● LEGAL

Privacy Policy

Last updated: March 26, 2026

1. Information We Collect

When you create an account via GitHub OAuth, we collect:

• GitHub profile information — your username, display name, avatar URL, and email address, provided through Clerk
• Usage data — pages visited, packages viewed, downloads, searches, and other interactions with the platform
• Device information — browser type, operating system, and IP address collected automatically via server logs

2. How We Use Information

We use collected information to:

• Create and manage your Skill Vault account
• Operate and improve the platform
• Process transactions and payouts for published packages
• Communicate with you about your account, purchases, or policy changes
• Enforce our Terms of Service and prevent abuse

3. Payment Information

All payment processing is handled by Stripe. We do not store credit card numbers, bank account details, or other sensitive financial information on our servers. Stripe processes and secures all payment data in accordance with PCI DSS standards.

4. Data Sharing

We share your data only with the following third-party services, and only as necessary to operate the platform:

• Clerk — authentication and session management (receives your GitHub profile data)
• Stripe — payment processing (receives your email and transaction details for purchases and payouts)
• Cloudflare — infrastructure provider (hosts our application, database, and file storage at the edge)

We do not sell your personal information to third parties. We may disclose information if required by law or to protect the rights, safety, or property of White Elk LLC or others.

5. Cookies

Skill Vault uses only essential cookies required for authentication and session management, provided by Clerk. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

6. Data Retention

We retain your account data and published content for as long as your account is active. If you request account deletion, we will remove your personal data within 30 days, except where retention is required by law or necessary to resolve disputes. Anonymized usage data may be retained indefinitely.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete personal data
• Delete your account and associated personal data
• Export your data in a portable format

To exercise any of these rights, email us at contact@skillvault.md. We will respond within 30 days.

8. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA): the right to know what personal information we collect and how it is used, the right to delete your personal information, the right to opt out of the sale of personal information — we do not sell personal information to third parties, and the right to non-discrimination for exercising your CCPA rights. To exercise these rights, email contact@skillvault.md or visit your account settings. We will verify your identity before processing requests. We will respond within 45 days.

9. Children's Privacy

Skill Vault is not intended for use by anyone under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will take steps to delete it promptly.

10. International Data Transfers

Skill Vault is operated from the United States. If you access the platform from outside the US, your information may be transferred to and processed in the United States, where data protection laws may differ from those in your country. By using Skill Vault, you consent to this transfer.

11. Data Breach Notification

In the event of a data breach that affects your personal information, we will notify affected users by email within 72 hours of becoming aware of the breach, and we will notify relevant authorities as required by applicable law.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by posting a prominent notice on the platform. Your continued use of Skill Vault after changes take effect constitutes acceptance of the updated policy.

13. Contact

If you have questions about this Privacy Policy, contact us at contact@skillvault.md.

White Elk LLC
Sacramento, CA, USA