Privacy Policy.
Last updated — 18 May 2026
This policy explains how Skillzy (operated from Australia) handles personal information, consistent with the Australian Privacy Principles. We collect only what we need to run the marketplace.
What we collect
- Account: email, password hash (via our auth provider), and any name or handle you add.
- Purchases: the listing bought, your buyer email, amount, timestamp, and download receipts — so you can re-download and we can support you.
- Seller data: the files and listing content you upload, and a Stripe payout reference. We never see your full bank or card details.
- Payment data: handled entirely by Stripe. Card numbers are entered on a Stripe-secured field and never touch Skillzy’s servers.
- AI draft assist: if you use it, the brief or files you submit to draft a listing are sent to our AI provider to generate the draft. Don’t paste secrets.
- Cookies: a sign-in session cookie, and short-lived referral cookies (which creator/channel sent you) so creators get attributed. No advertising or cross-site-tracking cookies.
- Basic analytics & logs: aggregate page usage and error logs. No fingerprinting.
Why we use it
To create your account, process and deliver purchases, pay sellers, provide support, send transactional email (receipts, download links, seller share kits), prevent fraud and abuse, meet legal obligations, and — only if you opt in — send the newsletter. You can unsubscribe from the newsletter any time.
Who processes it
We share data with processors strictly to run the service: Stripe (payments & payouts), Supabase (database, auth, file storage), Resend (transactional & newsletter email), our AI provider (listing-draft assist only), and our hosting provider. Some processors are located overseas (including the United States), so your data may be processed outside Australia under their safeguards. We never sell your data or share it with advertisers.
Retention
We keep account and transaction records while your account is active and as long as needed for tax, accounting, and legal obligations, then delete or anonymise them. You can ask us to delete your account; some records may be retained where the law requires.
Security
Access is restricted, transport is encrypted, seller files are stored in a private bucket served only via expiring, ownership-checked links, and payment data is isolated at Stripe. No system is perfectly secure, but we take reasonable steps to protect your information.
Your rights
You can request access to, correction of, or deletion of your personal information, and raise a privacy concern. Email hi@skillzy.ai and we’ll respond within a reasonable time. If you’re unsatisfied you may contact the Office of the Australian Information Commissioner.
Changes
We’ll update this policy as the service evolves; the “last updated” date reflects the current version. See also our Terms and Refund Policy.