Privacy Policy

1. Information we collect

• Account and profile: first name, optional last name, email address, role (such as trainee, trainer, or HR), profile photo, phone number, biography, location, skills, interests, education, resume, and other profile details you choose to provide.
• Authentication and security: credentials and tokens used to keep you signed in securely, including optional one-time codes or verification links sent to your email.
• Learning activity: course enrollments, progress, notes, reviews, lesson activity, skill verification attempts and results, Career Analyzer answers and results, and related content you upload or submit.
• Files and media: resumes, profile images, course materials, practical submissions, certificates, and other files or media you upload.
• Payments: payment-related data when you pay for courses or verification fees. Payment providers such as Stripe handle full card data; we do not store full card numbers on our servers.
• Technical data: IP address, device and browser type, approximate location derived from IP, and service logs used for security, debugging, and service improvement. We do not request contacts, microphone access, precise device location, or the phone number stored on your device.

2. How we use your information

• To create and manage your account and provide the service.
• To deliver courses, assessments, certificates, and trainer, trainee, or HR features you request.
• To generate Career Analyzer summaries and recommendations when you submit an assessment.
• To process payments and prevent fraud with our payment partners.
• To communicate with you about your account, security, and service updates.
• To comply with legal obligations and enforce our terms.

3. Sharing of information

We do not sell your personal information. We may share data with:

• Hosting and storage providers, including Firebase and Cloudflare, to store profiles, files, course content, certificates, and video content.
• Payment processors such as Stripe to complete transactions you initiate.
• Authentication providers such as Google or LinkedIn when you choose social sign-in.
• AI service providers when needed to process Career Analyzer responses and generate requested insights.
• Email and communications providers to deliver account verification, password reset, and service emails.
• Authorities when required by law or to protect the rights, safety, and security of our users and the public.

4. Data retention and deletion

We keep information for as long as your account is active or as needed to provide the service, prevent fraud, resolve disputes, meet legal requirements, and enforce our agreements. When we receive and verify an account deletion request, we delete the associated personal data from active systems, subject to legitimate retention requirements.

Limited records may be retained for legal, security, fraud-prevention, dispute-resolution, or accounting purposes. Any retained information is restricted to that purpose and kept only for the required period. Submit a request through our account deletion page.

5. Security

We use access controls, authentication protections, and industry- standard safeguards to protect data in transit and at rest. Our website and production APIs are intended to use HTTPS. No method of transmission over the Internet is fully secure, so you should use a strong password and protect your account credentials.

6. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, or export your personal data, or to object to or restrict certain processing. You can request account deletion at skillsathi.org/delete-account or contact us using the details below. We will respond in line with applicable law.

7. Children

SkillSathi is designed for children, teens, and adults. We aim to provide age-appropriate learning content and take additional care with children's personal information. Where required by law, we require age-screening and parental-consent measures where legally required before collecting or using children's personal information. We do not knowingly sell children's personal information or use it for personalized advertising.

A parent or legal guardian may contact us to request access to, correction of, or deletion of a child's information. If we learn that we collected a child's information without the required consent, we will take reasonable steps to delete it.

8. International transfers

Your information may be processed in countries where we or our providers operate. Where required, we use appropriate safeguards for cross-border transfers.

9. Changes to this policy

We may update this policy from time to time. We will post the revised version on this page and update the "Last updated" date. Material changes may be communicated through the platform or by email where appropriate.

10. Contact

For privacy, child-safety, or account-deletion requests, contact SkillSathi (Pvt.) Ltd. at skillsathiofficials@gmail.com. Our office is at F-15/1, Street 13, House 35, JKCHS, Islamabad, Pakistan.