Who is responsible for your data
Skillkin's operator and personal data controller is Codebridge Technology, Inc., 8 The Green, Suite 12848, Dover, DE 19901, United States. For privacy questions and data requests, contact contact@codebridge.tech. This policy applies to skillk.in; linked third-party sites and services have their own policies.
Data we process
Account data: email, language, invitation or registration-source label, action timestamps, sign-in and session data. IP addresses are processed to prevent abuse; rate limits store hashed IP and email identifiers. Network providers may also process technical connection data.
Content you provide: name, company, experience, skills, languages, portfolio and links, availability, rate, location, time zone and contact details; requests, budgets, proposals, messages, invitations, agreements, deliveries, revisions, reviews and support reports. Some fields are optional.
Operational data: moderation statuses, reviewer notes, change history, notifications, saved profiles and searches, security logs and email-send metadata. Skillkin does not automatically import resumes or HR interview recordings: invited professionals create their own profiles.
Public and restricted information
Published requests, approved public profiles, portfolios and completed-work reviews are visible to visitors and may be indexed by search engines. Your account email and separate contact field are excluded from the public profile. Information you put in a public description, including contact details, can be seen by others.
Hiding your profile from the directory removes it from talent discovery, but does not block access through a known link or a previously saved profile. Contact us to request removal or restriction of that data.
Proposals, invitations, conversations and work history are limited by the relevant participants' access permissions. The platform owner can access account and profile data, registration sources, requests including drafts, and proposals to operate the service. Reporting a message shares that message with the owner, not the entire conversation through the report interface. Messages are not end-to-end encrypted; an authorized operator may access stored data for maintenance, security and lawful requests.
Purposes and legal bases
We use data to sign you in, maintain your profile, publish at your request, enable directory discovery, proposals and conversations, and keep work records. Where law requires a legal basis, this processing is necessary to provide the service you request and perform our agreement with you.
Moderation, fraud prevention, account protection, diagnostics and support serve our legitimate interests in operating a safe platform, balanced against users' rights. Legal obligations provide a basis for processing required by law. Where processing requires consent, we request it separately; withdrawal does not affect the lawfulness of earlier processing.
An account requires an email address and necessary sign-in data. Required profile or request fields are needed to use those features. We do not use platform data for automated AI candidate selection or decisions with legal or similarly significant effects: moderation is performed by a person.
Providers and data sharing
DigitalOcean provides server hosting and backups; the main server is in Frankfurt, Germany. Twilio SendGrid sends sign-in codes and receives the recipient's email, the code and delivery metadata. Open and click tracking is disabled for these emails. We do not sell personal data or use advertising trackers on Skillkin.
Codebridge is based in the United States. Operator access and provider processing may take place outside your country, including in the US; hosting in Germany does not mean all processing stays in the EU. Contact us for information about international transfer mechanisms applicable to your request; the published provider terms linked below describe the Data Privacy Framework and, where applicable, EU Standard Contractual Clauses (SCCs).
Participants receive information you share through platform features and are independently responsible for further processing in their projects and hiring. We may disclose data where required by law or necessary to protect rights and safety, within applicable law.
Retention
A sign-in code and its challenge are valid for 10 minutes; a session lasts 7 days. Expired sign-in, session and rate-limit records are removed by daily cleanup; expiry ends authorization regardless of cleanup timing.
Profiles, requests, proposals, messages, work and moderation history are retained to operate accounts, maintain agreements, handle reports and protect rights. There is currently no single automatic deletion period for this data. On a deletion request, we assess what remains necessary for ongoing obligations, disputes or legal requirements and explain any limits. Retention depends on the purpose, account status and relevant obligations.
Routine database backups are configured for 14-day retention, and provider server backups for up to 28 days. Separate copies needed for recovery or incident investigation may be retained longer. Removal from the active database does not mean immediate removal from every backup. Copies held by recipients and search engines are outside our direct control.
Your controls and rights
You can edit your profile, hide it from the directory, withdraw requests and proposals before selection where their status allows, and remove saved searches and profiles. Self-service account deletion and a full data export are not yet available in the interface; request them by email. We may ask you to verify your identity to locate your data and protect your account.
Depending on applicable law, you may have rights to access, correction, deletion, restriction, portability, objection to legitimate-interest processing and withdrawal of consent. We handle requests within applicable statutory deadlines and explain why a request cannot be fully fulfilled. You may also complain to a competent data protection authority, including where you live or work where the law provides this right.
Security and cookies
We use HTTPS, access controls, one-time codes, protected cookies and backups. These reduce risk but cannot guarantee absolute security. Do not share passwords, sign-in codes or service keys through profiles or messages. The site uses sign-in cookies and a cookie to remember your chosen language; see the Cookies page for details.
Age and updates
The service is intended for adults aged 18 or older. Contact us if you believe a child has provided us with personal data. The current policy and update date are available here; material changes in processing will be announced on the platform.
Need a hand?
Contact the Codebridge team about the platform, your data or moderation.
contact@codebridge.tech