Privacy Policy

1. Who we are

SkillShaft (skillshaft.com) is an AI career readiness platform. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website or services. By using SkillShaft, you consent to the practices described here.

2. What data we collect

We collect information in the following ways:

• Assessment data: Your responses to assessment questions, your assigned segment (e.g. student, professional), category scores, total score, and assessment completion status.
• Contact information: If you enter your email address, complete a contact form, or sign in with Google, we collect your name, email address, and in some cases your phone number or organisation.
• Google OAuth profile: If you sign in via Google, we receive your name, email address, and profile picture from Google. We do not receive your Google password.
• WhatsApp contacts: If you submit the WhatsApp contact form, we store your name, phone number, and any message you provide.
• Usage data: Standard web server logs may include your IP address, browser type, and pages visited. We do not currently use third-party analytics or advertising trackers.

3. How we use your data

We use the data we collect to:

• Provide your assessment results and personalised program recommendations
• Respond to contact enquiries and connect employers or colleges with our team
• Improve our assessment questions, scoring, and program content
• Send relevant follow-up communications if you have opted in or made contact
• Administer the platform and ensure security

We do not sell your personal data to third parties. We do not use your data for targeted advertising.

4. Data storage and security

Your data is stored in a PostgreSQL database hosted on Microsoft Azure (Azure Database for PostgreSQL, hosted in an Azure data centre). Data is encrypted in transit using TLS. We apply reasonable technical and organisational measures to protect your data against unauthorised access, alteration, or loss.

Program curriculum files are stored in Azure Blob Storage with private access — they are only accessible via short-lived signed URLs generated at the time of access.

No security measure is 100% foolproof. If you believe your data has been compromised, please contact us immediately.

5. Third-party services

• Google (OAuth): If you sign in with Google, your authentication is handled by Google's OAuth system. Google's Privacy Policy applies to that interaction.
• WhatsApp (Meta): If you contact us via WhatsApp, that communication is handled by WhatsApp's platform. Meta's Privacy Policy applies.
• Microsoft Azure: Our database and file storage run on Azure infrastructure. Microsoft's data processing terms apply to hosted data.

6. Cookies and local storage

We use browser localStorage to remember whether you have completed the assessment (to suppress the assessment popup) and to store your email address after assessment completion. We use sessionStorage transiently during the Google OAuth flow to preserve your assessment progress.

We use an httpOnly session cookie for the admin area (password-protected; not set for regular visitors).

We do not use advertising cookies or third-party tracking cookies.

7. Data retention

Assessment leads and contact form submissions are retained for as long as they are operationally useful to us. If you would like your data deleted, contact us and we will remove it within a reasonable timeframe. Google OAuth user records are retained until deletion is requested.

8. Your rights

Depending on applicable law, you may have the right to:

• Request access to the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Withdraw consent for data processing where consent is the legal basis

To exercise any of these rights, contact us via the contact page.

9. Children's privacy

SkillShaft is not directed at anyone under 18 years of age. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. We encourage you to review this policy periodically.

11. Contact

For privacy-related questions or data requests, contact us through the contact page.