Privacy Policy

This explains what personal data Skills Registry collects, why, and what you can ask us to do with it. We are the data controller for account data, and a processor for the content your workspace stores with us.

What we collect

• Account data: your name, email address, profile picture if you sign in with Google, and which workspace and role you have.
• Workspace content: the skills, versions, files, comments and review decisions your team creates.
• Activity records: sign-ins, exports and admin actions, kept so admins can audit their workspace.
• Billing data: plan, subscription status and payment identifiers. Card details are handled by Stripe and never reach our servers.

Why we hold it

To give you the Service you asked for (contract), to bill you and meet accounting duties (legal obligation), and to keep the Service secure and working (legitimate interest).

Who processes it for us

• Supabase — database, authentication and file storage.
• Stripe — payments, invoicing and tax handling.
• Lovable — hosting of the application.

We do not sell personal data and do not use it for advertising. Transfers outside the EU/EEA rely on the European Commission's standard contractual clauses.

How long we keep it

Workspace content is kept while the workspace exists and for 30 days after deletion, so it can be recovered by mistake-proofing. Invoices and related records are kept for seven years as Swedish accounting law requires.

Your rights

You can ask for a copy of your data, correct it, delete it, restrict or object to its use, or take it elsewhere. Write to brogeby@gmail.com and we will answer within 30 days. You may also complain to the Swedish authority Integritetsskyddsmyndigheten.

Cookies

We use only what the app needs to work: a sign-in session stored in your browser, and Stripe's own cookies during checkout. No advertising or tracking cookies.

Security

Data is encrypted in transit and at rest, access is scoped per workspace by database policies, and uploaded archives are scanned before they are stored.