Legal
Privacy policy
How Cloudskill collects, uses, and protects your information.
Who we are
Cloudskill is operated by Tom Palmer (trading as Cloudskill), based in the United Kingdom. References in this policy to "we", "us", and "our" refer to this entity. References to "you" refer to the individual or organisation using Cloudskill.
For privacy-related queries, contact privacy@cloudskill.app.
What data we collect
We collect the following categories of personal data:
- Account data: organisation name, billing email, member emails, names if provided
- Authentication data: API keys (per-user secret tokens used to authenticate Cloudskill requests)
- Skill content: markdown files uploaded to your organisation's catalogue (these may contain text written by your employees)
- Usage data: timestamps of when each personal URL is fetched, daily invocation counts, audit log entries (which admin made which policy change at what time)
- Billing data: handled by Lemon Squeezy as merchant of record. We receive billing events (subscription created, cancelled, renewed) but do not store payment card details
What data we do not collect
We do not collect or have access to the conversations your team members have with Claude. Cloudskill returns a manifest at chat-start; what happens inside the chat is between the user and Anthropic.
We do not use behavioural tracking, advertising cookies, or analytics that profile individual users.
How we use it
We use your data to:
- Provide the Cloudskill service (authenticating requests, returning manifests, hosting your skill catalogue)
- Process billing through our payment provider
- Send transactional emails (welcome emails, billing notifications, security alerts)
- Respond to support enquiries
- Diagnose and fix technical problems
- Comply with legal obligations
We do not sell your data to anyone, ever.
Legal basis (UK / EU GDPR)
Our legal bases for processing personal data are:
- Contract: most processing is necessary to provide the service you've contracted with us
- Legitimate interests: technical operations, security monitoring, fraud prevention
- Legal obligation: tax, financial records, lawful requests from authorities
- Consent: where required (e.g. marketing emails, which we currently don't send)
Sub-processors
We share data with third-party services as necessary to operate the platform. The complete list is on our security page.
Where data is stored
Customer data is stored in the European Union by default. US data residency is available on request. Data may be transferred outside the EU/UK only via mechanisms that comply with applicable data protection law (Standard Contractual Clauses, adequacy decisions, etc.).
How long we keep it
Account and skill data: retained for the lifetime of your subscription. Deleted within 30 days of account deletion (with backups removed within an additional 30 days).
Audit logs: retained for the lifetime of your subscription, deleted alongside other account data on termination.
Billing records: retained for at least seven years for tax compliance, regardless of subscription status.
Your rights
Under UK and EU GDPR, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data (subject to legitimate retention obligations like billing records)
- Request a copy of your data in a portable format
- Object to processing based on legitimate interests
- Withdraw consent where processing is based on consent
- Lodge a complaint with the UK Information Commissioner's Office or your national supervisory authority
To exercise any of these rights, email privacy@cloudskill.app. We respond within 30 days.
Children
Cloudskill is not intended for use by individuals under 18. We do not knowingly collect data from children. If you believe we have collected such data inadvertently, please contact us so we can delete it.
Changes to this policy
We update this policy when our practices change. Material changes are notified by email at least 30 days before they take effect. The "last updated" date below indicates the most recent revision.
Contact
Privacy queries: privacy@cloudskill.app
General: hello@cloudskill.app