Privacy Policy

Last updated October 4, 2026 · Draft 1

1. Introduction

TruSkill ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our career trust platform ("the Service").

Please read this Privacy Policy carefully. By using the Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

We collect information you voluntarily provide when using the Service:

Account information (email address, phone number)
Profile information (name, job title, skills, experience)
Career documents (resumes, portfolios, certifications)
Goals and preferences you set within the platform
Communications with our support team

2.2 Information Collected Automatically

When you access the Service, we automatically collect:

Device information (browser type, operating system)
Usage data (pages visited, features used, time spent)
IP address and approximate location
Referral source and navigation paths

3. How We Use Your Information

We use the information we collect to:

Provide and maintain the Service
Personalize your experience and career recommendations
Generate AI-powered insights for your skill development
Communicate with you about updates and features
Analyze usage patterns to improve the Service
Protect against unauthorized access and abuse
Comply with legal obligations

4. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. You may request deletion of your account and associated data at any time by contacting us.

Certain information may be retained longer if required by law or for legitimate business purposes such as fraud prevention or dispute resolution.

5. Cookies

We use essential cookies only. A session cookie keeps you signed in. We do not set analytics cookies or other non-essential cookies, and the app does not show a cookie banner.

You can clear cookies in your browser. Signing out ends the session on this device. Without the session cookie, you will need to sign in again.

6. Third-Party Services

We may share information with third-party service providers who assist us in operating the Service:

Cloud hosting and infrastructure providers
Analytics and monitoring services
Email and communication services
Payment processors (if applicable)

These providers are contractually obligated to protect your information and use it only for the purposes we specify.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including encryption in transit and at rest, access controls, and regular security assessments.

However, no method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

8. Your Rights

Depending on your location, you may have the right to:

Access the personal information we hold about you
Correct inaccurate or incomplete information
Delete your personal information
Export your data in a portable format
Opt out of certain data processing activities

To exercise these rights, please contact us using the information below.

9. Children's Privacy

The Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on the Service and updating the "Last updated" date. Your continued use of the Service after such changes constitutes acceptance of the updated policy.

11. AI and Machine Learning

Our Service uses artificial intelligence and machine learning to provide personalized career insights. Here's how we handle your data in relation to AI:

AI Processing: Your career data (resume, goals, progress) is processed by AI models to generate personalized recommendations
Third-Party AI Services: We use services from providers like OpenAI and Anthropic. Your data may be transmitted to these services for processing, subject to their privacy policies
Model Training: We may use anonymized and aggregated data to improve our AI models. Your personal information is not used directly for training without consent
Automated Decisions: AI-generated recommendations are advisory only and do not constitute automated decision-making that produces legal effects

12. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have data protection laws that are different from those in your country.

When we transfer data internationally, we implement appropriate safeguards such as Standard Contractual Clauses approved by relevant authorities, or rely on adequacy decisions where available.

For users in the European Economic Area (EEA), UK, and Switzerland, we process your personal data based on the following legal grounds:

Contract Performance: Processing necessary to provide the Service you requested
Legitimate Interests: Processing for our legitimate business interests, such as improving our services and ensuring security
Consent: Where you have given specific consent for certain processing activities
Legal Obligation: Processing necessary to comply with applicable laws

If you are located in the European Economic Area (EEA), UK, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

Right to Access: Request a copy of your personal data
Right to Rectification: Correct inaccurate or incomplete data
Right to Erasure: Request deletion of your personal data ("right to be forgotten")
Right to Restriction: Limit how we process your data
Right to Data Portability: Receive your data in a structured, machine-readable format
Right to Object: Object to processing based on legitimate interests
Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent
Right to Lodge a Complaint: File a complaint with your local data protection authority

To exercise these rights, contact us at privacy@truskill.ai. We will respond within 30 days.

15. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

Right to Know: Request information about the categories and specific pieces of personal information we collect, use, and disclose
Right to Delete: Request deletion of your personal information
Right to Correct: Request correction of inaccurate personal information
Right to Opt-Out: Opt out of the sale or sharing of personal information
Right to Non-Discrimination: Not receive discriminatory treatment for exercising your privacy rights

Do Not Sell or Share My Personal Information: TruSkill does not sell your personal information. We do not share your personal information for cross-context behavioral advertising purposes.

To exercise these rights, contact us at privacy@truskill.ai or use the data management features in your account settings.

16. Data Breach Notification

In the event of a data breach that affects your personal information, we will notify you as required by applicable law. This notification will include:

A description of the nature of the breach
The types of information potentially affected
Steps we are taking to address the breach
Recommendations for protecting yourself
Contact information for questions

We will notify affected users within 72 hours of becoming aware of a qualifying breach, as required by GDPR, and within the timeframes required by other applicable laws.

17. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at privacy@truskill.ai

Data Protection Inquiries: TruSkill, Attn: Privacy Team, Email: privacy@truskill.ai