Privacy Policy

SkillPlatform ("we", "our", "us") operates skillplatform.ai, an AI-powered interview preparation platform. For privacy inquiries, contact us at info@skillplatform.ai.

Account data: your name, email address, and password (stored as a bcrypt hash — we never store your plain-text password).

Profile & preferences: job title, years of experience, target roles, and technologies you provide during onboarding.

Audio recordings: during interview sessions, your microphone audio is captured and streamed in real-time to Google Cloud Speech-to-Text for transcription. Audio is not stored by Google after processing under their standard terms.

Video recordings: if video recording is enabled for your session, your camera feed is recorded and encrypted in Google Cloud Storage. Videos are automatically deleted after 3 days.

Interview transcripts: the text transcription of your answers is stored in our database and retained for 90 days.

Access logs: we log your IP address, browser type, and API endpoint access for security and debugging purposes.

Payment data: subscription billing is processed by Stripe. We never see or store your full card number — Stripe handles all payment data under their own PCI-DSS compliance.

Your interview answers and questions are sent to OpenAI's API for question generation and answer evaluation. Per OpenAI's API Terms of Service, OpenAI does not use API data to train its models. Your data is processed solely to generate responses and is subject to OpenAI's Privacy Policy.

Speech transcription is performed by Google Cloud. Text-to-speech (reading questions aloud) is performed by Google Cloud. Video and audio files are stored in Google Cloud. These services are governed by Google Cloud's Data Processing Terms.

By starting an interview session on SkillPlatform, you explicitly consent to the following:

• Audio streaming: Your microphone audio is captured and streamed in real-time to Google Cloud Speech-to-Text to generate a live transcript. Audio data is processed transiently — Google does not retain audio after transcription under their standard API terms.
• Video recording: If enabled for your session, your camera feed is recorded and stored in an encrypted Google Cloud Storage bucket. Videos are automatically deleted after 3 days. Video is used only to generate performance feedback and is never shared, published, or used for advertising or AI model training.
• Transcripts: The text transcription of your interview answers is stored in our database and retained for 90 days, after which it is permanently deleted.
• Local pose detection: Sessions with proctoring enabled analyze your video feed locally in your browser (TensorFlow.js PoseNet) to detect boundary violations. No pose data is sent to our servers.

You may request deletion of your recordings and transcripts at any time — see Section 7 for how to submit a data deletion request.

• Video recordings: automatically deleted after 3 days
• Interview transcripts: retained for 90 days, then permanently deleted
• Access logs (IP address, endpoint, timestamp): retained for 90 days
• Account data (name, email, preferences): retained while your account is active
• Payment history: retained as required by financial regulations (typically 7 years), managed by Stripe

You can request early deletion of your recordings, transcripts, or full account at any time by emailing info@skillplatform.ai with the subject line "Data Deletion Request". We will process your request within 30 days.

We store your authentication token in your browser's sessionStorage (not a cookie). This is cleared automatically when you close the browser tab. See our Cookie Policy for full details.

Depending on your location, you have the right to:

• Access: request a copy of the personal data we hold about you
• Correction: request correction of inaccurate or incomplete data
• Deletion: request deletion of your account and all associated data (recordings, transcripts, logs)
• Portability: request an export of your data in a machine-readable format (JSON)
• Restriction: request that we limit processing of your data
• Objection: object to processing of your data for certain purposes

How to submit a request:

• Email: info@skillplatform.ai — include your registered email address and the type of request in the subject line (e.g., "Data Deletion Request", "Data Export Request", "Data Correction Request")
• Response time: We will acknowledge your request within 5 business days and complete it within 30 days. For complex requests we may extend this by up to 60 days and will notify you if so.

GDPR rights apply to users in the European Economic Area. CCPA rights apply to California residents. We honor equivalent requests from users globally where technically feasible.

All data in transit is encrypted via HTTPS/TLS. Passwords are hashed with bcrypt (12 rounds). Database credentials and API keys are stored as environment variables and never committed to source control. GCS video storage uses server-side encryption at rest.

• OpenAI, Google Cloud, Stripe: We use these services to provide core functionality (AI processing, transcription, payment processing). We do not share your data with any other third parties.
• Analytics: We use Google Analytics for aggregate usage statistics. This does not include any personally identifiable information.
• Customer support: If you contact support, we may share relevant data with our support provider (e.g., Intercom) to assist with your inquiry. This is limited to your account email and relevant session data.

We may update this Privacy Policy from time to time. Material changes will be communicated by email or a prominent notice on the website. Continued use after changes constitutes acceptance.

For any privacy questions or data requests: info@skillplatform.ai