Legal

Privacy Policy

Last updated: February 2026

1. Information We Collect

Account Information

When you create an account, we collect your name, email address, and profile information through our authentication provider (Clerk). You may optionally provide a bio, headline, LinkedIn URL, GitHub URL, skills, and credentials.

Challenge & Submission Data

We collect the content of challenges you create and solutions you submit, including code, text descriptions, and file attachments. This data is necessary to operate the grading and leaderboard features.

AI Workspace Data

Conversations with AI models in the workspace are stored to provide continuity during challenge completion. Message content, model selections, and token usage are recorded.

Usage Data

We automatically collect information about your interactions with the platform, including pages visited, features used, and timestamps. This helps us improve the platform experience.

Payment Information

Payment processing is handled by Stripe. We do not store credit card numbers or bank account details directly. We retain Stripe account IDs and transaction records for payment facilitation.

2. How We Use Your Information

  • Platform operation: To authenticate you, display profiles, process submissions, run AI grading, and manage leaderboards.
  • AI grading: Submitted solutions are sent to AI models (via OpenRouter) for automated evaluation. Only the solution content and grading criteria are shared with AI providers.
  • Payment processing: To facilitate prize pool funding and payouts through Stripe Connect.
  • Communication: To send notifications about challenge updates, grading results, and prize awards.
  • Platform improvement: To analyze usage patterns and improve features, performance, and user experience.
  • Security: To detect and prevent fraud, abuse, and violations of our terms.

3. Data Sharing

Public Information

Your display name, profile photo, badges, challenge participation, scores, and leaderboard rankings are publicly visible. Your bio, headline, and skills are visible on your public profile.

Challenge Creators

Employers who create challenges can view submissions and scores of participants in their challenges.

Third-Party Services

  • Clerk: Authentication and user management.
  • Supabase: Database hosting and file storage.
  • OpenRouter: AI model access for workspace conversations and grading.
  • Stripe: Payment processing for prize pools and payouts.
  • Vercel: Platform hosting and deployment.

We do not sell your personal information to third parties. Data shared with service providers is limited to what is necessary for their function.

4. AI-Specific Privacy Considerations

  • Your code submissions are processed by AI models for grading. These models are accessed through OpenRouter and may be hosted by various AI providers (Anthropic, OpenAI, Google).
  • AI workspace conversations are stored in our database and are not shared beyond the grading process.
  • We do not use your submissions or conversations to train AI models.
  • Grading results and AI-generated feedback are stored and may be visible to challenge creators.

5. Data Retention

  • Account data: Retained as long as your account is active. Deleted upon account deletion request.
  • Submissions & grades: Retained for the lifetime of the challenge and for historical leaderboard accuracy.
  • AI conversations: Retained for 12 months after the last message, then automatically purged.
  • Payment records: Retained for 7 years as required for tax and legal compliance.

6. Your Rights

You have the right to:

  • Access: Request a copy of your personal data.
  • Correction: Update inaccurate information via your profile settings.
  • Deletion: Request deletion of your account and associated data.
  • Portability: Request your data in a machine-readable format.
  • Objection: Object to certain processing of your data.

To exercise these rights, contact us at privacy@skillleader.ai.

7. Security

We implement industry-standard security measures including encrypted data transmission (TLS), secure authentication via Clerk, and role-based access controls on our database. However, no system is perfectly secure, and we cannot guarantee absolute security.

8. Cookies & Tracking

We use essential cookies for authentication and session management. We do not use third-party advertising cookies or tracking pixels. Analytics data is collected in aggregate form.

9. Children's Privacy

SkillLeader.ai is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If we learn that we have collected data from a minor, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of significant changes via email or platform notification. Continued use after changes constitutes acceptance.

11. Contact

For privacy-related questions or requests, contact us at privacy@skillleader.ai.