Privacy Policy
How Skillux handles personal data when you browse, register, buy skills, or use the CLI.
1. Who we are
Skillux (“we”, “us”) operates skillux.dev and the Skillux CLI — a store for UX design AI skill packs. For privacy questions, email privacy@skillux.dev or support@skillux.dev.
2. Data we collect
Account & profile
- Email address, password (stored hashed), display name, and optional preferences (e.g. primary AI tool).
- Sign-in events and device labels when you manage sessions in Account settings.
Purchases & billing
- Order IDs, skill slugs, plan type, amounts, and refund status.
- Payment is handled by processors (card networks, Wise, Waffo Pancake, or wire for teams). We receive confirmation and limited billing metadata — not full card numbers when the processor tokenizes payment.
CLI & downloads
- Device authorization codes, API tokens, and timestamps when you approve a CLI login in the browser.
- Which owned skills you download or update, for entitlement checks and abuse prevention.
Usage & technical
- IP address, browser/user-agent, approximate region, and basic request logs needed to run and secure the Service.
- Pages you visit on our site (e.g. skill detail, docs) via first-party analytics or server logs where enabled.
Communications
- Messages you send via Contact, including topic and body.
- Transactional email: receipts, password resets, security alerts, version notices for skills you own.
Authors
- If you sell on Skillux: payout details, tax forms where required, submission metadata, and settlement history.
3. How we use data
- Provide accounts, checkout, downloads, CLI auth, and license entitlement.
- Send receipts, security notices, and product updates related to skills or plans you own.
- Prevent fraud, enforce Terms of Service, and debug outages.
- Improve catalog quality and documentation (aggregated or de-identified where practical).
- Comply with law, tax, and accounting obligations.
We do not sell your personal information. We do not use your email for unrelated third-party advertising lists. Marketing mail, if any, will be optional and easy to unsubscribe from.
4. Legal bases (where applicable)
Depending on your location, we process data to perform a contract (account, purchase, delivery), for legitimate interests (security, product improvement, abuse prevention), with your consent where required (optional cookies or marketing), and to meet legal obligations.
5. Sharing
We share personal data only as needed to run Skillux:
- Payment processors — to charge and refund you.
- Hosting, email, and infrastructure providers — to serve the site, store data, and send mail.
- Authors — limited sales aggregates or support context when resolving a pack-specific issue; we do not hand your password or full payment details to authors.
- Professional advisors or authorities — when required by law or to protect rights and safety.
- Business transfers — if Skillux is merged or sold, data may move under continued privacy protections.
6. Cookies & similar tech
We use session cookies or local storage for sign-in, CSRF protection, and preferences. The CLI stores tokens on your machine under your user profile. Essential cookies are required for the Service to work. If we add non-essential analytics cookies, we will provide a choice where required by law.
7. Retention
- Account data — while your account is open, then deleted or anonymized within a reasonable period after closure unless law requires longer retention.
- Orders & invoices — kept as needed for tax, accounting, and dispute handling.
- CLI device codes — short-lived; expired codes are purged routinely.
- Support tickets — retained long enough to resolve issues and improve support quality.
- Security logs — typically weeks to months, longer if investigating abuse.
8. Security
We use industry-standard measures such as HTTPS, hashed passwords, and access controls on production systems. No method of transmission or storage is 100% secure; please use a unique password and protect CLI tokens.
9. International transfers
Skillux may process data in countries other than yours (for example where our hosts or payment providers operate). Where required, we use appropriate safeguards such as contractual clauses with processors.
10. Your rights
Depending on your region (including GDPR/CCPA-style laws), you may have the right to:
- Access, correct, or delete personal data we hold about you.
- Export a copy of account and order data you provided.
- Object to or restrict certain processing, or withdraw consent where processing is consent-based.
- Opt out of marketing email via the unsubscribe link or by contacting us.
- Lodge a complaint with your local data-protection authority.
To exercise rights, email privacy@skillux.dev from your account email or use Contact. We may need to verify your identity before fulfilling a request. Some account controls (email, password, devices) will also live under Account → Settings when auth is fully connected.
11. Children
Skillux is aimed at professionals and is not directed at children under 16 (or the minimum age in your jurisdiction). We do not knowingly collect data from children. If you believe a child provided data, contact us and we will delete it.
12. Third-party services
Links to AI tools, payment providers, or external docs are governed by those parties’ policies. This Privacy Policy covers Skillux only.
13. Changes
We may update this Policy as the product or law changes. We will post the new version here and update “Last updated.” If changes are material, we may also notify you by email or an in-product notice.
14. Contact
Privacy requests: privacy@skillux.dev
General support: support@skillux.dev · Contact form