Data Protection Policy

1. Data Controller Information

SkillDrift, Inc. acts as the data controller for the personal data we process through our platform and services.

2. Types of Data We Collect

Personal Information

• Identity Data: First name, last name, username, professional title
• Contact Data: Email address, telephone number, location, employer information
• Account Data: Login credentials, account preferences, subscription details

Professional and Career Data

• Resume and CV Information: Work experience, education, certifications, achievements
• LinkedIn Profile Data: Professional background, connections, endorsements (with your consent)
• Skill Profiles: Current skills, competency levels, skill gaps identified by our AI
• Career Aspirations: Goals, preferences, desired career paths
• Learning Progress: Courses completed, certifications earned, training activities
• Performance Data: Assessments, feedback, and evaluation results (where applicable)

Technical and Usage Data

• Technical Data: IP address, browser type, device information, operating system
• Usage Data: Platform interactions, feature usage, session duration, click patterns
• AI Interaction Data: Queries to our AI systems, generated insights, recommendation interactions
• Integration Data: Information from connected HR systems, learning platforms, and third-party services

Enterprise Customer Data

• Organizational Data: Company structure, team hierarchies, role definitions
• Workforce Analytics: Aggregated skill inventories, talent pipeline data, succession planning information
• HR System Data: Employee records, performance reviews, training records (as authorized by employers)

3. How We Collect Data

• Direct Collection: Information you provide when creating accounts, uploading resumes, or using platform features
• Third-Party Integrations: Data from LinkedIn, HR systems (Workday, SAP), learning platforms (Coursera, Udemy)
• AI Analysis: Skill profiles and insights generated from your professional information
• Platform Usage: Automatically collected technical and behavioral data
• Enterprise Systems: Data shared by employers for workforce planning and talent mobility

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: When you provide explicit consent for specific processing activities, such as AI skill analysis or third-party integrations
• Contract Performance: To provide our talent mobility services, skill matching, and career development tools
• Legitimate Interests: For platform improvement, fraud prevention, and providing relevant career opportunities
• Legal Obligations: To comply with employment law, data protection regulations, and other legal requirements
• Employer Authorization: When processing employee data as authorized by enterprise customers for workforce planning

5. How We Use Your Data

AI-Powered Services

• Generate comprehensive skill profiles from your professional experience
• Identify skill gaps and recommend learning opportunities
• Match you with relevant career opportunities and job openings
• Provide personalized career path recommendations
• Create tailored resumes and professional documents

Platform Operations

• Provide access to our talent mobility platform and features
• Maintain and improve service functionality
• Provide customer support and technical assistance
• Process payments and manage subscriptions
• Ensure platform security and prevent fraud

Enterprise Services

• Workforce planning and strategic talent alignment
• Internal talent discovery and mobility facilitation
• Skills gap analysis and training recommendations
• Succession planning and leadership development
• HR analytics and reporting dashboards

6. Data Sharing and Disclosure

We only share your data in the following circumstances:

• With Your Consent: When you explicitly authorize data sharing with potential employers or learning partners
• Service Providers: With trusted third-party vendors who help us operate our platform (cloud storage, analytics, payment processing)
• Enterprise Customers: Within your organization for internal mobility and workforce planning (for employee users)
• Legal Requirements: When required by law, court order, or to protect our legal rights
• Business Transfers: In connection with mergers, acquisitions, or asset sales (with user notification)

We never sell your personal data to third parties.

7. AI and Automated Decision Making

Our platform uses artificial intelligence to provide personalized insights and recommendations. Here's how we ensure responsible AI use:

• Transparency: We provide explanations for AI-generated recommendations and skill assessments
• Human Oversight: AI insights are designed to assist, not replace, human decision-making
• Bias Prevention: We regularly audit our algorithms for fairness and work to eliminate discriminatory outcomes
• User Control: You can review, correct, and provide feedback on AI-generated insights
• No Fully Automated Decisions: Significant decisions (hiring, promotions) always involve human review

8. Data Security Measures

We implement comprehensive security measures to protect your data:

• Encryption: Data encrypted in transit (TLS 1.3) and at rest (AES-256)
• Access Controls: Role-based access controls and multi-factor authentication
• Infrastructure Security: Secure cloud hosting with regular security audits
• Employee Training: Regular data protection and security training for all staff
• Incident Response: Comprehensive breach detection and response procedures
• Regular Audits: Third-party security assessments and penetration testing
• Data Backups: Secure, encrypted backup systems with tested recovery procedures

9. Data Retention

We retain your data for different periods based on the type of information and purpose:

• Account Data: Retained while your account is active and for 30 days after account deletion
• Professional Data: Retained as long as your account is active and for 30 days after account deletion
• Usage Data: Typically retained for 2 years for analytics and platform improvement
• AI Training Data: Anonymized data may be retained longer for model improvement
• Legal Requirements: Some data may be retained longer to comply with legal obligations

When data is no longer needed, we securely delete or anonymize it using industry-standard methods.

10. Your Privacy Rights

You have the following rights regarding your personal data:

• Right of Access: Request copies of your personal data and information about how it's processed
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data (subject to legal requirements)
• Right to Restrict Processing: Limit how we use your data in certain circumstances
• Right to Data Portability: Receive your data in a structured format for transfer to another service
• Right to Object: Object to processing based on legitimate interests or for marketing purposes
• Right to Withdraw Consent: Withdraw consent for specific processing activities
• Right to Human Review: Request human review of automated decisions that significantly affect you

To exercise these rights, contact us at legal@skilldrift.ai. We will respond within 30 days.

11. How to Delete Your Account

You can permanently delete your SkillDrift account by following these steps:

If you encounter any issues during the account deletion process, please contact our support team at legal@skilldrift.ai for assistance.

12. International Data Transfers

SkillDrift operates globally and may transfer your data across international borders. When we do so, we ensure appropriate safeguards:

• Adequacy Decisions: Transfers to countries with adequate data protection laws
• Standard Contractual Clauses: EU-approved contractual protections for other transfers
• Enterprise Controls: Additional safeguards for enterprise customer data
• Data Residency Options: Regional data storage options for enterprise customers

13. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience:

• Essential Cookies: Required for platform functionality and security
• Analytics Cookies: Help us understand platform usage and improve services
• Preference Cookies: Remember your settings and personalization choices
• Third-Party Cookies: From integrated services like LinkedIn or learning platforms

You can control cookie settings through your browser preferences or our cookie consent manager.

14. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that we have collected such information, we will take steps to delete it promptly.

15. Changes to This Policy

We may update this Data Protection Policy to reflect changes in our practices or applicable laws. We will notify you of material changes by:

• Email notification to registered users
• Prominent notice on our platform
• Updated effective date on this policy

Continued use of our services after changes constitutes acceptance of the updated policy.

16. Contact Information

For questions about this Data Protection Policy, to exercise your privacy rights, or to report concerns:

If you are not satisfied with our response to your privacy concerns, you have the right to lodge a complaint with your local data protection authority or supervisory authority.