Privacy Policy - Skilova

1. Who we are

Skilova is a SaaS platform for creating and selling online courses. The data controller is the Skilova team, available at Skilova support.

2. What data we collect

We collect the following categories of personal data:

Account and identity: first name, last name, email address
Subscription data: activation date, subscription status, payment history (no card data - that is handled by Paddle)
Content you upload: video files, documents, images, course descriptions
Student data: name and email of students a mentor adds to the platform
Technical data: IP address, browser type, visit times (anonymously, via Vercel Web Analytics, without cookies)

3. Why we process data

We process data on the following legal bases:

Performance of a contract - providing the platform service (account creation, courses, access to content)
Legitimate interest - platform security, abuse prevention, service improvement
Legal obligation - retaining transaction data in accordance with tax regulations
Consent - sending marketing emails (you can unsubscribe at any time)

4. How we use data

Managing your account and subscription
Sending transactional emails (payment confirmations, student invitations, alerts)
Providing customer support
Improving the platform's performance and functionality
Protecting against fraud and unauthorized access

We do not sell, rent or share your personal data with third parties for marketing purposes.

5. Third parties we share data with

We use trusted third-party services:

Supabase (USA) - database and authentication. Privacy policy
Bunny.net (EU) - video hosting and CDN delivery
Paddle - payment processing as Merchant of Record. Card data is never passed on to Skilova
Resend (USA) - sending transactional emails
Vercel (USA) - application hosting

All of the listed services are GDPR-compliant and have appropriate safeguards in place for transferring data outside the EU.

The site uses Vercel Web Analytics for anonymous visit statistics, without cookies.

6. How long we keep data

Account data - while the account is active, plus 2 years after it is closed
Payment data - 5 years (legal obligation)
Course content - until the mentor deletes the content or closes the account
Student data - until the mentor removes the student or closes the account
Technical logs - 90 days

7. Your rights

Under the GDPR, you have the following rights:

Right of access - request a copy of the data we hold about you
Right to rectification - request correction of inaccurate data
Right to erasure - request deletion of your data ("right to be forgotten")
Right to restriction of processing - request a temporary halt to processing
Right to data portability - receive your data in a machine-readable format
Right to object - object to processing based on legitimate interest

To exercise any of these rights, contact us at Skilova support. We respond within 30 days.

You also have the right to lodge a complaint with the personal data protection supervisory authority in your country.

8. Data security

We use industry-standard protection: HTTPS encryption, secure session tokens, restricted database access. All passwords are hashed and never stored in plain text.

We cannot guarantee 100% security. In the event of a security incident affecting your data, we will notify you within 72 hours of becoming aware of it.

9. Children

The platform is not intended for persons under 18 years of age. We do not knowingly collect data from minors. If we learn that we have collected data from a minor, we will delete it immediately.

10. Changes to this policy

We reserve the right to amend this Policy. We will notify you of significant changes by email at least 14 days in advance.

11. Contact

For any questions about data privacy, write to us at Skilova support.