Privacy policy

This explains what personal data Skillbraid collects, why, and your rights under India’s Digital Personal Data Protection Act, 2023 and its Rules.

What we collect

• Account details: name, email, password (stored hashed by our auth provider), role.
• Profile: date of birth, city, college or workplace, field of study, skills.
• Work on Skillbraid: applications, submissions, ratings, payments and payout details (UPI ID).
• For 16–17 year olds: your parent or guardian’s name, email, phone and their consent record.

Why we use it

• To match you with roles, plans and gigs based on the skills you enter.
• To run gigs, take payments from businesses and pay learners.
• To keep the platform safe: verifying businesses, investigating reports, preventing fraud.

Under-18s

We need verifiable consent from a parent or guardian before processing a 16- or 17-year-old’s data for anything beyond setting up the request. We do not track or monitor under-18s’ behaviour, profile them, or show them targeted ads. Under-18s are never listed in employer search.

Who we share it with

• A business sees your name, course, verified skills and application note only when you apply to its gig.
• Your college sees your progress summary only if you join its cohort, and you can stop at any time.
• Service providers: Supabase (database and login), Razorpay (payments), Vercel (hosting), an email provider, and Anthropic (AI plans; we send skills and goals, never your name or contact details).

Your rights

• Access: download your data from your Passport.
• Correction and erasure: edit your profile, or delete your account from your Passport.
• Withdraw consent at any time by emailing the grievance officer.
• Complain to our grievance officer, and then to the Data Protection Board of India.

Security and breaches

Data is encrypted in transit and at rest by our providers, and access is limited by role. If a breach affects you, we will tell you and the Data Protection Board as the law requires.

Retention

We keep your data while your account is active. Payment records are kept as long as tax law requires. Declined or expired under-18 sign-ups are deleted within 30 days.