How Your Data Flows

This page follows your data from the moment you give it to us. It says what we collect, where it lives, what can reach an AI model and what never leaves. It is written to match how the product works today.

The Short Version

• Your data lives in our database on Supabase, behind row level security.
• An outside AI model is used only through Enhance with AI. On the sponsor and admin paths, names, emails, phone numbers and other direct identifiers are replaced with placeholders first.
• A group of fewer than five people is never shown on a sponsor screen, never put in a report and never sent to a model.
• We don't train on your data.

The Path Your Data Takes

Read the diagram from top to bottom. The same steps are written out beside it.

What We Collect

We collect only what is needed to run the platform:

• Account details. Name, work email, role and the sponsor organisation that invited you.
• Assessment answers. What you submit to the assessments, and the scores worked out from them.
• Campaign context and uploaded documents. The company information and files a sponsor adds to a campaign.
• Usage logs. Session times, page views and feature use, for running and improving the product. Logs are kept for up to 90 days.
• Support messages. What you send us or write in the contact form.

We do not sell personal data. We install no tracking software on anyone's computer or phone. Website visit statistics run only after you allow analytics.

Where It Is Stored

• The database. Accounts, answers, scores and campaign context sit in a Supabase PostgreSQL database in the United States (Ohio). The API runs on Render in the same region.
• Row level security. Every table has it. Browsers never read member data directly. Our server does, with a key the browser never sees.
• Files. Uploaded documents go to private Supabase Storage buckets. They are reached only through short lived links that our server issues.
• One exception. A profile picture sits in a public bucket so it can be shown. It exists only if you add one.
• Encryption. Traffic is encrypted on the way, and stored data is encrypted where it sits.

What Goes To An AI Model

An outside AI model is used only through the Enhance with AI control. Each campaign has one, and the workspace owner can turn it off for that campaign. It is on unless it is turned off.

• Sponsor and admin paths. Before a request leaves, names, emails, phone numbers and other direct identifiers are replaced with placeholders. The real values are put back in the reply you see. An audit entry records how many items were replaced and never stores the raw values.
• The floor of five. Nothing from a group under 5 is put in a prompt.
• Members. Ask Avro Guide, the help bubble, answers from the Handbook only and makes no outside model call. A member's own coach, Compass and Simulator can send that member's own results to a model. The member controls this in Settings, and other people's answers are never part of it.
• Providers. The companies that run the models are listed under Who Handles Data, below.

We don't train on your data.

What Never Leaves

• Individual answers and scores are private by default. A sponsor sees group figures, not what a person answered. A workspace owner can choose to see individual scores, only after reading and accepting a disclaimer, and every change is recorded.
• Some results are never shown per person. Culture and Climate, AI Safe Use and Role Horizon are never shown to a sponsor per person, whatever the setting.
• Nothing below the floor of 5. It does not reach a sponsor screen, a report or a model prompt.
• Documents stay in their workspace. A sponsor's documents are never shared with another organisation.

The Floor Of Five

• If only two or three people answer, an average is really a readout of those people. So we do not show it.
• The rule is simple. A group figure appears only when at least five people who answered are in the group. A smaller group shows as hidden.
• We count the people who answered, not the people invited. A label such as a department must reach five on its own.
• The check runs on our servers, so it cannot be switched off in a browser.

Who Handles Data

These companies process data for us, each for one job. Supabase holds the database and sign in. Vercel hosts the website. Render hosts the API. OpenAI and OpenRouter provide AI models when Enhance with AI is on.

The full list, with every job, is on the Trust and security page.

Keeping And Deleting Data

• Account data is kept for the life of your account. Inactive accounts and their assessment data are archived after 24 months and deleted on request, subject to legal retention duties.
• An administrator can delete a workspace. That removes the login, the campaign files and the voice recordings.
• A member can ask to close their account from their settings. We pass the request to their organisation, which owns the results of the assessments it gave them.
• A sponsor can delete the documents they uploaded at any time.
• Logs are kept for up to 90 days.

The privacy policy has the full detail.

Questions

For a question or a report, write to info@skillement.ai or use the contact page.