OpenSkills AI, Inc. ("OpenSkills AI," "we," "us," or "our") operates the open-skills.ai platform and related services (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree, please discontinue use of the Service immediately.
Account Information: When you register, we collect your name, email address, password, company name, industry, and role. Company administrators may also provide billing address and company size.
Employee Data: Company administrators may add employee names, email addresses, job titles, and role information. Employees provide assessment responses, course completion data, and AI Coach conversation history through their use of the Service.
Usage Data: We automatically collect information about your interactions with the Service, including pages visited, features used, assessment results, course progress, timestamps, browser type, device information, and IP address.
Payment Information: Payment processing is handled exclusively by Stripe, Inc. We do not store, process, or have access to full credit card numbers. We receive from Stripe: billing name, billing address, last four digits of the card, card expiration date, and transaction records.
Communications: If you contact us for support, we retain the content of your communications, email address, and our responses.
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data on the following lawful bases:
We use collected information to:
We do not sell your personal information to third parties. We do not use your data for targeted advertising.
OpenSkills AI uses third-party AI services to generate assessments, learning paths, and coaching responses. When these features are used, relevant context (employee role, industry, skill data, assessment responses, and/or conversation history) is transmitted to AI providers for processing.
We use enterprise-grade API access with data processing agreements (DPAs) that contractually prohibit our AI providers from using customer data to train, improve, or develop their models. Specifically:
We transmit only the minimum context necessary for each AI request. AI-generated outputs (assessment questions, path recommendations, coaching responses) are stored by us as part of the Service and treated as Service Data.
We share data with the following third-party service providers ("sub-processors") who process data on our behalf:
| Provider | Purpose | Data Shared | Location |
|---|---|---|---|
| AI Providers | AI assessment, coaching & path generation | Role, industry, skill data, conversation context | United States |
| Stripe | Payment processing | Billing name, address, payment method | United States |
| SendGrid (Twilio) | Transactional email | Email address, name | United States |
| Railway | Infrastructure & hosting | All Service Data (encrypted) | United States |
We will provide at least 30 days' notice before adding new sub-processors that materially change how your data is processed. Registered administrators will be notified by email.
Beyond the sub-processors listed above, we may disclose your information:
The Service is hosted in the United States. If you access the Service from outside the United States, your information will be transferred to, stored, and processed in the United States.
For users in the EEA, UK, or Switzerland, we rely on the following transfer mechanisms as applicable: (a) EU-U.S. Data Privacy Framework, (b) Standard Contractual Clauses approved by the European Commission, or (c) your explicit consent. You may request a copy of the applicable transfer mechanism by contacting us.
We retain your personal data for as long as your account is active or as needed to provide the Service. Specifically:
We implement commercially reasonable administrative, technical, and physical security measures to protect your data. These include encryption in transit (TLS 1.2+), encryption at rest (AES-256), secure password hashing (bcrypt), access controls, and regular security reviews. See our Security page for additional details.
However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to protect your personal data, we cannot guarantee its absolute security.
All users have the right to:
California Residents (CCPA/CPRA): In addition to the above, California residents have the right to: (a) know what categories of personal information are collected, used, and disclosed; (b) request deletion of personal information; (c) opt out of the "sale" or "sharing" of personal information (note: we do not sell or share personal information as defined under the CCPA); and (d) not be discriminated against for exercising privacy rights. To submit a verifiable consumer request, contact us at the address below.
EEA/UK Residents (GDPR): In addition to the above, you have the right to lodge a complaint with your local data protection authority if you believe we have not adequately addressed your concerns.
To exercise any of these rights, contact us at support@open-skills.ai. We will respond within 30 days (or sooner as required by applicable law). We may ask you to verify your identity before processing your request.
The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have inadvertently collected such information, we will take steps to delete it promptly.
We use a minimal set of cookies for authentication, security, and user preferences. We do not use advertising or behavioral tracking cookies. See our Cookie Policy for full details.
We may update this Privacy Policy from time to time. For material changes, we will notify registered users by email at least 30 days before the changes take effect and update the "Last updated" date above. Your continued use of the Service after the effective date of any changes constitutes your acceptance of the revised policy.
For privacy-related questions, data requests, or complaints:
OpenSkills AI, Inc.
Email: support@open-skills.ai
Subject line: "Privacy Request"