Privacy Policy

Last updated: July 26, 2026

1. What we collect

• Submitted skills: the skill files/URLs you submit for testing, and the test outputs they produce.
• Account & contact data: email address when you purchase, subscribe, or contact us.
• Usage data: IP address (for rate limiting and abuse prevention), pages visited, and standard server logs.

2. What we do with it

We use submitted skills solely to run tests and produce reports. We do not train models on your submissions. Private certification reports are visible only to the purchaser. Grades of publicly available skills may be published with test summaries. We use contact data to deliver purchases, alerts, and service messages — no marketing without consent.

3. What we don't do

We do not sell personal data. We do not process end-customer personal data of your business. We do not request more access than testing requires.

4. Processors we use (subprocessors)

• Creem — merchant of record and payment processing (they handle card data; we never see it)
• Anthropic — LLM API used inside the test harness (submissions are processed under terms that prohibit training on this data)
• Hosting provider — website and application hosting
• Email provider — transactional messages and alerts

5. Legal bases & your rights (GDPR)

We process data to perform our contract with you, and on legitimate interest for security and abuse prevention. You may request access, correction, deletion, or export of your personal data, and object to processing, by emailing us. We respond within 30 days.

6. Retention

Test artifacts and reports are retained to preserve grade traceability (that's the product). Personal contact data is deleted on request or after prolonged account inactivity. Server logs rotate within 90 days.

7. Breach notification

If a breach affects your data, we will notify affected users within 72 hours of confirming it.

8. Contact

Privacy requests: support@skillgrade.org