Last updated 8 October 2026
This policy explains what information Skillsmart ("we", "us") collects when you use skillsmart.io, the Skillsmart command-line tool and the skills we distribute (together, the "Services"), and what we do with it. Skillsmart is operated from Singapore.
1. What we collect
Information you give us
- Account details: your email address and, if you sign in with Google, your name, profile picture and Google account identifier. We don't use passwords: you sign in with a one-time email code or with Google. If you sign in to the command-line tool, we keep a one-way hash of its access token so it stays signed in.
- Messages: anything you send us, for example to contact@skillsmart.io.
Information created when you use the Services
- Purchases: what you bought or subscribed to, its status (such as active, cancelled or refunded), and the Stripe customer, checkout and subscription identifiers that link it to your account. Payments are handled by Stripe; we never see or store your full card number.
- Library: skills you save, and a history of the skills you download (which skill and version, when, and whether it was downloaded by the command-line tool or in your browser). We use it to show your library, tell you when updates are available, and count downloads for each skill.
- Technical data: IP address, browser and device information, and request logs, which our hosting provider records to run and secure the site.
We don't use advertising or third-party analytics trackers.
Skills run on your own computer. We don't receive the files you create with a skill, the prompts you give your AI app, or what it produces. If a skill asks you to use another service (for example an image-generation API), what you send to that service is covered by its own privacy policy.
2. How we use it
- To create your account, sign you in, and connect the command-line tool.
- To deliver skills, check what you have access to, and tell you when updates are available.
- To take payments, manage subscriptions, handle refunds and keep accounting records.
- To send service emails such as sign-in codes and receipts. We don't send marketing emails.
- To keep the Services secure, prevent fraud and abuse, fix problems and improve the product.
- To meet legal obligations and enforce our Terms.
We don't sell your personal information, and we don't use it to train AI models.
3. Who we share it with
We share information only with the providers that run the Services, and only as much as they need:
- Cloudflare hosts the website, database and file storage, and sends our emails.
- Stripe processes payments, subscriptions, refunds, fraud checks and tax.
- Google, if you choose to sign in with Google.
- GitHub hosts downloads of the command-line tool.
- Google Fonts serves the site's fonts, so your browser sends its IP address to Google when loading pages.
We may also disclose information when the law requires it, to protect people or the Services from harm or fraud, or as part of a merger or sale of the business, in which case this policy continues to apply to it.
4. Cookies
We use only the cookies needed to keep you signed in and to keep sign-in secure. We don't use advertising or tracking cookies.
5. How long we keep it
We keep your account information while your account is open. When you ask us to delete your account, we delete your account, sign-ins, saved skills and download history. We keep purchase and payment records for as long as tax, accounting and legal rules require, which in Singapore is generally five years. Sign-in codes and install codes expire within minutes, and server logs are kept only for a short period.
6. Security
We use encrypted connections (HTTPS), store access tokens only as one-way hashes, keep Pro skill files in private storage, and limit access to our systems. No system is perfectly secure, so please tell us straight away if you think your account has been misused.
7. Your rights
You can ask us to access, correct, export or delete your personal information, or object to how we use it. Email contact@skillsmart.io from the address on your account. We may need to confirm it's you, and we'll reply within 30 days. Depending on where you live, you may also be able to complain to your data-protection authority; in Singapore that's the Personal Data Protection Commission.
8. International transfers
Our providers may process information outside your country, including in the United States. When they do, we rely on their contractual and security commitments to protect it to a comparable standard.
9. Children
The Services aren't intended for children under 13, and we don't knowingly collect their information. If you believe a child has given us information, contact us and we'll delete it.
10. Changes
If we change this policy, we'll update the date at the top. For significant changes, we'll also let you know by email or on the site.
11. Contact
Questions or requests about your privacy: contact@skillsmart.io.