Privacy Policy

1. Who we are and scope

The data controller is IE Khassanov, operating the Skilvy platform ("we"). This Privacy Policy describes what data we collect when you use skilvy.io and related services, how we use it, who we share it with, and your rights. Privacy contact: support@skilvy.io.

2. Data we collect

Account data: name, email address and authentication data. Usage data: course progress, completed-lesson markers, interface preferences. Technical data: IP address, device and browser type, event logs and basic diagnostics.

We do NOT collect or store payment details (card numbers, etc.). Payments are processed by Paddle.com Market Ltd as Merchant of Record.

3. Sources of data

We obtain data: (a) directly from you (registration, use of the Service, support requests); (b) automatically as you use the Service (technical data, cookies); (c) from service providers — for example, payment status from Paddle.

4. Purposes and legal bases

We process data to: provide course access and save progress (performance of a contract); process payments and subscriptions via Paddle (performance of a contract); keep the Service secure and prevent fraud (legitimate interest); improve the Service and analytics (legitimate interest or consent); meet legal obligations (legal obligation); send service notices (performance of a contract) and, with consent, marketing messages.

5. Payments

Payments and related data are processed by Paddle under its own privacy policy. From Paddle we receive only the information needed to provide access (e.g., subscription status), not full payment details.

6. Who we share with

Service providers that run the Service: Supabase (authentication and database), Paddle (payments and tax), our hosting provider (e.g., Vercel), and, if introduced, analytics and email providers. Each processes data under its own terms and only as needed to provide the service. We may also disclose data where required by law or to protect rights.

We do not sell your personal data.

7. International transfers

Our providers may process data outside your country. Where required by law, appropriate safeguards (e.g., standard contractual clauses) apply to such transfers.

8. Retention

We keep data while your account exists and as long as needed for the purposes above or required by law (e.g., tax and accounting records). After that, data is deleted or anonymized.

9. Security

We apply reasonable organizational and technical safeguards (transport encryption, access controls, regular updates). No method of transmission over the internet is fully secure; you are also responsible for keeping your credentials safe.

10. Your rights

Depending on applicable law you may: access your data, correct or delete it, restrict or object to processing, withdraw consent, and request data portability. To exercise your rights, email support@skilvy.io. You may also lodge a complaint with a data-protection authority.

11. Cookies and similar technologies

We use essential cookies for sign-in and Service operation. We use Umami for web analytics — a cookieless service that collects no personal data and does not track you across sites. You can manage cookies in your browser settings.

12. Children's data

The Service is not intended for individuals below the age set by applicable law for independent consent. We do not knowingly collect their data; if discovered, we will delete it.

13. Changes to this Policy

We may update this Policy. The current version is always available on this page with an updated date. We will notify you of material changes by available means.

14. Contact

For data-processing questions and to exercise your rights: support@skilvy.io. Controller: IE Khassanov.