Privacy Policy

Cyligence, LLC ("Cyligence," "we," "us," or "our") operates KillerSkills ("the Platform"), an AI fluency platform with a skills marketplace, available at killerskills.ai. This Privacy Policy explains how we collect, use, share, and protect your personal information when you use the Platform.

By using KillerSkills, you agree to the collection and use of information in accordance with this Privacy Policy.

We collect the following types of information:

Account Information

When you register, we collect your name, email address, and avatar image via email sign-in or OAuth providers (GitHub, Google, LinkedIn).

Profile Information

You may provide additional information such as a username, bio, or other profile details.

Payment Information

Payments are processed by Stripe. We do not store your credit card numbers or full payment details. Stripe may collect payment information directly in accordance with their Privacy Policy.

Skills & Content

We store the skills, descriptions, and other content you create and publish on the Platform.

Usage Data

We automatically collect information about how you interact with the Platform, including pages visited, features used, IP address, browser type, device information, and timestamps.

API Keys

If you use the Bring Your Own Key (BYOK) feature, your API keys are encrypted at rest using AES-256-GCM. They are used solely for executing skills on your behalf and are never shared with other users or third parties.

We use the information we collect to:

• Provide, operate, and maintain the Platform.
• Process transactions and manage subscriptions.
• Authenticate your identity and secure your account.
• Communicate with you about your account, updates, and support.
• Improve the Platform, develop new features, and analyze usage patterns.
• Detect and prevent fraud, abuse, and security incidents.
• Comply with legal obligations.

We may share your information with the following parties:

• Stripe: For payment processing.
• OAuth providers (GitHub, Google, LinkedIn): For authentication. We receive only the information you authorize.
• Hosting infrastructure (Railway): For operating and serving the Platform.
• Legal requirements: If required by law, regulation, legal process, or governmental request.

We never sell your personal data to third parties for advertising or marketing purposes.

We implement appropriate security measures, including:

• AES-256-GCM encryption for stored API keys.
• Secure, isolated PostgreSQL databases for each environment.
• HTTPS encryption for all data in transit, enforced via HTTP Strict Transport Security (HSTS).
• Content Security Policy (CSP) headers to prevent cross-site scripting and unauthorized resource loading.
• HTML sanitization on all user-generated content before rendering.
• Rate limiting on public-facing endpoints to prevent abuse.
• Session tokens expire after 7 days and are refreshed every 24 hours.
• Environment-specific secrets and access controls.

While we strive to protect your data, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data.
• Export: Request a portable copy of your data.
• Opt-out: Opt out of non-essential communications.

These rights apply under applicable data protection laws, including the GDPR (for EU/EEA residents) and the CCPA (for California residents). To exercise your rights, contact us at [email protected].

We use session cookies solely for authentication and maintaining your logged-in state. Session cookies expire after 7 days of inactivity. We do not use third-party advertising cookies or tracking pixels.

You can configure your browser to refuse cookies, but this may affect your ability to use certain features of the Platform.

Skills on the Platform may interact with external APIs and third-party services. Cyligence is not responsible for the privacy practices of third-party services accessed through skills. We encourage you to review the privacy policies of any third-party service you interact with.

KillerSkills is not directed at children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will take steps to delete it.

We retain your personal data for as long as your account is active or as needed to provide you with the Platform's services. Upon account deletion, we will delete or anonymize your personal data within a reasonable timeframe, unless retention is required by law or for legitimate business purposes (such as resolving disputes or enforcing our terms).

Your data is processed and stored in the United States. If you are located outside the United States, your information will be transferred to and processed in the US, where data protection laws may differ from those in your jurisdiction. By using the Platform, you consent to this transfer.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Platform and updating the effective date above. We may also notify you via email if you have an account. Your continued use of the Platform after changes are posted constitutes acceptance of the revised policy.

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at [email protected].

Cyligence, LLC
Email: [email protected]