Skillbnb ("we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.
1. Data We Collect
Account information
- Name, email address, and password (hashed)
- Profile photo and bio (optional)
- Google account details (if you sign in with Google)
Booking and session data
- Experience bookings, dates, and payment amounts
- Check-in and check-out timestamps
- Session location (for in-person experiences)
Questionnaire and CDI data
- Pre-session questionnaire responses (career concerns, task preferences, strengths)
- Post-session feedback (confidence, clarity, self-fit assessment)
- Provider feedback on Explorers
- Career Discovery Index (CDI) scores and decision flags
Payment information
Payment card details are processed and stored exclusively by Stripe. Skillbnb does not store full card numbers. We receive a transaction ID and payment status from Stripe.
Usage data
- Pages visited and features used on Skillbnb
- AI chatbot conversations (processed in real time, not stored)
- Device type, browser, and IP address
2. How We Use Your Data
- To operate the Skillbnb platform and facilitate bookings
- To calculate and display your personalised CDI score
- To generate personalised experience recommendations
- To send transactional emails (booking confirmations, check-in reminders)
- To process payments and manage Provider payouts
- To investigate disputes and enforce our Terms of Service
- To improve our platform, AI models, and CDI methodology
3. Legal Basis for Processing (GDPR)
For users in the European Economic Area, we process your data on the following legal bases:
- Contract performance — to fulfil bookings you make on our platform.
- Legitimate interests — to improve our services, prevent fraud, and ensure platform safety.
- Consent — for optional features such as marketing communications.
- Legal obligation — to comply with applicable laws and regulations.
4. Third-Party Services
We share data with the following third parties to operate our platform:
- Stripe — payment processing. Data is governed by Stripe's Privacy Policy.
- Supabase — database hosting (EU West region). Data is stored within the European Union.
- Resend — transactional email delivery.
- Anthropic (Claude) — AI chatbot responses. Conversations are processed in real time and are not stored by Anthropic for training without consent.
- Crisp — customer support chat widget.
- Google — optional sign-in via Google OAuth.
5. Data Retention
- Account data is retained for as long as your account is active.
- Booking and session data is retained for 3 years for financial and dispute purposes.
- CDI scores and questionnaire data are retained for the lifetime of your account to support long-term career tracking.
- Upon account deletion, personal data is anonymised within 30 days, except where retention is required by law.
6. Your Rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you.
- Rectify inaccurate or incomplete data.
- Erase your personal data ("right to be forgotten").
- Restrict or object to certain processing activities.
- Portability — receive your data in a structured, machine-readable format.
- Withdraw consent at any time for consent-based processing.
To exercise any of these rights, please contact us via the chat widget on our platform.
7. Cookies
Skillbnb uses strictly necessary cookies to maintain your session and authentication state. We do not use tracking or advertising cookies.
8. Data Security
We use industry-standard security measures including HTTPS encryption, hashed passwords, and access controls to protect your data. However, no system is completely secure — please use a strong, unique password for your account.
9. Children's Privacy
Skillbnb is not intended for users under 18. We do not knowingly collect data from minors. If you believe a minor has created an account, please contact us immediately.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice on our platform.
11. Contact
For privacy-related inquiries, please reach us through the chat widget on our platform or email us directly at the address listed in your account settings.