SkillsDB Privacy Policy

Updated: December 1, 2025

SkillsDB Inc. ("SkillsDB," "we," "our," or "us,") provides software and services to help organizations manage skills, competencies, and workforce planning. Our mission is to make learning culture universal. We are committed to protecting your privacy and handling personal information with transparency and care.

This Privacy Policy explains how we collect, use, and protect information when you use our marketing website, applications, and services (collectively, the "Services"). It also explains your rights under applicable data protection laws, including the EU General Data Protection Regulation ("GDPR") and the California Consumer Privacy Act ("CCPA").

Information We Collect

We collect different types of information depending on whether you interact with our marketing website or use our products.

From our website and marketing activities:

  • Contact details you provide (name, email, company, etc.)
  • Analytics and usage data (cookies, IP addresses, device/browser information, etc.)
  • Marketing preferences and communications history

From our products:

  • Account information (name, email, role, company, etc.)
  • Skills, competency, and job-related information you or your organization provide
  • Log data, device information, and usage activity within SkillsDB
  • Customer support requests and communications

We do not intentionally collect sensitive personal information unless explicitly provided for business purposes.

How We Use Information

We use collected information to:

  • Provide, operate, and improve our Services
  • Authenticate users and ensure secure access
  • Deliver support and respond to requests
  • Analyze usage to improve features and usability
  • Send service-related and administrative messages
  • Comply with legal, contractual, and security obligations

Marketing-related communications are sent only where permitted by law, and you may opt out at any time.

Legal Bases for Processing (GDPR)

For individuals in the European Economic Area (EEA), United Kingdom, and Switzerland, we rely on the following legal bases:

  • Contractual necessity: To provide the Services you or your organization requested
  • Legitimate interests: To improve our Services, prevent fraud, and maintain security
  • Consent: For certain marketing or optional data uses
  • Legal obligations: To comply with laws and regulations

Sharing & Subprocessors

We do not sell personal data. We share information only as follows:

  • Subprocessors: Trusted third parties who provide hosting, analytics, communications, and security services. A current list is maintained in our Trust Center
  • Business partners: When necessary to fulfill customer requests
  • Legal or security needs: If required by law, court order, or to protect rights, safety, or security

All subprocessors are bound by contractual obligations that include confidentiality, security, and data protection requirements.

Data Retention

We retain customer and user data for as long as an account remains active or as necessary to provide services under the customer agreement. If a customer terminates their use of SkillsDB, we continue to retain their data unless and until we receive a written deletion request. This allows for potential reactivation of services and compliance with business, contractual, or legal obligations.

Customers may request deletion of their data at any time, in accordance with applicable data protection laws (e.g., GDPR, CCPA). Upon such request, we permanently delete personal data from our systems unless retention is required for legal, regulatory, or security purposes.

Data collected on our marketing website (e.g., analytics, cookies, and lead forms) is retained in line with our Cookie Policy and deleted or anonymized once it is no longer needed.

Security Practices

We maintain strict technical and organizational measures to protect data, consistent with our SOC 2 compliance program. These include, but are not limited to:

  • Encryption of data in transit and at rest
  • Access controls and authentication safeguards
  • Continuous monitoring and vulnerability management
  • Vendor due diligence and contractual protections
  • Incident detection and response protocols

While no system is completely secure, we work to ensure the confidentiality, integrity, and availability of customer data.

International Data Transfers

SkillsDB is based in the United States and may process data outside your country of residence. When transferring personal data from the EEA, UK, or Switzerland, we rely on:

  • Standard Contractual Clauses (SCCs) approved by the European Commission
  • Other safeguards or adequacy decisions where applicable

Your Rights

Depending on your location, you may have the right to:

  • Access, correct, or update your personal data
  • Request deletion ("right to be forgotten")
  • Restrict or object to certain processing
  • Request a copy of your data (portability)
  • Withdraw consent where processing is based on consent

EEA/UK users may lodge a complaint with their local data protection authority. California residents may exercise their CCPA rights by contacting us as described below.

Data Access Requests (GDPR/DSARs)

If you are located in the EEA, UK, or another jurisdiction with similar rights, you may request confirmation of whether we process your personal data and obtain a copy of that data, along with information about how it is processed. We will respond to all such requests within one month, in accordance with applicable law. Requests are free of charge unless manifestly unfounded or excessive. To protect your privacy, we may take steps to verify your identity before fulfilling the request.

Requests can be made by emailing support@skillsdb.com.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, technology, or our practices. If changes are material, we will provide notice through our website, email notifications, Trust Center or Services.

Contact Us

If you have questions or requests regarding this Privacy Policy or your data, please contact us at:

SkillsDB Inc.
trust.skillsdb.com or support@skillsdb.com

EU & UK Representative Contact Information

EU Representative (per Article 27 GDPR)

DataRep Ltd.

Address: The Cube, Monahan Road, Cork, T12 H1XY, Republic of Ireland

Email: datarequest@datarep.com

Tel (EU): +353 1 554 9700

UK Representative (per Article 27 UK GDPR)

DataRep UK Ltd.

Address: 107-111 Fleet Street, London, EC4A 2AB, United Kingdom

Email: datarequest@datarep.com

Tel (UK): +44 20 3287 7264

Cookies Preferences

Cookie Policy