1. Introduction

SkillSure ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our candidate assessment platform (the "Service"). Please read this policy carefully to understand our practices regarding your personal data.

2. Information We Collect

2.1 Company Account Information

When you create a company account, we collect:

Company name and contact information
Company logo (optional, stored securely in our cloud storage)
Email address and phone number
Industry and company size
Billing and payment information (processed securely through Stripe)
Admin user names and email addresses
Team member information (names, emails, roles)

2.2 Candidate Information

When candidates take assessments, we collect:

First name, last name, and email address
Assessment responses and answers
Time taken to complete assessments
Assessment scores and evaluation results

2.3 Usage and Technical Data

We automatically collect:

IP addresses and device information
Browser type and version
Pages visited and features used
Date and time of access
Referring website addresses

2.4 Assessment Content

We store:

Custom questions created by your company
Job descriptions and assessment configurations
AI-generated questions and evaluation criteria
Assessment results and analytics data

3. How We Use Your Information

We use the collected information to:

Provide and maintain the Service
Generate AI-powered assessments using advanced AI technology
Evaluate candidate responses and provide insights
Process payments and manage subscriptions
Send important notifications about assessments and account activity
Send team member invitation emails
Display company branding (logos) on assessment pages
Improve and optimize the Service based on usage patterns
Provide customer support and respond to inquiries
Ensure security and prevent fraud
Comply with legal obligations

4. How We Share Your Information

We do not sell your personal information. We may share your information only in the following circumstances:

4.1 Service Providers

Supabase: Database hosting and authentication services
AI Services: AI-powered question generation and evaluation (data is not used for model training)
Stripe: Payment processing and subscription management
Vercel: Website hosting and deployment

4.2 Legal Requirements

We may disclose your information if required by law, court order, or government regulation, or to protect the rights, property, or safety of SkillSure, our users, or others.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

5. Data Security

We implement industry-standard security measures to protect your information:

Encryption in transit (HTTPS/TLS) and at rest
Row-level security (RLS) policies in our database
Secure authentication using Supabase Auth
Regular security audits and updates
Access controls and role-based permissions
Secure API key management

However, no method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as:

Your account remains active
Necessary to provide you with the Service
Required to comply with legal obligations
Needed to resolve disputes or enforce agreements

Upon account deletion, we will delete or anonymize your personal information within 30 days, except where retention is required by law.

7. Your Rights and Choices

Depending on your location, you may have the following rights:

7.1 Access and Portability

You can access and export your data at any time through your account settings.

7.2 Correction

You can update your account information directly in the settings page.

7.3 Deletion

You can request deletion of your account and associated data by contacting us.

7.4 Opt-Out

You can manage notification preferences in your account settings to opt out of non-essential communications.

7.5 GDPR Rights (EU Users)

Right to be informed about data collection and use
Right to access your personal data
Right to rectification of inaccurate data
Right to erasure ("right to be forgotten")
Right to restrict processing
Right to data portability
Right to object to processing

7.6 CCPA Rights (California Users)

Right to know what personal information is collected
Right to delete personal information
Right to opt-out of sale (we do not sell personal information)
Right to non-discrimination for exercising privacy rights

8. Cookies and Tracking Technologies

We use cookies and similar technologies to:

Maintain user sessions and authentication
Remember user preferences
Analyze usage patterns and improve the Service
Provide security features

You can control cookies through your browser settings, but disabling cookies may affect the functionality of the Service.

9. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

10. Children's Privacy

SkillSure is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will take steps to delete it promptly.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your own. These countries may have different data protection laws. By using the Service, you consent to such transfers. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

12. AI and Automated Decision-Making

SkillSure uses advanced AI to generate questions and evaluate candidate responses. Important information about our AI usage:

AI evaluations are designed to assist, not replace, human decision-making
Final hiring decisions should always be made by qualified human reviewers
Assessment data sent to our AI providers is not used to train their models
We implement fairness checks to minimize bias in AI-generated content
You have the right to request human review of AI-generated evaluations

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. For significant changes, we will provide more prominent notice, such as email notification. Your continued use of the Service after such changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: privacy@skillsure.app
Support: Visit our Contact page
Data Protection Officer: dpo@skillsure.app

15. Compliance

SkillSure is committed to complying with applicable data protection regulations, including:

General Data Protection Regulation (GDPR)
California Consumer Privacy Act (CCPA)
Other applicable regional and international privacy laws