Fine print

Privacy Policy.

Last updated — 18 May 2026

This policy explains how Skillzy (operated from Australia) handles personal information, consistent with the Australian Privacy Principles. We collect only what we need to run the marketplace.

What we collect

  • Account: email, password hash (via our auth provider), and any name or handle you add.
  • Purchases: the listing bought, your buyer email, amount, timestamp, and download receipts — so you can re-download and we can support you.
  • Seller data: the files and listing content you upload, and a Stripe payout reference. We never see your full bank or card details.
  • Payment data: handled entirely by Stripe. Card numbers are entered on a Stripe-secured field and never touch Skillzy’s servers.
  • AI draft assist: if you use it, the brief or files you submit to draft a listing are sent to our AI provider to generate the draft. Don’t paste secrets.
  • Cookies: a sign-in session cookie, and short-lived referral cookies (which creator/channel sent you) so creators get attributed. No advertising or cross-site-tracking cookies.
  • Basic analytics & logs: aggregate page usage and error logs. No fingerprinting.

Why we use it

To create your account, process and deliver purchases, pay sellers, provide support, send transactional email (receipts, download links, seller share kits), prevent fraud and abuse, meet legal obligations, and — only if you opt in — send the newsletter. You can unsubscribe from the newsletter any time.

Who processes it

We share data with processors strictly to run the service: Stripe (payments & payouts), Supabase (database, auth, file storage), Resend (transactional & newsletter email), our AI provider (listing-draft assist only), and our hosting provider. Some processors are located overseas (including the United States), so your data may be processed outside Australia under their safeguards. We never sell your data or share it with advertisers.

Retention

We keep account and transaction records while your account is active and as long as needed for tax, accounting, and legal obligations, then delete or anonymise them. You can ask us to delete your account; some records may be retained where the law requires.

Security

Access is restricted, transport is encrypted, seller files are stored in a private bucket served only via expiring, ownership-checked links, and payment data is isolated at Stripe. No system is perfectly secure, but we take reasonable steps to protect your information.

Your rights

You can request access to, correction of, or deletion of your personal information, and raise a privacy concern. Email hi@skillzy.ai and we’ll respond within a reasonable time. If you’re unsatisfied you may contact the Office of the Australian Information Commissioner.

Changes

We’ll update this policy as the service evolves; the “last updated” date reflects the current version. See also our Terms and Refund Policy.