1. Introduction
[COMPANY_NAME] ("we", "us", "our") operates skave.ai (the "Service"). This Privacy Policy explains how we collect, use, and protect your personal information.
We are based in [COUNTRY]. Contact: [SUPPORT_EMAIL].
2. Information We Collect
Information You Provide
- Email address
- Full name
- Professional title
- LinkedIn URL (optional)
- Field, specialization, level
- Bio
- Profile picture
- Country
Information from CV Analysis
- CV content you upload
- Extracted experience, education, skills
- AI-generated profile insights
Information from Assessments
- Quiz answers
- Assessment scores
- Time taken
- Learning patterns
- Streak data
Information from Community
- Posts (Voices), insights (comments)
- Connections (Mentors / Peers / Apprentices)
- Messages
- Reactions
- Achievements
Technical Data
- IP address
- Browser type and device info
- Pages visited
- Session duration
3. How We Use Your Information
- Provide assessment and verification services
- Generate personalized recommendations
- Match you with relevant community members
- Send transactional emails
- Improve our AI models and platform
- Comply with legal obligations
4. Third-Party Services
We use the following third-party services that may process your data:
- Anthropic (Claude API): Processes quiz answers for evaluation, CV content for analysis, and question generation. Subject to Anthropic's privacy policy.
- Supabase: Stores your data securely with encryption. Servers located in EU (Frankfurt).
- Lovable Cloud: Hosting and infrastructure.
- Resend: Sends transactional emails (welcome, notifications, etc.).
- Google: OAuth authentication. Subject to Google's privacy policy.
We have data processing agreements with these providers.
5. Data Sharing
We do not sell your personal data.
Your public profile information is visible to other users when you set your profile to Public.
Future feature: Verified recruiters may search public profiles (separate feature with explicit consent).
6. Your Rights (GDPR)
If you are in the European Economic Area, you have the following rights:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate data
- Erasure: Request deletion ("right to be forgotten")
- Portability: Receive your data in a structured format
- Restriction: Limit how we process your data
- Object: Object to specific processing
- Withdraw consent: Revoke consent anytime
To exercise these rights, contact [SUPPORT_EMAIL]. You can also lodge a complaint with your local data protection authority.
7. Data Retention
- Active accounts: data retained while account exists
- Deactivated accounts: 30-day grace period, then permanent deletion
- Backups: 90 days
- Server logs: 30 days
- Analytics data: aggregated and anonymized
9. Children's Privacy
Skave is intended for users 18 years and older. We do not knowingly collect data from minors.
10. International Data Transfers
Your data may be transferred to:
- EU (primary servers in Frankfurt)
- US (AI processing via Anthropic, email via Resend) — protected by Standard Contractual Clauses
11. Security
We implement industry-standard security:
- Encryption at rest (database)
- Encryption in transit (HTTPS)
- Access controls
- Regular security audits
No system is 100% secure. We encourage strong passwords and account vigilance.
12. Changes to This Policy
We may update this policy. Material changes will be notified via email or in-app 30 days in advance. Continued use means acceptance.
13. Contact
- Privacy questions: [SUPPORT_EMAIL]
- Data Protection Officer: [DPO_CONTACT]
- Legal: [LEGAL_EMAIL]
