferences, and analyze usage patterns. You can control cookie settings through your browser, but some features may not work properly if you disable cookies.

6. Your Rights

You have the right to:

• Access: Request a copy of your personal data
• Update: Correct or update your information through your account settings
• Delete: Request deletion of your account and associated data
• Export: Download your data in a portable format
• Opt-out: Unsubscribe from marketing emails at any time

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. If you delete your account, we will delete your personal data within 30 days, except where we're required to retain it for legal obligations.

8. Children's Privacy

Skill Resilience is not intended for users under 16 years of age. We do not knowingly collect personal information from children under 16. If we discover we have collected data from a child under 16, we will delete it immediately.

9. GDPR Rights (EU Users)

If you are located in the European Union, you have additional rights under the General Data Protection Regulation (GDPR):

• Legal Basis for Processing: We process your data based on consent, contract performance, legal obligations, and legitimate interests
• Right to Access: Request a copy of all personal data we hold about you
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data
• Right to Data Portability: Receive your data in a machine-readable format
• Right to Object: Object to processing based on legitimate interests or for direct marketing
• Right to Restrict Processing: Request limitation on how we use your data
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent
• Right to Lodge a Complaint: File a complaint with your local data protection authority

Data Controller: Skill Resilience acts as the data controller for your personal information.

Data Transfers: Your data may be transferred to and processed in the United States. We ensure adequate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.

10. International Users

Skill Resilience is operated in the United States. If you are located outside the US, your information will be transferred to and processed in the US. We comply with GDPR requirements for EU users and provide appropriate safeguards for international data transfers.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a notice on our platform. Continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact & Data Protection Officer

If you have questions about this Privacy Policy, wish to exercise your GDPR rights, or need to contact our Data Protection Officer, please contact us.

Response Time: We will respond to all requests within 30 days as required by GDPR.