1. Data We Collect
We collect information you provide directly:
- Account data: Name, email address (via signup or Google OAuth)
- Career data: Resume text, job descriptions, LinkedIn URLs you paste into our tools
- Payment data: Processed by Stripe — we never store your credit card number
- Usage data: Tool usage, token transactions, anonymous product analytics
- Recordings: Audio you choose to submit when answering a question out loud. We send it for transcription and do not store it.
We do not sell, rent, or trade your personal data to third parties.
2. How We Use Your Data
- To provide AI-powered career analysis for the tools you run
- To manage your account, tokens, and transaction history
- To send transactional emails (welcome, purchase confirmation)
- To improve our product through anonymous, aggregated analytics
We do not use your resume, job text, or recordings to train a model. Text you submit is sent to produce the result you asked for. A recording is sent only when you choose to answer out loud, and we do not keep that audio.
3. Data Security
All data is encrypted at rest using AES-256 on Supabase's infrastructure. Data in transit is protected by TLS 1.3. Text you submit is sent to Google Gemini via OpenRouter to produce that result. A spoken answer is sent to ElevenLabs to produce a transcript, and we do not store the recording. Payment processing is handled by Stripe (PCI DSS Level 1 compliant).
4. Third-Party Services
- Supabase: Database and authentication (EU/US hosting)
- Stripe: Payment processing — Privacy Policy
- Google Gemini (via OpenRouter): Produces the written result from text you submit — Google Privacy Policy
- ElevenLabs: Speech-to-text for a recording you choose to submit. We do not store the audio. Their handling of that request is in their Privacy Policy
- Resend: Transactional email — Privacy Policy
- PostHog: Product analytics. When you are signed in it receives your account ID and email address with the pages and tools you use — Privacy Policy
- Vercel: Website hosting — Privacy Policy
- TikTok: Conversion tracking and advertising optimization. When you are signed in its pixel receives your account ID and email address — Privacy Policy
- Google Analytics: Site analytics: pages visited and, when you are signed in, your account ID — Privacy Policy
- Reddit: Conversion tracking for Reddit ads. Its pixel records page visits and, when you are signed in, your account ID and email address. At signup our server also sends Reddit a signup event with your email, account ID and IP address in hashed (SHA-256) form, plus your browser's user agent — Privacy Policy
5. Data Retention
Your data is automatically deleted after 90 days of account inactivity: your results, resume text, career profile and job targets. Your token balance and the record of tokens you bought are kept, because purchased tokens never expire. Until then, tool results are retained for your convenience in the History page. You can export or permanently delete all your data at any time from Settings.
6. Your Rights
Regardless of your location, you have the right to:
- Access: View all data we hold about you
- Export: Download your data in a portable format
- Delete: Permanently erase your account and all associated data
- Rectify: Correct inaccurate personal information
- Object: Opt out of non-essential data processing
Exercise these rights via the Settings page, or email privacy@aiskillscore.com. We respond to all requests within 30 days.
7. Cookies
We use essential cookies for authentication and session management. PostHog and Google Analytics measure how the site is used. The TikTok and Reddit pixels measure which ads led to a signup or purchase. Section 4 lists what each one receives. We do not sell data to advertisers.
8. Children's Privacy
AISkillScore is not intended for users under the age of 16. We do not knowingly collect data from children. If you believe a child has created an account, please contact us and we will delete it promptly.
9. Changes to This Policy
We may update this privacy policy from time to time. Significant changes will be communicated via email. The "last updated" date at the top of this page reflects the most recent revision.
10. Contact
For privacy-related questions or data requests: