Legal
Privacy Policy
This notice describes what SkillSync collects, who processes it, how long it is kept, and how to have it removed. Questions can go to hello@skillssync.xyz.
What we collect
- Account details. Your email address, and a password if you do not sign in with Google. Authentication is handled by Supabase.
- Your goals. The career goal, education level, programme, year of study, priorities and courses you enter during onboarding.
- Documents you upload. The coursework, transcripts, project reports and similar files you choose to submit for analysis.
- Skills extracted from them. Skill names, categories, confidence scores and short quoted excerpts from your documents, plus the readiness scores and skill gaps calculated from them.
- Payment records. For each paid upload we store a payment reference, the amount and whether it succeeded. We never see or store your card details or M-PESA PIN.
- A wallet address, only if you link one. Optional, and only used for the blockchain feature described below.
- A newsletter email address, only if you subscribe. Nothing else is collected with it.
Who else processes your data
- Supabase — hosts our database, file storage and login system.
- Google (Gemini) — reads the documents you upload in order to extract skills from them. This is the one place a document leaves our own infrastructure, and it happens only when you upload a file for analysis.
- Paystack — takes the M-PESA payment for each upload.
- Vercel — hosts the site and provides page-view analytics, which are collected without cookies.
- Our email provider — sends account emails such as sign-in notifications.
We do not sell your data, and we do not use a third-party marketing platform for the newsletter — subscriber addresses stay in our own database.
Who can see your profile
Your documents and skills are private by default. Uploaded files are kept in private storage and are never reachable by a public link. If you switch on profile sharing, a page showing your career goal, extracted skill names and readiness summary becomes viewable by anyone with the link — your uploaded files never are. You can switch sharing off again at any time from your profile.
The blockchain feature is permanent
If you choose to record your skills on Base, a one-way fingerprint (hash) of your skill list and your wallet address are written to a public blockchain. Your skills, documents and email are not. Because a blockchain cannot be edited, that record cannot be deleted by us or by you. This feature is entirely optional.
How long we keep it
- Uploaded files: up to 24 months from upload, then deleted.
- Extracted skills and readiness history: kept until you delete them or your account.
- Newsletter address: kept until you unsubscribe.
Deleting a document removes the stored file immediately, along with the skills that were extracted from it.
Removing your data
You can delete any uploaded document from the Documents page, and turn off profile sharing from the Profile page. To unsubscribe from the newsletter, or to have your account and its data deleted, email hello@skillssync.xyz and we will action it. The blockchain record described above is the one exception that cannot be removed.