1. Who we are

SkillsHome ("we", "us") operates an invite-only platform that builds an AI-verified, shareable professional profile from information you provide. For privacy questions, contact privacy@skillshome.me.

2. What we collect

Account data — your name, email, and avatar from the OAuth provider you sign in with (Google or GitHub).
Profile content — résumés/documents you upload or URLs you submit, and the skills, experience, and projects extracted from them.
Usage data — product events (e.g. profile created, link shared) and aggregate analytics. We do not log raw résumé text or scores to analytics.
Technical data — IP address and request metadata used for security and rate limiting.

3. How we use it

To extract skills and build and host your profile and shareable link.
To power the recruiter chat on your public profile, grounded only in your own profile data.
To operate, secure, and improve the service.

4. AI processing & your résumé

Skill extraction and the recruiter chat run on a self-hosted, local language model. Your résumé and profile data are not sent to third-party AI providers and are never used to train any model. Processing happens on our own infrastructure.

5. Sharing

We do not sell your data. A profile is private until you publish it; a published profile is visible to anyone with the share link. We use a small number of infrastructure processors (hosting, object storage, error monitoring, product analytics) under data-processing terms.

6. Retention & deletion

Uploaded source files are deleted after your review package is confirmed. You can delete a profile or your account at any time; deletion permanently removes your profile, skills, embeddings, stored files, and view logs (see "Your rights" below).

7. Your rights (GDPR)

If you are in the EEA/UK, you have the right to:

Access — request a copy of the personal data we hold about you.
Rectification — correct inaccurate data (you can edit your profile directly).
Erasure — request deletion ("right to be forgotten"); our hard-delete purges profile, skills, embeddings, files, and view logs.
Portability — receive your profile data in a structured, machine-readable format.
Restriction / objection — limit or object to certain processing.
Withdraw consent and lodge a complaint with your local supervisory authority.

Our legal bases are your consent (account creation, profile publishing) and our legitimate interest in operating a secure service. To exercise any right, email privacy@skillshome.me.

8. Cookies

We use strictly-necessary cookies for authentication (an HttpOnly refresh-token cookie and short-lived CSRF/state cookies during sign-in). Access tokens are kept in memory only. We do not use third-party advertising cookies.

9. Security

OAuth uses PKCE; sessions can be revoked immediately; uploads are malware-scanned; secrets are kept server-side. No system is perfectly secure, but we apply layered safeguards.

10. Changes

We will post any changes here and update the date above.

Privacy Policy