Privacy Policy

1. Who we are

SkillsHome ("we", "us") operates an invite-only platform that builds an AI-verified, shareable professional profile from information you provide. For privacy questions, contact privacy@skillshome.me.

2. What we collect

• Account data — your name, email, and avatar from the OAuth provider you sign in with (Google or GitHub).
• Profile content — résumés/documents you upload or URLs you submit, and the skills, experience, and projects extracted from them.
• Usage data — product events (e.g. profile created, link shared) and aggregate analytics. We do not log raw résumé text or scores to analytics.
• Technical data — IP address and request metadata used for security and rate limiting.

3. How we use it

• To extract skills and build and host your profile and shareable link.
• To power the recruiter chat on your public profile, grounded only in your own profile data.
• To operate, secure, and improve the service.

4. AI processing & your résumé

Skill extraction and the recruiter chat run on a self-hosted, local language model. Your résumé and profile data are not sent to third-party AI providers and are never used to train any model. Processing happens on our own infrastructure.

5. Sharing

We do not sell your data. A profile is private until you publish it; a published profile is visible to anyone with the share link. We use a small number of infrastructure processors (hosting, object storage, error monitoring, product analytics) under data-processing terms.

6. Retention & deletion

Uploaded source files are deleted after your review package is confirmed. You can delete a profile or your account at any time; deletion permanently removes your profile, skills, embeddings, stored files, and view logs (see "Your rights" below).

7. Your rights (GDPR)

If you are in the EEA/UK, you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — correct inaccurate data (you can edit your profile directly).
• Erasure — request deletion ("right to be forgotten"); our hard-delete purges profile, skills, embeddings, files, and view logs.
• Portability — receive your profile data in a structured, machine-readable format.
• Restriction / objection — limit or object to certain processing.
• Withdraw consent and lodge a complaint with your local supervisory authority.

Our legal bases are your consent (account creation, profile publishing) and our legitimate interest in operating a secure service. To exercise any right, email privacy@skillshome.me.

8. Cookies

We use strictly-necessary cookies for authentication (an HttpOnly refresh-token cookie and short-lived CSRF/state cookies during sign-in). Access tokens are kept in memory only. We do not use third-party advertising cookies.

9. Security

OAuth uses PKCE; sessions can be revoked immediately; uploads are malware-scanned; secrets are kept server-side. No system is perfectly secure, but we apply layered safeguards.

10. Changes

We will post any changes here and update the date above.