Privacy Policy

1. Data Controller

TALVORY LLC, 4405 Jager Dr NE Ste C4-4399, Rio Rancho, NM 87144, United States.
Email: hello@skilzy.io

2. Data Collected

We collect the following data during your use of Skilzy:

• Registration data: first name, last name, email address
• Progress data: completed lessons, scores, XP, streaks
• Preference data: level, daily goal, learning intent
• Technical data: IP address, browser type (automatically collected by our hosting provider)
• Sales page data: the date of your first visit to the ChatGPT Works for You Kit sales page, the page and version viewed, an encrypted fingerprint of your email address (never the address itself, no IP address) and, for the duration of the offer made right after a purchase, the customer and card identifiers assigned by Stripe (never your card number)

3. Processing Purposes

• Provide and improve the Skilzy service
• Save and synchronize your progress
• Personalize your learning experience
• Manage user accounts and authentication
• For B2B customers: enable progress tracking by trainers
• On our sales pages: apply the advertised price to you (launch price for 48 hours from your first visit, then regular price), whatever device you use, and allow the offer made right after a purchase to be added in one click
• Send you news, tips and promotions by email if you ticked the order box, including when the payment was not completed (one message a day for up to 30 days, one-click unsubscribe)

4. Legal Basis

The processing of your data is based on:
• Contract execution (service delivery)
• Your consent (service registration)
• Our legitimate interest (service improvement, security)

On our sales pages, remembering your first visit and the fingerprint of your email address are based on the performance of the contract and of pre-contractual steps taken at your request (charging you the price you were shown), and on our legitimate interest in applying that price fairly and consistently from one device to another. The temporary saving of your card by Stripe is based on the performance of the contract: it is used only for the one-click offer, which you remain free to accept or decline.

5. Data Retention

Your data is retained as long as your account is active. If your account is deleted, your data is erased within 30 days, except for legal retention obligations.

On our sales pages: the first-visit date and the email fingerprint are deleted 90 days after they are recorded. The card saved by Stripe for the one-click offer is removed as soon as that offer ends (accepted, declined, or expired 60 minutes after the purchase), at the latest at the following hourly automatic check. The record of the offer (made, accepted or declined) is kept with your account, so that it is never offered to you twice, and deleted with it.

Email address entered on the payment page without completing the purchase: deleted no later than 30 days after the last message, and as soon as you unsubscribe. Only an encrypted fingerprint, which cannot be turned back into the address, is kept so that we never write to you again: 13 months, or 3 years after an unsubscribe.

6. Data Sharing

We never sell your data. It may be shared with:

• Supabase (database hosting, servers in Europe)
• Vercel (website hosting)
• Stripe (payment processing, if applicable)
• Google (OAuth authentication, if you choose this method)
• PostHog (audience measurement, only if you have consented)
• Meta Platforms Ireland Ltd. (advertising performance measurement, only if you have consented). The data sent is hashed and this transfer may involve processing outside the European Union, governed by the European Commission's standard contractual clauses.

7. Your Rights

In accordance with the GDPR, you have the following rights:
• Right of access to your data
• Right of rectification
• Right of erasure
• Right of data portability
• Right to object to processing

To exercise these rights, contact us at: hello@skilzy.io

8. Cookies and Trackers

Skilzy uses three kinds of cookies and trackers. Those used for audience measurement and advertising are only activated after your explicit consent, collected via the banner shown on your first visit. Declining has no impact on your access to the service.

• Strictly necessary cookies (no consent required): session authentication, display preferences (theme, language) and storing your cookie choice. Without them, the application cannot work. Duration: up to 12 months.
• Audience measurement (consent required): PostHog, to understand how the courses are used and improve the service. Duration: 12 months.
• Advertising and performance measurement (consent required): the Meta pixel, which sets the _fbp and _fbc cookies to measure the effectiveness of our Facebook and Instagram campaigns. Conversion events (sign-up, subscription) may also be sent to Meta from our servers via the Conversions API, as hashed identifiers (email, name, IP address). Duration: 3 months.
• Strictly necessary cookies on our sales pages (no consent required): __Host-skz_kit remembers the date of your first visit to the ChatGPT Works for You Kit sales page, in order to apply the advertised price to you (launch price for 48 hours, then regular price). Duration: 90 days. __Host-skz_suite is set right after a payment and allows, from that browser only, the offer made to be added in one click. Duration: 2 hours. Both cookies are signed, cannot be read by the page's scripts, contain no data in clear text and are used neither for audience measurement nor for advertising.

9. Withdrawing Your Consent

You can change or withdraw your consent to audience measurement and advertising cookies at any time, as easily as you gave it, by writing to hello@skilzy.io. Withdrawal takes effect immediately and does not affect processing carried out before it.

10. Contact

For any questions regarding your personal data:
hello@skilzy.io