1. Who is responsible
SkillBigo is the controller of personal data used to operate the platform. In this notice, “SkillBigo”, “we” and “us” refer to the operator of the SkillBigo service.
Questions, complaints and rights requests can be sent to support@skillbigo.com. We may ask for information needed to verify your identity before acting on a request.
2. Data we collect
We collect information you provide, information created through your use of the service and limited technical information needed to operate and protect it.
- Account and profile data: name, email, role, preferences, professional history, skills, goals and profile image.
- Career data: CV files and extracted content, target roles, location preferences, skill gaps, roadmap progress and feedback.
- Mentor data: professional background, services, pricing, availability, verification information and payout-account status.
- Bookings and payments: service, date, price, booking status, cancellation/refund records and Stripe identifiers. SkillBigo does not receive full card numbers.
- Session data: messages, attendance and goals. Transcript segments and AI-generated notes are included only when both participants consent.
- Community and support data: posts, comments, reactions, reports, support messages and moderation records.
- Technical data: IP address, device/browser information, authentication and security events, logs and cookie or local-storage preferences.
3. Why we use data and our lawful bases
We select a lawful basis for each purpose. Where more than one basis may be relevant, the basis depends on the context and data involved.
- Contract: create and manage accounts, deliver requested tools, arrange bookings, process payments, support sessions and provide mentor services.
- Legitimate interests: secure the platform, prevent fraud and abuse, improve performance, understand service use, operate the marketplace and provide relevant non-intrusive recommendations. We balance these interests against your rights.
- Consent: optional analytics technologies and session transcription or AI notes where consent is requested. Consent can be withdrawn without affecting earlier lawful processing.
- Legal obligation: tax and accounting records, regulatory requests, safeguarding, law-enforcement cooperation and compliance with applicable law.
- Legal claims: establish, exercise or defend legal rights where necessary.
4. AI, recommendations and profiling
SkillBigo may use CV content, profile data and stated goals to extract structured information, estimate role fit, identify possible skill gaps, suggest mentors and create draft career actions. These outputs may be incomplete or wrong and should be reviewed by you.
We do not use these tools to make solely automated decisions with legal or similarly significant effects, such as hiring, dismissal, university admission, credit or immigration decisions. You can choose a different mentor or route, correct source information, challenge an output or ask us to delete eligible data.
5. Session transcription and notes
Live session transcription and AI notes are optional. The feature should begin only after both participants provide in-product consent. The resulting transcript, summary, topics, decisions and actions may be visible to session participants.
A participant can withdraw consent for future capture. Where the product provides deletion controls, eligible transcript and note data can be deleted; legal or security records may be retained where necessary. Avoid sharing special-category or highly sensitive information unless it is genuinely needed.
6. Who receives data
We share the minimum information needed with service providers acting for us or providing their own service. Depending on the feature, these can include Supabase for authentication, database and file storage; Stripe for payments and mentor payouts; Daily for live video; Groq or another configured AI provider for CV and session-note processing; Resend for service email; and infrastructure, caching, content or job-data providers.
Mentors receive booking and career context needed to provide the chosen service. Mentors may have their own responsibilities for information you voluntarily share during guidance. We may disclose information to professional advisers, regulators, courts or law enforcement where lawful and necessary. We do not sell personal data.
7. International transfers
Some providers or their support teams may process data outside the United Kingdom. Where UK data-protection law requires safeguards, we use an adequacy regulation, the UK International Data Transfer Agreement or UK Addendum to approved standard contractual clauses, together with appropriate risk assessment and supplementary measures where needed.
Contact us if you want information about the safeguard relevant to a particular transfer.
8. How long we keep data
We keep personal data only for as long as needed for the purpose collected, including security, dispute and legal requirements. Retention depends on account status, feature use and applicable law.
- Account, profile and career data is generally kept while the account is active and then deleted or anonymised after a reasonable closure period, subject to backups and legal needs.
- CV files and extracted information remain available until you replace or delete them, close the account or an applicable retention rule requires removal.
- Booking, payment, payout, tax and accounting records may be kept for up to six years or longer where a legal claim or obligation requires it.
- Session transcripts and AI notes are kept until a participant uses an available deletion control, the account is closed or they are no longer needed, subject to necessary legal and security records.
- Community content remains until deleted, removed or no longer needed; moderation evidence may be retained to protect users and address complaints.
- Security and support logs are kept for a proportionate period based on risk and the issue involved. Backups expire on a controlled cycle.
9. Security
We use access controls, encrypted connections, managed authentication, restricted storage, monitoring and organisational controls designed to protect data. No online service can guarantee absolute security. Keep credentials confidential and tell us promptly if you suspect unauthorised access.
10. Your rights
Subject to legal conditions and exemptions, you may request access, correction, erasure, restriction, portability, or object to processing. You may withdraw consent at any time. You have an absolute right to object to direct marketing and may object to processing based on legitimate interests; we will stop unless we demonstrate compelling grounds or need the data for legal claims.
We normally respond within one month. Complex or multiple requests may take longer where the law allows, and we will tell you why. Rights are not always absolute. For example, we may need to retain transaction records required by law.
11. Children
SkillBigo accounts and paid marketplace services are intended for people aged 18 or over. If you believe a child has created an account or personal data has been provided without appropriate authority, contact us so we can investigate and take proportionate action.
12. Complaints and changes
Please contact support@skillbigo.com first so we can investigate a privacy concern. You can also complain to the Information Commissioner's Office at ico.org.uk or call 0303 123 1113. If you are outside the UK, you may also have a right to contact your local supervisory authority.
We may update this notice as the product, providers or law change. Material changes will be highlighted in the product or sent to account holders where appropriate. The date above shows the current version.