SkillsDB Privacy Policy
Updated: December 1, 2025
SkillsDB Inc. ("SkillsDB," "we," "our," or "us,") provides software and services to help organizations manage skills, competencies, and workforce planning. Our mission is to make learning culture universal. We are committed to protecting your privacy and handling personal information with transparency and care.
This Privacy Policy explains how we collect, use, and protect information when you use our marketing website, applications, and services (collectively, the "Services"). It also explains your rights under applicable data protection laws, including the EU General Data Protection Regulation ("GDPR") and the California Consumer Privacy Act ("CCPA").
Information We Collect
We collect different types of information depending on whether you interact with our marketing website or use our products.
From our website and marketing activities:
- Contact details you provide (name, email, company, etc.)
- Analytics and usage data (cookies, IP addresses, device/browser information, etc.)
- Marketing preferences and communications history
From our products:
- Account information (name, email, role, company, etc.)
- Skills, competency, and job-related information you or your organization provide
- Log data, device information, and usage activity within SkillsDB
- Customer support requests and communications
We do not intentionally collect sensitive personal information unless explicitly provided for business purposes.
How We Use Information
We use collected information to:
- Provide, operate, and improve our Services
- Authenticate users and ensure secure access
- Deliver support and respond to requests
- Analyze usage to improve features and usability
- Send service-related and administrative messages
- Comply with legal, contractual, and security obligations
Marketing-related communications are sent only where permitted by law, and you may opt out at any time.
Legal Bases for Processing (GDPR)
For individuals in the European Economic Area (EEA), United Kingdom, and Switzerland, we rely on the following legal bases:
- Contractual necessity: To provide the Services you or your organization requested
- Legitimate interests: To improve our Services, prevent fraud, and maintain security
- Consent: For certain marketing or optional data uses
- Legal obligations: To comply with laws and regulations
Sharing & Subprocessors
We do not sell personal data. We share information only as follows:
- Subprocessors: Trusted third parties who provide hosting, analytics, communications, and security services. A current list is maintained in our Trust Center
- Business partners: When necessary to fulfill customer requests
- Legal or security needs: If required by law, court order, or to protect rights, safety, or security
All subprocessors are bound by contractual obligations that include confidentiality, security, and data protection requirements.
Data Retention
We retain customer and user data for as long as an account remains active or as necessary to provide services under the customer agreement. If a customer terminates their use of SkillsDB, we continue to retain their data unless and until we receive a written deletion request. This allows for potential reactivation of services and compliance with business, contractual, or legal obligations.
Customers may request deletion of their data at any time, in accordance with applicable data protection laws (e.g., GDPR, CCPA). Upon such request, we permanently delete personal data from our systems unless retention is required for legal, regulatory, or security purposes.
Data collected on our marketing website (e.g., analytics, cookies, and lead forms) is retained in line with our Cookie Policy and deleted or anonymized once it is no longer needed.
Security Practices
We maintain strict technical and organizational measures to protect data, consistent with our SOC 2 compliance program. These include, but are not limited to:
- Encryption of data in transit and at rest
- Access controls and authentication safeguards
- Continuous monitoring and vulnerability management
- Vendor due diligence and contractual protections
- Incident detection and response protocols
While no system is completely secure, we work to ensure the confidentiality, integrity, and availability of customer data.
International Data Transfers
SkillsDB is based in the United States and may process data outside your country of residence. When transferring personal data from the EEA, UK, or Switzerland, we rely on:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Other safeguards or adequacy decisions where applicable
Your Rights
Depending on your location, you may have the right to:
- Access, correct, or update your personal data
- Request deletion ("right to be forgotten")
- Restrict or object to certain processing
- Request a copy of your data (portability)
- Withdraw consent where processing is based on consent
EEA/UK users may lodge a complaint with their local data protection authority. California residents may exercise their CCPA rights by contacting us as described below.
Data Access Requests (GDPR/DSARs)
If you are located in the EEA, UK, or another jurisdiction with similar rights, you may request confirmation of whether we process your personal data and obtain a copy of that data, along with information about how it is processed. We will respond to all such requests within one month, in accordance with applicable law. Requests are free of charge unless manifestly unfounded or excessive. To protect your privacy, we may take steps to verify your identity before fulfilling the request.
Requests can be made by emailing support@skillsdb.com.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in law, technology, or our practices. If changes are material, we will provide notice through our website, email notifications, Trust Center or Services.
Contact Us
If you have questions or requests regarding this Privacy Policy or your data, please contact us at:
SkillsDB Inc.
trust.skillsdb.com or support@skillsdb.com
EU & UK Representative Contact Information
EU Representative (per Article 27 GDPR)
DataRep Ltd.
Address: The Cube, Monahan Road, Cork, T12 H1XY, Republic of Ireland
Email: datarequest@datarep.com
Tel (EU): +353 1 554 9700
UK Representative (per Article 27 UK GDPR)
DataRep UK Ltd.
Address: 107-111 Fleet Street, London, EC4A 2AB, United Kingdom
Email: datarequest@datarep.com
Tel (UK): +44 20 3287 7264
Cookies Preferences
Cookie Policy