Our Policies
Privacy policy
Last updated on January 30, 2026
INTRODUCTION
Skill Studio AI ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our learning management platform.
We comply with the General Data Protection Regulation (GDPR) and other applicable data protection laws.
INFORMATION WE COLLECT
Personal Information
Account Information: Name, email address, profile picture
Authentication Data: Encrypted passwords, OAuth tokens
Profile Data: Job title, organization, preferences
Learning Activity Data
Course Progress: Modules completed, time spent, quiz scores
Certificates: Earned credentials and completion dates
Interaction Data: Feedback, notes, bookmarks
Technical Data
Device Information: Browser type, operating system
Usage Data: Pages visited, features used, timestamps
IP Address: For security and fraud prevention
HOW WE USE YOUR INFORMATION
Provide and improve our learning platform
Personalize your learning experience
Track and report on course progress
Issue certificates of completion
Communicate important updates and notifications
Analyze usage patterns to improve our services
Prevent fraud and ensure security
LEGAL BASIS FOR PROCESSING (GDPR)
Contract: Processing necessary to provide our services
Consent: Analytics and marketing communications (marketing emails require explicit double opt-in verification)
Legitimate Interest: Platform security and improvement
Legal Obligation: Compliance with applicable laws
MARKETING COMMUNICATIONS & CONSENT
We are committed to transparent and GDPR-compliant marketing consent practices. All marketing communications are sent only to users who have explicitly verified their consent through a double opt-in process.
How Our Double Opt-In Works:
When you sign up, you receive a consent request email:
You must click the verification link in that email to confirm you want to receive marketing communications
Verification links expire after 48 hours for security
We track all consent actions (requests, confirmations, denials) with timestamps and IP addresses for compliance audits
You can revoke marketing consent at any time through your Profile Settings
Revoking consent is immediate and stops all future marketing emails
What We Send:
Transactional emails (account setup, password resets, course completions): Sent regardless of consent status
Marketing emails (tips, updates, special offers, promotions): Sent only to users who verified consent
External Contacts:
We also collect leads through contact forms and imports into a separate contacts database with the same double opt-in consent process.
External contacts receive an initial consent request email and must verify before receiving any marketing communications.
COOKIES AND TRACKING
We use cookies and similar technologies for:
Essential Cookies: Authentication, security, preferences (always active)
Analytics Cookies: Understanding how you use our platform (requires consent)
Functional Cookies: Remembering your settings (requires consent)
You can manage your cookie preferences at any time through your profile settings.
DATA SHARING
We may share your information with:
Your Organization: If enrolled through an enterprise account, your employer may access progress reports
Service Providers: Hosting, analytics, and email services that help us operate
Legal Requirements: When required by law or to protect our rights.
We never sell your personal data to third parties.
We never sell your personal data to third parties
YOUR RIGHTS (GDPR)
Under GDPR, you have the right to:
Access: Request a copy of your personal data
Rectification: Correct inaccurate or incomplete data
Erasure: Request deletion of your data ("right to be forgotten")
Portability: Receive your data in a machine-readable format
Restriction: Limit how we process your data
Object: Opt out of certain processing activities
Withdraw Consent: Revoke previously given consent
Access and Use of the Services
Your use of Skill Studio AI is also governed by our Privacy Policy, which outlines our approach towards handling any personal information that you may provide to us.
To exercise these rights, visit your Profile Settings → Privacy & Data tab.
DATA EXPORT & DELETION
You can request a complete export of your data or permanently delete your account through your profile settings. Data exports are provided in JSON format and include all personal and learning data associated with your account.
Account deletion is permanent and cannot be undone. All your personal data, course progress, and certificates will be removed from our systems.
DATA RETENTION
Active Accounts: Data retained while your account is active
Inactive Accounts: Deleted after 2 years of inactivity (with notice)
After Deletion: Backups purged within 30 days
Legal Requirements: Some data may be retained longer if required by law
Marketing Consent Verification Tokens: Expire and are deleted after 48 hours from creation
Consent Audit Logs: Retained for 3 years to demonstrate GDPR compliance (action, timestamp, IP, verification status)
DATA SECURITY
We implement industry-standard security measures:
Encryption in transit (TLS/HTTPS)
Encryption at rest for sensitive data
Regular security audits and monitoring
Access controls and authentication
Secure data centers with SOC 2 compliance
INTERNATIONAL TRANSFERS
Your data may be processed in countries outside your residence. We ensure appropriate safeguards are in place, including Standard Contractual Clauses for EU data transfers.
CHILDREN'S PRIVACY
Your data may be processed in countries outside your residence. We ensure appropriate safeguards are in place, including Standard Contractual Clauses for EU data transfers.
CHANGES TO THIS POLICY
We may update this Privacy Policy periodically. We will notify you of significant changes via email or platform notification. Continued use after changes constitutes acceptance.
CONTACT US
For privacy-related inquiries or to exercise your rights:
Email: privacy@skillstudio.ai
Data Protection Officer: dpo@skillstudio.ai
You also have the right to lodge a complaint with your local data protection authority.
