Privacy Policy

Introduction

SkillArca ("we", "our", "us") operates an internal mentorship and engagement platform designed for organizations.

This Privacy Policy explains how we collect, use, process, store, and protect personal data when organizations and their employees use the SkillArca platform ("Service").

By accessing or using SkillArca, you agree to this Privacy Policy.

Scope of This Policy

SkillArca operates as:

• Data Processor for organizational customer data
• Data Controller for data related to our website, marketing, and billing

Organizations using SkillArca remain the Data Controller of their employee data.

Information We Collect

Account Information

• Name
• Work email address
• Job title
• Organization name
• Login credentials

Mentorship Data

• Mentor–mentee relationships
• Session participation records
• Progress tracking information
• Feedback and goal tracking

Communication Data

• Chat messages
• Audio call metadata (not recordings unless explicitly enabled)
• Video call metadata

Technical Data

• IP address
• Device information
• Browser type
• Usage logs
• Access timestamps

Billing Information

• Organization billing details
• GST details
• Transaction records

(Payment processing is handled by third-party providers such as Razorpay. We do not store full card details.)

How We Use Information

We use collected information to:

• Provide and operate the SkillArca platform
• Facilitate mentorship matching
• Monitor engagement metrics
• Improve platform functionality
• Provide customer support
• Ensure security and prevent fraud
• Comply with legal obligations

We do not sell personal data.

Data Storage & Security

We implement appropriate technical and organizational safeguards, including:

• Encrypted data transmission (HTTPS/TLS)
• Role-based access controls
• Secure cloud infrastructure
• Regular security reviews
• Limited internal access to data

However, no system is 100% secure. Users are responsible for safeguarding login credentials.

Data Retention

We retain data:

• For active organizational accounts: as long as the subscription remains active
• For inactive accounts: up to 24 months unless deletion is requested
• For legal compliance: as required by applicable laws
• Analytics data: may be anonymized and retained for service improvement

Organizations may request deletion of employee data at any time.

Data Sharing

We may share data with:

• Authorized employees within the same organization
• Trusted third-party service providers (hosting, analytics, payment processing)
• Legal authorities when required by law

We do not sell or rent personal data.

International Data Transfers

If data is processed outside India, we ensure appropriate safeguards are in place to protect such data in accordance with applicable laws.

User Rights

Subject to applicable law, users may:

• Access their personal data
• Request correction of inaccurate data
• Request deletion of personal data
• Withdraw consent (where applicable)
• Opt out of non-essential communications

Requests may be submitted via the contact details below.

Cookies & Analytics

SkillArca may use cookies and similar technologies to:

• Maintain login sessions
• Improve user experience
• Analyze platform usage

Users may control cookies through browser settings.

Children's Privacy

SkillArca is intended for professional organizational use and is not directed at individuals under 18 years of age.

Governing Law & Jurisdiction

This Privacy Policy shall be governed by and interpreted in accordance with the laws of the Republic of India.

Any disputes arising out of or relating to this Privacy Policy shall be subject to the exclusive jurisdiction of the courts located in Coimbatore, India.

Limitation of Liability

While SkillArca implements appropriate technical and organizational measures to protect personal data, no method of transmission over the internet or electronic storage is completely secure.

SkillArca shall not be liable for unauthorized access, data breaches, or other security incidents beyond our reasonable control, including but not limited to force majeure events, third-party service provider failures, or user negligence.

Users and organizations are responsible for maintaining the confidentiality of their account credentials.