Privacy Policy

1. What we collect

When you use skills.md we collect the information needed to run the service:

• Account information — email address, display name, and authentication credentials.
• Usage data — which skills your agents call, how often, timestamps, and response metadata.
• Skill execution data — inputs and outputs of skill runs, stored temporarily to deliver results back to the calling agent.
• Billing data — plan selection, payment method tokens (processed by our payment provider), and invoicing records.
• Device and access logs — IP address, browser or CLI user-agent, and request logs for security and debugging.

2. How we use it

• Deliver, maintain, and improve the skills.md platform.
• Process billing and enforce plan limits.
• Generate aggregated, anonymized analytics to improve skill quality.
• Detect and prevent abuse, fraud, and security incidents.
• Communicate service updates, billing notices, and support responses.

3. Data sharing

We do not sell your data. We share information only with:

• Service providers — infrastructure hosts, payment processors, and monitoring tools that help us run the platform, bound by data processing agreements.
• Legal obligations — when required by law, court order, or to protect the rights and safety of our users.

4. Data retention

Skill execution inputs and outputs are retained for up to 30 days to support debugging and result retrieval, then deleted. Account and billing data are retained for the duration of your account plus any period required by tax and financial regulations. Aggregated analytics are retained indefinitely.

5. Cookies and tracking

The skills.md dashboard uses a single localStorage key for theme preference. We do not use third-party tracking cookies or advertising pixels. Server-side logs record standard HTTP request metadata.

6. Security

We use TLS encryption in transit, encrypt sensitive data at rest, enforce access controls on internal systems, and conduct regular security reviews. No system is perfectly secure — if you discover a vulnerability, contact us at security@skills.md.

7. Your rights

You may request access to, correction of, or deletion of your personal data at any time by emailing privacy@skills.md. We will respond within 30 days. If you delete your account, we remove your personal data except where retention is required by law.

8. Changes

We may update this policy. Material changes will be communicated via email or an in-product notice at least 14 days before they take effect.

9. Contact

Questions about this policy? Email privacy@skills.md.