Privacy Policy

1. Scope and role

The Service provides an automated interview experience that compiles user responses into a personalized Markdown skill file intended for use with third-party AI assistants (such as Claude). We act as the operator of the Service and, for most processing activities described herein, as a data controller with respect to personal information we collect directly from you.

This Policy applies to information collected through the website, interview flows, checkout, email communications, and customer support channels. It does not govern third-party websites, AI platforms, or services you choose to use after downloading your skill file.

2. Information we collect

We collect information in the following categories, depending on how you interact with the Service:

• Interview and skill content: text answers, choice selections, role or profession category, synthesized Markdown output, preview excerpts, interview progress, and related metadata necessary to generate and deliver your skill file.
• Contact information: email address you provide for delivery, purchase confirmation, account recovery via magic links, and optional marketing or nurture messages where permitted.
• Payment information: we do not store full payment card numbers. Payment processing is handled by our payment processor, which collects card and billing details according to its own privacy policy. We may receive transaction identifiers, payment status, amount paid, and limited billing metadata.
• Technical and session data: browser type, device characteristics, IP address, timestamps, HTTP logs, session identifiers, stable experiment identifiers stored in cookies, and security-related signals used to prevent abuse.
• Analytics and product measurement: event data such as funnel steps, experiment assignments (including paywall timing and pricing tests), and aggregated usage metrics collected through analytics tools.
• Communications: messages you send to support or privacy contact addresses and our responses.

Providing interview content and an email address is generally required to complete purchase and delivery. If you choose not to provide required information, certain features of the Service may be unavailable.

3. Sources of information

• Directly from you when you complete interviews, submit email addresses, initiate checkout, contact support, or manage skills through email links.
• Automatically through cookies, server logs, and similar technologies when you visit or use the Service.
• From service providers that assist with hosting, payments, email delivery, analytics, experimentation, and AI processing, strictly as needed to operate the Service.

4. How we use information

We use personal information for legitimate business purposes, including:

• Operating the interview, synthesis, paywall, and delivery workflows.
• Generating, storing, and emailing your skill file and related previews.
• Processing payments, confirming transactions, and administering refunds where applicable.
• Assigning and measuring product experiments to improve conversion, pricing, and user experience.
• Sending transactional messages (receipts, delivery notifications, magic links) and, where permitted, follow-up emails regarding incomplete purchases or product guidance.
• Maintaining security, detecting fraud, enforcing rate limits, and protecting the integrity of the Service.
• Complying with legal obligations, responding to lawful requests, and establishing or defending legal claims.
• Improving the Service through internal analytics and debugging.

We do not use your interview content or generated skill files to train generalized artificial intelligence models. Interview data is processed to deliver your specific output and operate the Service, then retained only as described in Section 9.

5. Legal bases for processing (where applicable)

If you are located in the European Economic Area, the United Kingdom, or another jurisdiction that requires a legal basis for processing, we rely on one or more of the following, depending on context:

• Performance of a contract: to provide the Service you request, including interview, payment, and delivery.
• Legitimate interests: to secure the Service, conduct analytics and experiments, prevent abuse, and improve offerings, balanced against your rights.
• Consent: where required for optional marketing communications or non-essential cookies; you may withdraw consent as described below.
• Legal obligation: where processing is necessary to comply with applicable law.

6. Artificial intelligence processing

The Service uses third-party large language model providers to generate interview questions and synthesize your skill file from your responses. When you participate in an interview, your inputs may be transmitted to such providers for inference processing under contractual safeguards.

• Processing is limited to delivering the Service requested by you, not for building public models from your content.
• Outputs may contain inaccuracies or omissions; you are responsible for reviewing content before relying on it.
• Provider terms and privacy practices may apply to infrastructure processing; we select providers that offer business-appropriate data handling commitments.

7. How we disclose information

We do not sell personal information. We may disclose information in the following circumstances:

• Service providers (processors): cloud hosting, database, payment processing, email delivery, analytics, experimentation platforms, and AI inference providers that process data on our instructions and subject to confidentiality and security obligations.
• Professional advisers: lawyers, accountants, or insurers where reasonably necessary.
• Legal and safety: to comply with law, regulation, legal process, or governmental request; to protect rights, property, or safety of users or others; and to investigate fraud or security incidents.
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to customary confidentiality protections.

Representative categories of infrastructure used to operate the Service include payment processing, managed database hosting, transactional email, product analytics, and serverless application hosting. Specific vendors may change over time; material changes will be reflected in updates to this Policy where appropriate.

8. Cookies and similar technologies

We use cookies and similar technologies to maintain sessions, assign stable identifiers for experiments, remember interview state, measure performance, and protect against abuse.

• Strictly necessary cookies: required for security, session continuity, and core functionality.
• Analytics cookies: used to understand usage patterns and improve the Service.

You may control cookies through browser settings. Disabling certain cookies may impair interview progress, checkout, or experiment assignment. Where required by law, we will obtain consent before placing non-essential cookies.

9. Data retention

We retain personal information only as long as reasonably necessary for the purposes described in this Policy, including:

• Active interview and delivery: for the duration needed to complete your session, process payment, generate output, and send deliverables.
• Post-delivery: for a limited period to support refunds, re-delivery, fraud prevention, and customer inquiries, unless you request earlier deletion or delete a skill through available self-service tools.
• Payment and tax records: as required by applicable financial and accounting regulations.
• Security logs: for a commercially reasonable period to investigate incidents and protect the Service.

When retention is no longer necessary, we delete or de-identify information using commercially reasonable methods. Deleted skills may be marked as deleted in our systems while residual backups expire according to provider schedules.

10. Security measures

We implement administrative, technical, and organizational measures designed to protect personal information, including encryption in transit, access controls, secrets management for API keys, httpOnly session cookies, signed magic links with expiration, webhook verification for payments, and rate limiting on sensitive endpoints.

No method of transmission or storage is completely secure. We cannot guarantee absolute security. You are responsible for safeguarding access to your email account and any skill files you download.

11. Your privacy rights

Depending on your location, you may have rights to:

• Access personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion, subject to legal exceptions.
• Object to or restrict certain processing.
• Receive a portable copy of information you provided, where technically feasible.
• Withdraw consent for marketing communications at any time via unsubscribe links or by contacting us.
• Lodge a complaint with a supervisory authority, where applicable.

To exercise rights, contact privacy@customskill.app. We may verify your request using information associated with your email address or recent transactions. We will respond within timeframes required by applicable law.

12. United States state privacy notices

Residents of certain U.S. states (including California, Colorado, Connecticut, Virginia, and Utah, as laws evolve) may have additional rights regarding access, deletion, correction, and opt-out of certain processing. We do not sell personal information or share it for cross-context behavioral advertising as defined under the California Consumer Privacy Act, as amended.

Authorized agents may submit requests on your behalf with proof of authorization. We will not discriminate against you for exercising privacy rights.

13. International data transfers

We may process and store information in the United States and other countries where we or our service providers operate. These locations may have data protection laws different from those in your jurisdiction. Where required, we implement appropriate safeguards such as standard contractual clauses or equivalent mechanisms for cross-border transfers.

14. Children

The Service is not directed to individuals under 18 years of age (or the age of majority in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided information, contact us and we will take reasonable steps to delete it.

15. Third-party services and AI platforms

The Service may link to or reference third-party tools. After you receive your skill file, any upload to external AI platforms is governed by those platforms' terms and privacy policies. We are not responsible for third-party processing outside our Service.

16. Changes to this Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top indicates the effective revision. Material changes will be posted on this page; continued use after changes constitutes acknowledgment where permitted by law.

17. Contact

Privacy inquiries and rights requests: privacy@customskill.app. General support: support@customskill.app. Website: https://customskill.app.