Privacy Policy

1. Information We Collect

We collect the following types of information:

• Account Information: name, email address, and password when you register.
• Billing Information: payment details are collected and processed exclusively by Stripe. We do not store your credit card number.
• Usage Data: pages visited, features used, time spent on the platform, IP address, browser type, and device information.
• Course Data: content you create, learner progress data, quiz results, and certificates issued.
• Communications: messages sent to us via email or the contact form.

2. How We Use Your Information

We use your information to:

• Provide, maintain, and improve our services.
• Process payments for your purchases.
• Send transactional emails (receipts, account notifications, security alerts).
• Analyze platform usage to improve user experience.
• Respond to your inquiries and support requests.
• Comply with legal obligations.

We do not sell, rent, or share your personal information with third parties for their marketing purposes.

3. Third-Party Services

We use the following third-party services that may process your data:

• Stripe, Inc. — payment processing (PCI-DSS Level 1 certified). Stripe processes all payment data directly. Skillora never stores your full credit card information.
• Hostinger International Ltd. — website hosting.
• Google Analytics — website analytics (anonymized IP addresses).

Each third-party service operates under its own privacy policy. We encourage you to review their policies.

4. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. If you cancel your account, we will retain your data for 30 days before permanent deletion. We may retain certain information longer as required by law or for legitimate business purposes (e.g., tax records, dispute resolution).

5. Data Security

We implement industry-standard security measures to protect your personal information, including:

• SSL/TLS encryption for all data in transit.
• Encrypted storage for sensitive data at rest.
• Regular security audits and access controls.
• Stripe's PCI-DSS Level 1 certification for payment data.

While we take reasonable steps to protect your data, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

6. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: request a copy of your personal data.
• Correction: request correction of inaccurate data.
• Deletion: request deletion of your personal data.
• Portability: request a machine-readable copy of your data.
• Opt-Out: opt out of non-essential communications at any time.

To exercise any of these rights, contact us at Contact@skill-ora.org. We will respond within 30 days.

7. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• The right to know what personal information we collect and how it is used.
• The right to request deletion of your personal information.
• The right to opt out of the sale of your personal information. Note: we do not sell personal information.
• The right to non-discrimination for exercising your CCPA rights.

8. GDPR Compliance

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR). We process your data based on the following legal bases:

• Contract performance: to provide our services to you.
• Legitimate interest: to improve our platform and prevent fraud.
• Consent: for analytics cookies and marketing communications (where applicable).

You may withdraw consent at any time. To exercise your GDPR rights, contact Contact@skill-ora.org.

9. Cookies

We use essential cookies to operate our website and analytics cookies to understand how visitors interact with our platform. For details on our use of cookies and how to manage them, please visit our Legal Notice page (Cookie Policy section).

10. Children's Privacy

Skillora is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will delete that information promptly. If you believe a child under 13 has provided us with personal data, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. For material changes, we will notify you via email. Your continued use of the platform after any changes constitutes acceptance of the updated policy.