Privacy Policy

1. Data We Process

• Account data: email, name, authentication metadata.
• Billing data: subscription and invoice status from Stripe (no raw card numbers).
• Service telemetry: API request metadata, rate-limit and error logs.
• Security telemetry: abuse signals, policy enforcement events, and access-control audit logs.
• Support data: emails and tickets sent to support or legal contacts.

2. Data We Do Not Intend To Collect By Default

Local skill scanning is designed to run without sending source code to SkillGate. If you opt into hosted features, only data required to provide those features is processed.

3. Legal Bases

We process data to perform contracts, protect service integrity, comply with legal obligations, and pursue legitimate interests such as abuse prevention and reliability.

4. Retention

We retain personal data only as long as needed for service operation, legal obligations, dispute resolution, abuse investigations, and security incident response.

5. Security and Abuse Prevention

We process relevant telemetry to detect, prevent, and respond to fraud, abuse, unauthorized access, safeguard circumvention, malware delivery attempts, and other threats to users or infrastructure.

6. Third Parties

We use infrastructure and payment processors to deliver the service. Stripe processes payment information under its own terms and privacy policy.

7. Legal Requests and Disclosures

We may disclose information to comply with applicable law, regulation, valid legal process, or to protect rights, safety, and service integrity.

8. Your Rights

Subject to applicable law, you may request access, correction, deletion, or export of your personal data, and object to or restrict certain processing.

9. Security

We use technical and organizational safeguards including encryption in transit, least-privilege access controls, and monitoring for abuse and operational anomalies.

10. Contact

Privacy requests: support@skillgate.io