隐私政策
最后更新: October 20, 2026
以下英文原文为具有约束力的权威版本。本中文页面提供站点标准导航,法律文本以英文显示。
This policy explains what personal data SkillVault collects, why, and the choices you have. Summary: we collect the minimum needed to run accounts, memberships and downloads. We never sell personal data. Payments are handled by our payment provider, and we never see or store card numbers.
1. Data we collect
- Account data — when you sign in with Google or GitHub OAuth, we receive your provider user id, email address, display name and avatar URL.
- Usage data — bookmarks, download history, private skills you save, and aggregate view/download counters. Used to operate quotas and your dashboard.
- Billing data — subscription status, plan, expiry and order records. Card and payment details are processed by our payment provider and never reach our servers.
- Technical data — standard server logs (IP, user agent, timestamps) kept briefly for security and abuse prevention.
2. How we use it
- Operate your account, quota and membership entitlements.
- Process subscriptions, receipts and refunds via our payment provider.
- Improve the Service with aggregate, non-identifying statistics.
- Detect, prevent and address abuse or technical issues.
SkillVault only provides AI skill configuration templates and does not provide AI inference services. Users take full responsibility for usage.
3. Legal bases (GDPR)
Where the GDPR applies: performance of a contract (accounts, subscriptions), legitimate interests (security, product improvement), and consent where explicitly requested (e.g., marketing email, if we ever send any).
4. Processors we share data with
- Supabase — authentication and database hosting.
- Payment provider — payments, invoicing and subscription management (acting as merchant of record).
- Vercel & Cloudflare — hosting, CDN and file storage.
- Google / GitHub — OAuth identity providers.
We do not sell or rent personal data, and we do not share it with advertising networks.
5. Cookies and local storage
We use no advertising or cross-site tracking cookies. We set a first-party authentication session (required to stay signed in) and a small local preference entry that remembers your dark/light theme choice.
6. Retention
Account and order records are retained while your account is active; order records are retained as needed for tax and accounting duties. Usage records (downloads, bookmarks) are deleted with your account. Technical logs are short-lived.
7. Your rights
Depending on your jurisdiction you may access, correct, export or delete your personal data, object to processing, and lodge a complaint with a supervisory authority. Exercise rights by emailing 2894599828@qq.com; we respond within 30 days.
8. Children
The Service is not directed to children under 16 (or higher local thresholds), and we do not knowingly collect their data.
9. International transfers
We operate globally; data may be processed in the US and EU by the providers listed above under standard contractual clauses or equivalent safeguards.
10. Changes
Material changes to this policy will be announced on the Service. The "Last updated" date above always reflects the current version.