Privacy Policy
Last updated: December 2024
This Privacy Policy describes how Skillr ("we", "us", or "our") collects, uses, and protects your personal information when you use our Learning Management System platform.
1. Information We Collect
1.1 Account Information
When you create an account, we collect:
- Name and email address
- Phone number (optional)
- Profile picture (if provided via OAuth)
- Password (securely hashed)
1.2 Course and Learning Data
As you use our platform, we collect:
- Course enrollments and progress
- Lesson completion status
- Quiz and assignment submissions
- Certificates earned
- Course reviews and ratings
1.3 Video Analytics and DRM Data
To protect course content and provide learning analytics, we collect:
- Playback events: Play, pause, seek, and completion times
- Watch duration: Time spent watching each video
- Device fingerprint: To enforce device limits (max 3 devices)
- IP address: For security monitoring and fraud prevention
Video Watermarking: Your email address may be displayed as a watermark on course videos to prevent unauthorized sharing. By using our platform, you consent to this watermarking for DRM protection purposes.
1.4 Payment Information
Payment processing is handled by Razorpay and Stripe. We store transaction records (amount, date, status) but do not store your credit card numbers or CVV.
1.5 Live Class Attendance
For live classes, we track:
- Join and leave times
- Attendance duration
- Meeting participation
1.6 Technical Data
We automatically collect:
- Browser type and version
- Operating system
- Device type (desktop, mobile, tablet)
- Session information
2. How We Use Your Information
- Course Delivery: To provide access to courses and track progress
- Payment Processing: To process payments and generate invoices
- DRM Protection: To protect course content through watermarking and device limits
- Security: To detect and prevent fraud, unauthorized access, and abuse
- Analytics: To improve our platform and course offerings
- Communication: To send important updates about your courses and account
- Certificates: To generate and verify completion certificates
3. Data Sharing with Third Parties
We share your data with the following service providers:
| Service | Data Shared | Purpose |
|---|---|---|
| VdoCipher | User ID, email (watermark), device fingerprint | Video hosting and DRM protection |
| Razorpay/Stripe | Name, email, payment amount | Payment processing |
| Zoom/Google Meet | Name, email | Live class hosting |
We do NOT sell your personal data to third parties.
4. Your Rights
Under GDPR and India's DPDP Act 2023, you have the right to:
- Access: Request a copy of your personal data
- Export: Download your data in a portable format (JSON/CSV)
- Deletion: Request deletion of your account and associated data
- Correction: Update or correct your personal information
- Withdraw Consent: Opt out of specific data processing activities
- Object: Appeal automated decisions (e.g., suspicious activity flags)
To exercise these rights, go to Settings > Privacy or contact us at [email protected]
5. Data Retention
- Account data: Retained until account deletion
- Video playback logs: 90 days
- Payment records: 7 years (tax compliance)
- Session data: Until session expiry
- Certificates: Permanently (for verification)
6. Security Measures
We protect your data using:
- HTTPS/TLS encryption for all data in transit
- AES-256 encryption for sensitive data at rest
- Role-based access controls
- Regular security audits
- Bcrypt password hashing
7. Cookies
We use essential cookies for:
- Session management (keeping you logged in)
- Security (CSRF protection)
We do not use third-party advertising or tracking cookies.
8. Children's Privacy
Our platform is intended for users 18 years or older. If you are under 18, you must have parental consent to use Skillr. We do not knowingly collect data from children under 13.
9. International Data Transfers
Your data may be processed on servers located in Germany and India. We ensure appropriate safeguards are in place for any international data transfers.
10. Changes to This Policy
We will notify you via email at least 30 days before any material changes to this Privacy Policy take effect.
11. Contact Us
For privacy inquiries:
- Email: [email protected]
- Data Protection Officer: [email protected]
By using Skillr, you acknowledge that you have read and understood this Privacy Policy.