Privacy Policy

1. Introduction

This Privacy Policy explains how SkillX collects, uses, discloses and protects your personal data when you use our Service. We are committed to handling your data responsibly and in line with applicable data protection laws, including Malaysia's Personal Data Protection Act 2010 (PDPA).

2. Information We Collect

• Account data: name, email address and password (stored hashed).
• Business inputs: the project and business details you enter to run skills.
• Usage data: skills run, results generated, timestamps and basic logs.
• Payment data: processed by third-party payment gateways; we do not store full card numbers.

3. How We Use Your Information

• To provide, operate and improve the Service and generate your requested outputs.
• To manage your account, subscription and billing.
• To provide support and communicate important updates.
• To maintain security and prevent abuse.

4. AI Processing & Third Parties

To generate outputs, the business inputs you submit are sent to third-party AI model providers (such as OpenAI, Anthropic or Google) for processing. We share only what is necessary to fulfil your request. We do not sell your personal data.

5. Cookies & Sessions

We use strictly necessary cookies to keep you logged in and secure your session (including CSRF protection). We do not use them for third-party advertising.

6. Data Sharing & Disclosure

We may disclose data to service providers acting on our behalf (hosting, AI, payments), or when required by law. We require such providers to protect your data.

7. Data Retention

We retain your account and project data for as long as your account is active or as needed to provide the Service, comply with legal obligations and resolve disputes. You may request deletion as described below.

8. Security

We use reasonable technical and organisational measures — including password hashing, access controls and encrypted connections — to protect your data. No method of transmission or storage is completely secure.

9. Your Rights

Subject to applicable law, you may request access to, correction of, or deletion of your personal data, and may withdraw consent for certain processing. To exercise these rights, contact us using the details below.

10. International Transfers

Because we use global AI and hosting providers, your data may be processed outside your country. Where this occurs, we take steps to ensure an adequate level of protection.

11. Children

The Service is not directed to individuals under 18, and we do not knowingly collect their personal data.

12. Changes to This Policy

We may update this Policy from time to time. The "Last updated" date reflects the latest revision.

13. Contact

For privacy questions or requests, contact us at support@skillx.my.

---

This document is a general template provided for convenience and does not constitute legal advice. Please have it reviewed by a qualified lawyer and adapt it to your business before relying on it.