Privacy Policy
Last updated: March 15, 2026
1. Information We Collect
We collect information you provide directly: name, email address, company name, and role when you create an account. We also collect usage data such as pages visited, courses started, and feature interactions to improve the learning experience.
2. How We Use Your Data
Your data is used to provide and improve the SkillPath service, personalise learning recommendations, generate analytics for L&D administrators, and communicate product updates. We never sell personal data to third parties.
3. Data Retention
We retain account data for as long as your organisation maintains an active subscription. Upon cancellation, data is retained for 90 days to allow for reactivation, then permanently deleted. Learner progress data can be exported at any time via CSV or API.
4. Data Security
All data is encrypted in transit (TLS 1.3) and at rest (AES-256). We maintain SOC 2 Type II compliance and undergo annual third-party penetration testing. Data is stored in EU (Frankfurt) or US (Virginia) data centres based on your preference.
5. Your Rights
Under GDPR, you have the right to access your personal data, the right to rectify inaccurate data, the right to delete your data, the right to restrict processing, the right to data portability, the right to object to processing, the right not to be subject to a decision based solely on automated processing — including profiling — that produces legal or similarly significant effects (GDPR Art. 22; you may request human review, contest the decision, and express your point of view), and the right to lodge a complaint with a supervisory authority. Contact privacy@skillpath.app to exercise any of these rights. We respond to all requests within 30 days.
6. Do Not Track and Global Privacy Control
We honour Global Privacy Control (GPC) where legally required. We do not currently respond to Do Not Track (DNT) browser signals because no common technical standard defines how websites should interpret them.
7. Cookies
We use essential cookies for authentication and preferences. Analytics cookies (opt-in) help us understand usage patterns. We do not use advertising cookies or share cookie data with third parties.
8. Contact
For privacy inquiries, contact our Data Protection Officer at privacy@skillpath.app. The current registered address is shown in the footer (see SITE_CONFIG.legalEntity.registeredAddress — buyer must replace the placeholder with their real address before publishing).