Privacy Policy

1. Introduction

SkillSignature (“we”, “us”, “our”) operates the skill verification and talent discovery platform at skillsignature.com and related subdomains. This policy explains how we collect, use, store and protect personal data when you use the platform as a candidate, employer, reviewer or visitor.

2. Data controller

SkillSignature is the data controller for personal data processed through the platform. Questions about this policy or your data rights can be sent to privacy@skillsignature.com.

3. Personal data we collect

• Account data: name, email address, password hash and authentication identifiers.
• Profile data: headline, country, experience level, availability, skills, work history, portfolio links and professional biography.
• Verification data: assessment responses, evidence submissions, reviewer notes, scores, credential status and verification history.
• Contact data: messages sent through the platform, contact-request details and communication preferences.
• Payment data: transaction identifiers and payment status provided by our payment processor. We do not store full card numbers.
• Technical data: IP address, browser type, device information, cookies and usage logs.

4. How we use personal data

We process personal data to provide, secure and improve the platform; manage accounts; deliver verification services; process payments; communicate with users; enforce policies; comply with legal obligations; and, with consent, send marketing communications.

5. Legal basis for processing

Processing is based on performance of our contract with you, compliance with legal obligations, our legitimate interests in operating a secure verification platform, and your consent where required (for example, marketing emails).

6. Data sharing

We share personal data only where necessary: with reviewers and assessors performing verifications, with employers when you make your profile discoverable or respond to a contact request, with payment processors, with hosting and communication service providers, and with regulators or law enforcement where legally required. We do not sell personal data.

7. International transfers

Our infrastructure providers may process data outside your country. Where applicable law requires transfer safeguards, the relevant transfer must be reviewed against that law. EU safeguards may include an applicable adequacy decision or Standard Contractual Clauses with the necessary transfer assessment and supplementary measures. Mentioning a mechanism does not confirm that it applies to every provider or transfer; a provider-by-provider transfer inventory and legal review remain outstanding.

8. Retention

We keep personal data for as long as necessary to operate the platform and fulfil the purposes in this policy. Account data is retained until the account is deleted or for any legally required period. Verification records may be retained longer to preserve credential integrity and support appeals.

9. Your rights

Depending on your location you may have the right to access, correct, delete, restrict or object to processing of your personal data, and to receive it in a portable format. You may withdraw marketing consent at any time from your email preferences or by contacting privacy@skillsignature.com. Requests are answered within 30 days.

10. Cookies, security and children

We use cookies and similar technologies as described in the Cookie Policy below. We apply technical and organisational measures including encryption in transit, access controls, row-level database security and audit logging. The platform is not intended for users under 18 and we do not knowingly collect their data.

11. Changes and contact

We may update this policy. Revised versions are published on this page with a new effective date, and material changes are notified to users. Contact privacy@skillsignature.com.