Privacy Policy
At theSkills.ai, we believe transparency is the foundation of trust. This policy explains how we collect, use, and protect your information across our skill marketplace and MCP protocol integration.
Introduction
theSkills.ai ("we," "our," or "us") operates a marketplace for skill assets and provides AI-powered matching services through the Model Context Protocol (MCP). This Privacy Policy applies to our website, services, and all interactions with our platform.
By using theSkills.ai, you agree to the collection and use of information in accordance with this policy. If you disagree with any part of this policy, please do not use our service.
Information We Collect
Account Information
When you create an account, we collect:
- Email address and display name
- Profile avatar and bio
- Authentication credentials (managed securely via Supabase)
Skill Data
For skill maintainers, we collect:
- Skill protocols and syllabus content
- Pricing information and availability
- Expert verification documents and credentials
Transaction Data
When you purchase or book skills:
- Purchase history and asset ownership records
- Booking schedules and consultation history
- Payment information (processed securely via third-party providers)
Usage Data
We automatically collect:
- AI search queries and match requests
- MCP tool invocation logs
- Page views, session duration, and navigation patterns
How We Use Your Information
We use your information for the following purposes:
- Service Delivery: To provide and maintain the skill marketplace and booking system
- AI Matching: To power semantic search and AI-driven skill recommendations using Gemini
- Transaction Processing: To facilitate purchases, bookings, and payments
- Expert Verification: To verify maintainer credentials and manage reputation scores
- Service Improvement: To analyze usage patterns and improve our platform
- Communications: To send important updates about your account and purchases
Information Sharing
We respect your privacy and only share information in specific circumstances:
With Skill Purchasers
When you purchase a skill, the maintainer's public profile and contact information are shared with you. Your information is only shared with maintainers whose services you have purchased.
With Service Providers
We use third-party services to operate our platform:
- • Supabase: Database, authentication, and infrastructure
- • Google Gemini: AI matching and semantic search
- • Payment Processors: Secure transaction handling
Legal Requirements
We may disclose information if required to do so by law or in response to valid legal requests from authorities.
What We Never Do
- • We never sell your personal data to third parties
- • We never rent your data to advertisers
- • We never share your data without your consent (except as required by law)
MCP Protocol & AI Access
theSkills.ai integrates with the Model Context Protocol (MCP), allowing AI agents (such as Claude and Gemini) to search and access skill data. Here's how it works:
- Public Data: Skill titles, descriptions, and maintainer profiles are accessible via MCP for AI-driven discovery
- Protected Data: Full syllabus content and proprietary materials are only accessible to verified purchasers
- Your Control: You can opt-out of MCP discovery at any time from your account settings
- Anonymization: AI training uses anonymized and aggregated data only
Data Security
We implement industry-standard security measures to protect your information:
- Encryption: All data is encrypted in transit (TLS 1.3) and at rest (AES-256)
- Access Control: Row-Level Security (RLS) via Supabase ensures users can only access their own data
- Authentication: Secure auth managed by Supabase with support for 2FA
- Regular Audits: We conduct regular security audits and vulnerability assessments
Your Rights
Under GDPR (Europe), CCPA (California), and other regulations, you have the following rights:
Right to Access
Request a copy of your personal data
Right to Rectification
Correct inaccurate or incomplete data
Right to Erasure
Request deletion of your personal data
Right to Portability
Receive your data in a structured format
To exercise these rights, contact us at privacy@theskills.ai. We will respond within 30 days.
Cookies & Tracking
We use cookies and similar technologies to:
- Essential Cookies: Required for authentication and core functionality
- Analytics Cookies: Help us understand how users interact with our platform
- Preference Cookies: Remember your settings and choices
You can manage cookie preferences through your browser settings.
Children's Privacy
Our service is not intended for children under 18 years of age. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us immediately.
International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with applicable data protection laws.
Changes to This Policy
We may update this privacy policy from time to time. Significant changes will be notified via email and prominent site notices. We recommend reviewing this policy periodically.
Contact Us
If you have questions about this Privacy Policy or your personal data, please contact us:
Email: privacy@theskills.ai
theSkills.ai
San Francisco, CA 94102