Privacy Policy

This Privacy Policy explains how SkillAnvil S.R.L. ("SkillAnvil," "we," "us," or "our") processes personal data when you use our website, learning platform, applications, and related services (the "Service"). SkillAnvil S.R.L. is the data controller for this processing. Using the Service is not consent to processing that requires separate consent.

1. Scope

This Policy covers personal data processed through accounts, learning activity, subscriptions, support, communications, and security operations. It does not cover a third party's independent processing on its own service. See our Cookies Policy for cookies and browser storage and our Terms of Service for rules governing the Service.

2. Personal Data We Process

2.1 Account, Identity, and Learning Data

We process account details such as your name, username, email address, internal user ID, profile image, role, verification status, and authentication credentials. If you use an external sign-in provider, we receive the information it makes available under your settings and its privacy notice.

We also process learning and content data, including course progress, quiz activity, scores, code, test runs, submissions, results, notes, bookmarks, preferences, and plan or feature-access status. Some drafts and preferences stay only in your browser.

Never send passwords, verification codes, or session tokens by email or in a support report.

2.2 Payment, Communications, and Support Data

Payment providers process payment-card details under their own notices. SkillAnvil may receive limited transaction data such as billing email, plan, customer or transaction reference, subscription status, renewal or expiry date, and payment status. Do not send us full card numbers, security codes, or bank credentials.

When you contact us, report a problem, request a privacy right, or subscribe to communications, we process your contact details, message, attachments, support history, and communication preferences. Please remove unrelated personal data from screenshots or recordings.

2.3 Technical, Cookie, and Security Data

We and our infrastructure providers may process IP addresses, timestamps, requested routes, request identifiers, browser and device information, authentication and security events, diagnostics, performance data, and suspected abuse or fraud information.

We use first-party cookies and browser storage for authentication, security, cookie choices, preferences, drafts, bookmarks, and requested features. We do not currently use advertising or behavioral analytics cookies. Our Cookies Policy lists current uses and durations.

2.4 Sources of Data

We receive data directly from you; automatically from your browser or device; from providers you choose, such as an external sign-in provider; and from service providers that supply payment, delivery, or security information needed to operate the Service.

3. Why We Process Personal Data

3.1 Contract and Legitimate Interests

We process data as needed to create and secure accounts; provide courses, code execution, progress tracking, subscriptions, and support; and complete requested transactions.

We also process data where necessary for legitimate interests that are not overridden by your rights, including preventing fraud and abuse, maintaining and improving the Service, responding to support requests, and establishing or defending legal claims.

3.2 Consent and Legal Obligations

We rely on consent where required, such as for optional marketing or any non-essential cookies we may introduce. You may withdraw consent at any time without affecting earlier lawful processing.

We also process data to comply with legal obligations, including tax, accounting, consumer-protection, data-protection, lawful-authority, and security-incident requirements.

3.3 Required Information

Required account fields and checkout information are necessary to provide the relevant feature or transaction. Without them, we may be unable to do so. Optional profile, preference, newsletter, and support details may be omitted unless needed for your request.

4. How We Share Personal Data

We do not sell personal data or use it for cross-context behavioral advertising. We share data only as needed and permitted by law with:

• infrastructure, technical, authentication, payment, and communications providers;
• professional advisers or authorities when needed to comply with law, protect rights or safety, or handle claims; and
• a successor involved in a merger, reorganization, financing, or sale, subject to applicable protections.

Providers may process data only for the relevant service or as law otherwise permits. Learning submissions are not public unless a feature clearly says so and you choose to use it.

5. International Transfers

Some providers may process data outside Romania or the European Economic Area. Where safeguards are required, we use a recognized mechanism such as an adequacy decision, the European Commission's standard contractual clauses, or another lawful mechanism. Contact [email protected] for information about relevant safeguards.

6. Data Retention

We keep personal data only as long as reasonably needed for its purpose:

• account and learning data while your account is active and for a limited period after closure;
• transaction records for applicable tax, accounting, consumer, and claims periods;
• security, technical, support, and privacy records for an appropriate operational or documentation period; and
• browser-held data until it expires, you clear it, or it is replaced.

We may retain data longer for a legal hold, unresolved dispute, fraud prevention, or security investigation. We delete or anonymize data when it is no longer needed where reasonably practicable.

7. Your Privacy Rights

Depending on applicable law, you may have rights to access, correct, delete, restrict, or receive your personal data; object to legitimate-interest processing or direct marketing; withdraw consent; and complain to a data-protection authority.

Email [email protected] to exercise a right. We may verify your identity and will respond within the legally required period. Rights can be subject to legal conditions and exceptions; if we cannot fulfill a request, we will explain why and identify available remedies.

In Romania, you may complain to the Romanian National Supervisory Authority for Personal Data Processing. Elsewhere in the EEA, you may contact the authority where you live, work, or believe an infringement occurred.

8. Automated Processing

Automated systems run code, check tests, score quizzes, calculate progress, and determine access from account or subscription status. They do not make decisions with legal or similarly significant effects about you. If that changes, we will provide the information and safeguards required by law.

9. Data Security

We use technical and organizational measures appropriate to the data and risk, including access controls, secure authentication cookies, encrypted production transport, data minimization in application logs, and operational safeguards. No system is completely secure.

If you believe your account or data is compromised, contact [email protected] with [Security] in the subject line. We notify affected people and authorities of breaches where law requires it.

10. Children

The Service is not directed to children under 16, who must not create an account or submit personal data. Contact [email protected] if you believe this has happened. Users aged 16 to legal majority must use the Service with the permission and supervision described in our Terms of Service.

11. Changes to This Policy

We may update this Policy when the Service, our practices, or law changes. We will update the "Last updated" date and give additional notice where required. An update does not retroactively authorize a new use that requires consent or another legal basis.

12. Contact

• Controller: SkillAnvil S.R.L.
• Privacy requests and legal matters: [email protected]
• Security incidents and technical support: [email protected]
• General inquiries: [email protected]