Privacy Policy

1. Introduction

SkillFoundry Inc. ("SkillFoundry," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our technical screening platform at skillfoundry.dev (the "Service").

Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the Service.

2. Information We Collect

2.1 Personal Information

We may collect personal information that you provide directly to us, including:

• Name and contact information (email address, phone number)
• Account credentials (username, password)
• Professional information (resume, work history, skills)
• Payment information (credit card details, billing address)
• Communications you send to us

2.2 Usage Information

We automatically collect certain information when you use our Service:

• Log data (IP address, browser type, operating system)
• Device information (hardware model, unique device identifiers)
• Usage data (pages visited, time spent, clicks, and actions taken)
• Performance data (test results, completion times, code submissions)
• Assessment behavioral events (for example, file opens, edit sizes and origins, test runs, and AI assistant interactions). We do not record keystroke content.
• Cookies and similar tracking technologies

2.3 Information from Third Parties

We may receive information about you from third parties, such as identity verification services, payment processors, or when an organization invites you to take an assessment.

3. How We Use Your Information

We use the collected information for various purposes:

• To provide and maintain our Service
• To process and complete transactions
• To send you technical notices and support messages
• To provide customer support
• To analyze and improve our Service
• To detect, prevent, and address technical issues
• To evaluate candidate performance and provide assessment results
• To comply with legal obligations
• To protect our rights and prevent fraud

3.1 Optional Research Use

We use the behavior record of practice attempts to check and tune our behavior analysis only if you give separate, opt-in consent. Consent is off by default, is available only to users who confirm they are 18 or older, and can be withdrawn at any time in Settings. Research copies are pseudonymized, are never used to score you, and are never shown to employers. Assessments taken for an organization are used for this purpose only where that organization has agreed to it by contract.

4. Disclosure of Your Information

We may share your information in the following situations:

4.1 With Organizations

If you take an assessment for an organization, we share your assessment results, performance data, and profile information with that organization.

4.2 With Service Providers

We may share your information with third-party service providers who perform services for us, such as payment processing, data analysis, email delivery, hosting services, and customer service.

4.3 For Legal Reasons

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).

4.4 Business Transfers

If we are involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction.

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and audits
• Access controls and authentication mechanisms
• Employee training on data protection
• Incident response procedures

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When we no longer need to use your information, we will securely delete or anonymize it.

Assessment behavioral evidence. By default, we keep behavioral evidence from an assessment for 24 months after the most recent evidence received for that attempt, and protected artifacts (such as code diffs, test reports, and AI assistant transcripts) for 12 months. Organizations may configure other periods within set limits. Pseudonymized research copies of practice attempts covered by research consent may be kept for up to 36 months.

Deletion and backups. When you ask us to delete your data, for example by deleting your account, we delete your behavioral assessment evidence (including its protected artifacts) from our live systems within 48 hours, unless a legal hold applies. We deactivate your account and delete or anonymize your other account data, such as your profile and assessment submissions, in line with the retention periods above. Backups are generally kept for up to 90 days and roll off on their normal schedule. We do not restore data from backups into live systems except for disaster recovery; if we ever restore a backup, we apply pending deletions again before the restored systems are used.

7. Your Data Protection Rights

Depending on your location, you may have the following rights:

7.1 Access and Portability

You have the right to request copies of your personal information and to receive your data in a structured, commonly used, and machine-readable format.

7.2 Rectification

You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.

7.3 Erasure

You have the right to request that we erase your personal data, under certain conditions.

7.4 Restriction of Processing

You have the right to request that we restrict the processing of your personal data, under certain conditions.

7.5 Object to Processing

You have the right to object to our processing of your personal data, under certain conditions.

To exercise any of these rights, please contact us at privacy@skillfoundry.dev.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our Service and store certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

Types of Cookies We Use:

• Essential Cookies: Required for the Service to function properly
• Analytics Cookies: Help us understand how users interact with our Service
• Preference Cookies: Remember your settings and preferences
• Marketing Cookies: Track your online activity to help advertisers deliver more relevant advertising

9. International Data Transfers

Your information may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ from those of your jurisdiction. We ensure that appropriate safeguards are in place to protect your personal information.

10. Children's Privacy

Our Service is not intended for use by children under the age of 18. We do not knowingly collect personal information from children under 18. If you become aware that a child has provided us with personal information, please contact us.

11. California Privacy Rights (CCPA)

If you are a California resident, you have specific rights regarding your personal information under the California Consumer Privacy Act (CCPA), including:

• The right to know what personal information we collect, use, and disclose
• The right to delete your personal information
• The right to opt-out of the sale of your personal information (we do not sell personal information)
• The right to non-discrimination for exercising your privacy rights

12. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top. You are advised to review this Privacy Policy periodically for any changes.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

14. EU Representative

For individuals in the European Union, our EU representative is: