Privacy notice
Operator: Sirius Forge Technologies / Skillerious.
Account and learning data
If you register, the platform may store your email address, display name, preferred language, account role, test-attempt results, saved questions and certificate records. These records are used to provide authentication, learning progress, certificate eligibility and account security.
Payments
Certificate payments are processed through Stripe Checkout. The website does not place Stripe secret keys in the browser and does not store full payment-card details in the Skillerious database. The platform stores order identifiers, payment status and certificate fulfilment information needed to administer the purchase.
Advertising
Public learning/content pages may use Google AdSense after the site is approved and advertising is enabled. Advertising technologies can use cookies or similar storage and may process information for ad delivery, measurement and personalisation where permitted. For UK/EEA/Swiss visitors, the production site must use a Google-certified consent management platform (CMP) configured for the applicable Google consent requirements.
Essential browser storage
The platform uses browser storage for functions such as language preference and, in some standalone trainers, local progress or wrong-answer review. Authentication sessions are managed by Supabase Auth when accounts are enabled.
Service providers
The deployed service may use Supabase for authentication/database/storage, Stripe for certificate payments, Cloudflare Pages or another selected host for web delivery, and Google AdSense for advertising after activation. Each provider processes data under its own terms and privacy documentation.
Your choices and rights
You can decline non-essential advertising consent through the configured CMP. Depending on applicable data-protection law, you may also have rights to access, correct, delete or restrict certain personal data. Use the configured contact address for privacy requests.
Retention and security
Learning and certificate records should be retained only for as long as needed for the stated purposes, legal obligations, dispute handling and certificate verification. Administrative access is protected through database Row Level Security and role checks; production administrators should use MFA.
This template must be reviewed against the actual production configuration and legal operator details before launch.
Skillerious Talent candidate, certificate and recruitment data
Skillerious Talent may process professional profile information, country/region, work-authorisation countries, relocation and remote-work preferences, employer headquarters/hiring countries, verification status, subscription status, international job vacancies, applications, saved-candidate records, interview invitations, in-app notifications, reports and blocks. Candidate public profiles are opt-in and are published only after the one-time profile entitlement is confirmed and the candidate switches public visibility on.
External certificates and evidence
Candidates may add certificates and credentials from other issuers, including universities, vendors, training providers, employers and professional bodies. The platform may store the credential title, issuer, credential ID, issue/expiry dates, credential URL, visibility choices and an optional uploaded PDF/JPG/PNG evidence file. External credentials are labelled separately from Skillerious-issued certificates. A candidate upload is not treated as proof of authenticity merely because a file was supplied.
CV and supporting files
CVs, references, portfolios, qualification evidence and external-certificate files are designed to be stored in a private Supabase Storage bucket. Candidate files marked for employer sharing are accessible only to the candidate, authorised administrators and verified subscribed employers who are permitted to access that candidate. They are not included in the anonymous public profile by default.
Employer verification and safety
Employer accounts may contain company name, recruiter name, business email, website/domain, company description, verification-review information and subscription records. Candidates can block an employer and can submit a report for administrator review. A block is designed to prevent that employer from candidate search, employer-shared document access and new interview invitations to the blocking candidate.
Notifications
Recruitment events may create in-app notifications. Optional email notifications remain disabled until an email-delivery provider is configured and the corresponding setting is enabled.
Private authentication email, Stripe identifiers and non-shared private documents are not intentionally exposed in the public candidate directory. Candidates can unpublish their profile and change public-contact settings. Public means that anyone with the profile URL may be able to view the fields the candidate chose to publish.
Before production launch, replace this draft with the final controller identity, contact details, purposes/lawful bases, retention periods, recipients/processors, international-transfer information and data-subject-rights procedure for the actual deployed business.
Direct messages and career-tool data
If you use direct employer-candidate messaging, Skillerious stores conversation participants, message content, read status and timestamps so the service can deliver and display the conversation. CV drafts, saved job-description drafts and saved interview kits are stored only when a signed-in user chooses to save them. Download-only generator use can remain in the browser where the page allows it.