SkillsFrame

Privacy Policy

Last updated: February 25, 2026

SkillsFrame ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our service.

Service Provider

SkillsFrame is operated by:

1. Information We Collect

Account Information

  • Email address and name (via email/password signup or Google OAuth)

CV and Career Data

  • CV documents you upload
  • Skills and proficiency levels you provide
  • Job descriptions you analyze
  • Tailored CVs generated for you
  • Application pipeline data (status, notes)

Subscription and Payment Data

  • Subscription tier (Free or Pro)
  • Billing history and payment status (managed by Stripe)
  • Usage quotas (CV generations used/remaining)
  • Subscription start/end dates and billing cycle

Usage Data

  • Analytics data (via PostHog) to improve our service
  • Feature usage patterns

2. How We Use AI

SkillsFrame uses artificial intelligence (AI) to provide our core features. In compliance with the EU AI Act, we want to be transparent about how AI is used:

AI-Powered Features

  • CV Text Extraction: AI extracts text and structure from uploaded CV documents
  • Job Analysis: AI analyzes job descriptions to identify requirements, skills, and positioning opportunities
  • Fit Scoring: AI compares your profile against job requirements to estimate fit percentage
  • CV Tailoring: AI generates tailored CV sections based on your profile and the target role
  • Skills Matching: AI identifies skill alignments and gaps between your profile and job requirements

Human Control

All AI-generated content is presented as suggestions. You have full control to:

  • Edit any AI-generated text before using it
  • Regenerate content with different parameters
  • Choose which positioning frame to use
  • Decide whether to use the generated CV or not

AI Limitations

AI-generated fit scores and recommendations are estimates based on text analysis. They should inform, not replace, your judgment. Hiring decisions involve many factors that AI cannot fully assess.

3. How We Use Your Information

  • To provide and improve SkillsFrame services
  • To generate personalized job analyses and CV tailoring
  • To track your application pipeline
  • To communicate service updates
  • To analyze usage patterns and improve features

4. Data Storage and Security

Your data is stored securely using Supabase (hosted in the EU). We implement appropriate security measures including:

  • Encrypted data transmission (HTTPS)
  • Row-level security policies
  • Secure authentication via Google OAuth

5. Data Sharing and Processors

We do not sell your personal data. We share data only with the following processors:

  • Supabase — database and authentication (EU-hosted)
  • Vercel — application hosting (US-based, Standard Contractual Clauses apply)
  • Anthropic — AI text processing for CV tailoring and job analysis (US-based, Standard Contractual Clauses apply)
  • OpenAI — embedding generation for skills matching (US-based, Standard Contractual Clauses apply)
  • Stripe — payment processing and subscription management (US-based, Standard Contractual Clauses apply)
  • Resend — transactional email delivery (US-based, Standard Contractual Clauses apply)
  • PostHog — anonymous usage analytics (EU-hosted, consent required)
  • Legal requirements — if required by applicable law

When using AI features, relevant portions of your data (CV text, job descriptions) are sent to Anthropic and OpenAI for processing. This data is not used to train AI models.

6. International Data Transfers

Some of our processors (Vercel, Anthropic, OpenAI, Stripe, Resend) are based in the United States. Transfers of your personal data to these providers are carried out under Standard Contractual Clauses (SCCs) approved by the European Commission, ensuring an adequate level of protection for your data in accordance with GDPR Article 46.

You may request a copy of the applicable transfer safeguards by contacting us at legal@skillsframe.io.

7. Your Rights (GDPR)

Under GDPR, you have the right to:

  • Access: Request a copy of your data
  • Rectification: Correct inaccurate data
  • Erasure: Request deletion of your data
  • Portability: Receive your data in a portable format
  • Object: Object to certain processing
  • Explanation: Understand how AI-generated recommendations are produced

To exercise these rights, contact us at legal@skillsframe.io

8. Data Retention

We retain your data while your account is active. You can delete your account and associated data at any time by contacting us. Upon deletion, your data will be removed within 30 days, except where retention is required by law.

9. Cookies and Tracking

Essential Cookies (no consent required)

  • Authentication (Supabase) - Maintains your login session
  • Security tokens - Prevents unauthorized access

Analytics Cookies (requires consent)

  • PostHog - Anonymous usage analytics
  • No personal identification
  • Memory-based (cookieless mode)
  • Opt-out available anytime

Your Rights

  • Manage cookie preferences via banner or footer settings
  • Withdraw consent at any time
  • Declining analytics does not affect core functionality

You can change your cookie preferences at any time using the "Cookie Settings" button in our footer.

10. Changes to This Policy

We may update this Privacy Policy. Significant changes will be communicated via email or in-app notification. Continued use after changes constitutes acceptance.

11. Contact

For privacy-related questions or to exercise your rights:

← Back to HomeTerms of Service →