Privacy Policy

Last Updated: December 15, 2024

Introduction

Welcome to SkullChat. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you use our AI advisory platform.

Information We Collect

Personal Information

We collect information you provide directly to us, including:

  • Name and email address
  • Account credentials
  • Professional information and career details
  • Resume and related documents
  • Payment and billing information

Usage Information

We automatically collect information about your use of our platform:

  • Advisor consultations and panel sessions
  • Decision briefs and goal tracking data
  • Feature usage and interaction patterns
  • Device information and browser type
  • IP address and location data

How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our AI advisory services
  • Personalize your experience and deliver relevant recommendations
  • Process your transactions and manage subscriptions
  • Communicate with you about updates, features, and support
  • Analyze usage patterns to enhance platform functionality
  • Detect, prevent, and address technical issues and security threats
  • Comply with legal obligations and enforce our terms

AI Processing and Data Usage

Your conversations with AI advisors are processed using secure AI services. We take the following measures:

  • All AI processing is performed with encryption and security controls
  • Your conversations are used only to provide personalized advisory services
  • We implement bias resistance systems to ensure fair and balanced advice
  • AI-generated insights remain private and are not shared with third parties
  • We do not use your data to train general AI models available to other users

Data Security

We implement industry-standard security measures to protect your information:

  • Encryption: All data is encrypted in transit using TLS and at rest using AES-256 encryption
  • Access Controls: Strict role-based access controls limit who can view your data
  • Authentication: Secure authentication with Row Level Security (RLS) policies
  • Monitoring: Continuous monitoring for security threats and unauthorized access
  • Regular Audits: Periodic security assessments and vulnerability testing

Data Sharing and Disclosure

We do not sell your personal information. We may share your data only in the following circumstances:

  • Service Providers: Trusted third-party services that help us operate our platform (e.g., hosting, payment processing)
  • Legal Requirements: When required by law or to protect our rights and safety
  • Business Transfers: In connection with a merger, acquisition, or sale of assets
  • With Your Consent: When you explicitly authorize us to share your information

Your Rights and Choices

You have the following rights regarding your personal information:

  • Access: Request a copy of the personal data we hold about you
  • Correction: Update or correct inaccurate information
  • Deletion: Request deletion of your personal data
  • Export: Download your data in a portable format
  • Opt-Out: Unsubscribe from marketing communications
  • Withdraw Consent: Revoke consent for data processing where applicable

To exercise these rights, please contact us at privacy@superpowerswithai.com

Cookies and Tracking

We use cookies and similar tracking technologies to enhance your experience:

  • Essential Cookies: Required for platform functionality and authentication
  • Performance Cookies: Help us understand how you use our platform
  • Preference Cookies: Remember your settings and preferences

You can control cookies through your browser settings, though disabling certain cookies may affect platform functionality.

Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this Privacy Policy. When you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure that such transfers comply with applicable data protection laws and that appropriate safeguards are in place to protect your information.

Children's Privacy

Our platform is not intended for users under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our platform and updating the "Last Updated" date. Your continued use of our services after such changes constitutes acceptance of the updated policy.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

GDPR Compliance

For users in the European Economic Area (EEA), we comply with the General Data Protection Regulation (GDPR). You have additional rights under GDPR, including:

  • Right to data portability
  • Right to object to processing
  • Right to restriction of processing
  • Right to lodge a complaint with a supervisory authority

Our legal basis for processing your data includes consent, contractual necessity, legal obligations, and legitimate interests in providing and improving our services.