Privacy Policy

Skill Mastery, LLC ("Skill Mastery," "we," "us," or "our") protects the privacy of our users and the employees of the organizations we serve.

This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our enterprise AI workforce readiness platform and related services ("Services").

By using our Services, you consent to the practices described here. If you do not agree, please discontinue use of the Services.

2.1 Account Information

When you or your organization creates an account, we collect:

• Name and email address
• Company name and size
• Role and department
• Billing and payment information (processed securely via third-party processors)
• Profile information you choose to provide

2.2 Usage Data

As you use our Services, we automatically collect:

• Assessment responses, scores, and competency levels
• Course progress and completion records
• Initiative participation and KPI data
• Feature interactions and time spent on platform activities
• Workflow and productivity data submitted as part of AI transformation tracking

2.3 Device & Technical Data

• IP address and approximate location
• Browser type and version
• Operating system
• Referring URLs and navigation paths
• Session identifiers and authentication tokens

2.4 Cookies & Tracking Technologies

We use cookies and similar technologies to maintain sessions, analyze usage, and deliver relevant content. See Section 8 for details, or visit our Cookie Settings page to manage preferences.

We use the information we collect to:

• Provide, operate, and improve our Services
• Generate individual and organizational AI proficiency scores and reports
• Personalize learning paths and training recommendations
• Process payments and manage subscriptions
• Send transactional communications (account confirmations, assessment results, progress reports)
• Send marketing communications, with your consent where required by law
• Ensure platform security and prevent fraud
• Comply with legal obligations
• Conduct aggregated, anonymized research to improve our AI readiness methodologies

We do not sell your personal information. We may share data with:

• Your organization's administrators. Assessment results, competency scores, and learning progress may be visible to authorized company admins and managers within your account.
• Service providers. We use trusted vendors (e.g., Supabase, Vercel, payment processors). They are contractually bound to protect your data and use it only to perform services on our behalf.
• Legal compliance. We may disclose data when required by law, court order, or governmental authority.
• Business transfers. In a merger, acquisition, or sale of assets, your data may be transferred. We will provide notice before your data becomes subject to a different privacy policy.

We retain your data while your account is active or as needed to provide our Services.

After termination, we may retain data for up to 90 days for account recovery, then delete or anonymize it—except where the law or legitimate business needs require longer retention (e.g., billing records).

Request earlier deletion at privacy@skillmastery.org.

We use industry-standard measures including encryption in transit (TLS), encryption at rest, access controls, and security reviews. Our primary data infrastructure is provided by Supabase, which maintains SOC 2 Type II compliance.

No system is perfectly secure. We cannot guarantee that unauthorized parties will never defeat our safeguards. Protect your own account credentials.

Depending on your location, you may have rights regarding your personal data, including:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data ("right to be forgotten")
• Portability: Request your data in a structured, machine-readable format
• Objection: Object to certain processing, including direct marketing
• Restriction: Request restriction of processing in certain circumstances

To exercise these rights, contact privacy@skillmastery.org. We respond within 30 days and may verify your identity first.

GDPR: If you are in the EEA, you have additional rights under the GDPR. Our legal bases include contract performance, legitimate interests, and consent.

CCPA: California residents have rights including to know, delete, and opt out of the sale of personal information. We do not sell personal information.

We use these categories of cookies:

• Essential: Required for the platform to function (e.g., authentication, security).
• Analytics: Help us understand usage patterns (e.g., Google Analytics).
• Marketing: Measure campaigns and deliver relevant ads (e.g., Facebook Pixel).
• Functional: Remember preferences and settings.

Manage preferences anytime on our Cookie Settings page.

Our platform may link to third-party sites. We are not responsible for their privacy practices. Review their policies before you share personal information.

Our Services are for enterprise use and are not directed at individuals under 18. We do not knowingly collect data from minors. If we learn we have, we delete it promptly.

We operate from the United States. If you access our Services from outside the US, your data may be transferred to and processed in the US.

For transfers from the EEA, we rely on Standard Contractual Clauses approved by the European Commission.

We may update this Privacy Policy. For material changes, we will notify you by email or a notice on the platform at least 14 days before they take effect.

The Effective Date at the top of this page shows when the policy was last revised.

Questions about this Privacy Policy or our data practices: