Privacy Policy.

Who operates Skillzy

Skillzy (skillzy.ai) is operated from Australia. All support, privacy, and data-request correspondence goes to hi@skillzy.ai. A real person reads every message.

What we collect

• Account: email, password hash (via our auth provider), and any name or handle you add.
• Purchases: the listing bought, your buyer email, amount, timestamp, and download receipts — so you can re-download and we can support you.
• Seller data: the files and listing content you upload, and a Stripe payout reference. We never see your full bank or card details.
• Payment data: handled entirely by Stripe. Card numbers are entered on a Stripe-secured field and never touch Skillzy’s servers.
• AI draft assist: if you use it, the brief or files you submit to draft a listing are sent to our AI provider to generate the draft. Don’t paste secrets.
• Cookies: a sign-in session cookie, and short-lived referral cookies (which creator/channel sent you) so creators get attributed. No advertising or cross-site-tracking cookies.
• Basic analytics & logs: aggregate page usage and error logs. No fingerprinting.

Why we use it

To create your account, process and deliver purchases, pay sellers, provide support, send transactional email (receipts, download links, seller share kits), prevent fraud and abuse, meet legal obligations, and — only if you opt in — send the newsletter. You can unsubscribe from the newsletter any time.

Who processes it

We share data with processors strictly to run the service: Stripe (payments & payouts), Supabase (database, auth, file storage), Resend (transactional & newsletter email), our AI provider (listing-draft assist only), and our hosting provider. Some processors are located overseas (including the United States), so your data may be processed outside Australia under their safeguards. We never sell your data or share it with advertisers.

Retention

We keep account and transaction records while your account is active and as long as needed for tax, accounting, and legal obligations, then delete or anonymise them. You can ask us to delete your account; some records may be retained where the law requires.

Security

Access is restricted, transport is encrypted, seller files are stored in a private bucket served only via expiring, ownership-checked links, and payment data is isolated at Stripe. No system is perfectly secure, but we take reasonable steps to protect your information.

Your rights

You can request access to, correction of, or deletion of your personal information, and raise a privacy concern. Email hi@skillzy.ai and we’ll respond within a reasonable time. If you’re unsatisfied you may contact the Office of the Australian Information Commissioner.

Marketing emails & how to opt out

Skillzy occasionally reaches out to publicly listed business contacts (e.g. profile emails on developer platforms) to introduce the marketplace. Every outreach email includes a working unsubscribe link and clear sender identification, in line with the Australian Spam Act 2003. If you’d rather not hear from us again — or want your address removed from all Skillzy campaigns permanently — reply directly to the email you received, or send a note to hi@skillzy.ai and we’ll suppress your address across every campaign inside one business day.

Changes

We’ll update this policy as the service evolves; the “last updated” date reflects the current version. See also our Terms and Refund Policy.