Privacy Policy

1. Information We Collect

We collect the following categories of personal data:

• Account data: email address, full name, password (hashed), role (seeker or employer)
• Professional data: job title, work experience, skills, bio, location, salary expectations
• Skills & verification: GitHub commits, LinkedIn profile data (only with your OAuth consent), AI-parsed resume data
• Usage & profiling: swipe history, match vectors, chat logs (stored via Supabase), session data, IP address, device and browser information
• AI inferences: skill match scores, compatibility predictions generated by our AI systems (Claude by Anthropic)
• Payment data: processed by Stripe, Inc. We do not store full card numbers. We retain transaction IDs and subscription status only.
• Sensitive data: To the extent AI-inferred skill assessments constitute sensitive data under NJDPA, we process them only with your explicit consent at account creation.

2. How We Use Your Information

We use your data to:

• Provide AI-powered job matching services (match accuracy is an internal benchmark — individual results vary)
• Verify skills via GitHub, LinkedIn, or resume import (with your consent)
• Enable real-time chat between matched users
• Process subscription payments and send receipts
• Improve our matching algorithms and platform features
• Send transactional emails (account, billing, security)
• Comply with applicable law and respond to legal requests
• Detect fraud, abuse, and security threats

3. How We Share Your Information

• With matched employers/recruiters: Only after you swipe right or approve a connection. You control what profile data is visible.
• Service providers: AWS (hosting/storage), Supabase (database), Anthropic/Claude (AI prompts), Stripe (payments), Vercel (deployment). Each is bound by data processing agreements.
• Legal compliance: We may disclose data when required by law, court order, or to protect our legal rights.
• Business transfers: In a merger or acquisition, your data may transfer to the successor entity with advance notice.
• We do not sell your personal data to third parties. We may share anonymized, aggregate statistics that cannot identify you.

4. Your Rights (NJDPA & CCPA)

Residents of New Jersey and California have the following rights regarding their personal data:

• Right to Access: Request a copy of personal data we hold about you.
• Right to Correction: Request correction of inaccurate data.
• Right to Deletion: Request deletion of your personal data, subject to legal retention requirements.
• Right to Opt-Out: Opt out of profiling, targeted advertising, or data sharing at any time.
• Right to Data Portability: Receive your data in a structured, machine-readable format.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of these rights.

5. Cookies & Tracking

We use the following categories of cookies:

• Essential: Required for login sessions and security. Cannot be disabled.
• Analytics: Track platform usage and improve features (opt-out available).
• Functional: Remember your preferences (swipe history, settings).

See our Cookie Policy for full details. You can manage preferences via the cookie banner or your browser settings.

6. Data Security & Retention

We use industry-standard security measures including AWS encryption at rest and in transit, Supabase Row-Level Security (RLS), and hashed passwords. We retain your data only as long as your account is active or as required by law. Upon account deletion, personal data is removed within 30 days except where retention is required by law.

7. Children's Privacy

Skill-Linc is not intended for users under 18 years of age. We do not knowingly collect personal data from minors. If we discover we have collected data from a minor, we will delete it immediately. Contact us at privacy@skill-linc.com if you believe a minor has created an account.

8. Changes to This Policy

We will notify you of material changes via email and by posting an updated policy on this page with a new "Last Updated" date. Continued use after notice constitutes acceptance of the updated policy.

9. Contact Us

For privacy inquiries, data requests, or to exercise your rights: