Privacy Policy
Introduction
This Privacy Policy describes how Skillz Vault ("we," "us," or "our") collects, uses, and shares information when you use our website, account pages, subscription flow, desktop app, and related catalog and access services (together, the "Service").
Skillz Vault is operated by Romanovskii Arsenii as an individual operator. For privacy questions, requests, and notices, you can contact us at info@aiskillzvault.com.
When you use the Service, we collect and use information as described in this policy. This policy applies to visitors, account holders, subscribers, and desktop app users.
Information We Collect
We collect the information needed to provide accounts, subscriptions, desktop access, and the skill catalog:
- Account information: your email address, login verification status, account session state, and related security tokens.
- Subscription and billing information: subscription status, plan, checkout request status, payment provider identifiers, and payment event status. Payments are processed by PayPal. We do not store full payment card, bank account, or PayPal credential information.
- Desktop app and device information: device identifier, device name if provided, platform, app version, subscription activation status, catalog access tokens, and access-check timestamps.
- Technical and usage information: IP address, browser type, operating system, referring URLs, request metadata, cookies, and similar information needed for security, troubleshooting, and service operation.
- Support information: information you choose to send us when you contact us for support.
- Information from third-party sign-in: if you use Google sign-in, we receive your verified email address from Google to create or access your account.
Skillz Vault does not intentionally collect your local prompts, chats, source code, or installed skill files unless you choose to send that information to us for support.
How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the website, account pages, desktop app, and skill catalog
- Create and manage accounts and authenticated sessions
- Verify subscription status and enable desktop app access
- Process subscription checkout and billing events through PayPal
- Send login codes, technical notices, account messages, updates, and security alerts
- Protect the Service from fraud, abuse, unauthorized access, and security incidents
- Respond to support requests and troubleshoot issues
- Comply with legal obligations and enforce our terms
We do not use a newsletter signup form on our website and do not use your email address for marketing newsletters.
Legal Bases for EU and UK Users
If EU or UK data protection law applies to you, we process personal information using the following lawful bases:
- Contract: to create and manage your account, provide subscription access, enable desktop app access, deliver catalog features, and process subscription status.
- Legitimate interests: to secure the Service, prevent fraud and abuse, troubleshoot issues, improve reliability, respond to support requests, and enforce account, catalog, and device access controls.
- Legal obligations: to keep records needed for tax, accounting, compliance, dispute resolution, and lawful requests.
- Consent: where consent is required by law, such as optional choices or third-party sign-in actions you choose to use.
How We Share Your Information
We may share your information in the following circumstances:
- Service providers: we share information with vendors who provide services on our behalf, such as payment processing, email delivery, hosting, database infrastructure, and authentication support.
- PayPal: subscription checkout and payment processing are handled by PayPal. PayPal processes payment information under its own privacy policy.
- Google: if you use Google sign-in, Google helps verify your account email under its own privacy policy.
- Legal requirements: we may disclose information if required by law, regulation, subpoena, court order, or other valid legal process.
- Business transfers: we may share information in connection with a merger, acquisition, financing, reorganization, or sale of assets.
We do not sell your personal information. We do not share your personal information with third parties for their independent marketing purposes.
Cookies and Tracking Technologies
We currently use only cookies that are necessary for authentication, checkout and account security, Google sign-in state, CSRF protection, and basic service operation. Because these cookies are needed to provide requested account, login, checkout, and security features, we do not currently display a cookie consent banner for optional analytics or advertising cookies.
We do not currently use analytics, advertising, retargeting, or cross-context behavioral advertising cookies. If we add optional analytics or advertising cookies in the future, we will update this policy and, where required, ask for your consent before setting them.
The cookies currently used by the Service include:
- sv_session: keeps you signed in to your Skillz Vault account. It expires after 14 days.
- sv_login_challenge: supports email login code verification. It expires after 15 minutes.
- sv_csrf: helps protect account, checkout, and desktop connection forms from cross-site request forgery. It expires after 2 hours.
- sv_google_state: helps protect Google sign-in redirects from tampering. It expires after 10 minutes.
You can instruct your browser to refuse cookies or to indicate when a cookie is being sent, but account, checkout, sign-in, and security features may not work without required cookies.
Third-party services, such as PayPal or Google, may set their own cookies when you interact with their services.
Data Retention
We retain personal information for as long as necessary to provide the Service, maintain subscriptions, comply with legal obligations, resolve disputes, prevent fraud or abuse, and enforce our agreements.
Account, subscription, billing event, device activation, and catalog access records are generally retained while your subscription is active and for up to one year after your subscription expires or your account becomes inactive, unless a longer period is required for tax, accounting, legal compliance, security, fraud prevention, chargebacks, or dispute resolution.
Short-lived operational records, such as login challenges, CSRF tokens, OAuth state, and session cookies, expire according to their security settings unless we need related records for abuse prevention, troubleshooting, or legal reasons.
When we no longer need to retain your information, we will delete or anonymize it where reasonably practicable.
Children's Privacy
Our Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information promptly.
If you are a parent or guardian and believe your child has provided us with personal information, please contact us at info@aiskillzvault.com.
Data Security
We use technical and organizational measures designed to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. These measures include HTTPS in production, signed HTTP-only cookies, SameSite cookie controls, CSRF protection, signed session and state tokens, hashed login-code challenges, rate limits and login backoff, content security policy headers, security headers, trusted download URL checks, and server-side account and desktop access controls.
However, no method of transmission over the internet or method of electronic storage is 100% secure. We cannot guarantee absolute security.
California and U.S. State Privacy Rights
Some U.S. state privacy laws, including California privacy law, may give residents rights to know, access, correct, delete, and obtain a portable copy of certain personal information, and to opt out of certain sale, sharing, targeted advertising, or profiling uses where applicable.
In the past 12 months, we may have collected the categories of information described in this policy, including identifiers, account and subscription records, device and technical information, payment-provider identifiers, support information, and internet or network activity information related to service operation and security.
We collect this information from you, your browser or desktop app, PayPal, Google if you use Google sign-in, and service providers. We disclose information to service providers, payment processors, authentication providers, hosting and infrastructure providers, and legal or compliance recipients as described in this policy.
We do not sell personal information and do not share personal information for cross-context behavioral advertising. We do not use sensitive personal information to infer characteristics about you.
To make a U.S. state privacy request, contact info@aiskillzvault.com. We will not discriminate against you for exercising privacy rights, but some Service features may require certain information to function.
Your Choices and Rights
You may contact us to request access, correction, deletion, or export of personal information associated with your account, subject to legal, security, and operational limits.
You can cancel or manage your subscription through PayPal's automatic payment or subscription controls. You can also stop using the desktop app and remove locally installed files from your own machine.
Depending on where you live, you may have additional privacy rights under applicable law. To make a privacy request, contact us at info@aiskillzvault.com.
Third-Party Links
Our Service may contain links to third-party websites. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services. We encourage you to review the privacy policy of every site you visit.
Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top.
You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.
Contact Us
If you have any questions about this Privacy Policy, or if you want to make a privacy request, contact us by email: