Introduction

Welcome to SkillSwap!
We are committed to protecting your privacy, securing your personal information, and being transparent about how we collect, use, and share your data.

This Privacy Policy explains how SkillSwap ("SkillSwap," "we," "our," or "us") processes personal information in connection with your use of our services, including our website, platform, mobile applications, and any related offerings (collectively, the "Services").

SkillSwap is registered in Cyprus and operates globally.
By accessing or using our Services, you acknowledge and agree that you have read and understood this Privacy Policy.

If you have any questions about this Privacy Policy or your privacy rights, please contact us at: legal@skillswap.io

Table of Contents

1. What This Privacy Policy Covers

2. Personal Data We Collect

   • Categories of Personal Data

   • Detailed Examples

3. Categories of Sources of Personal Data

4. Our Business Purposes for Collecting Personal Data

5. How We Share Your Personal Data

   • Categories of Recipients

6. Tracking Tools, Cookies, and Opt-Outs

7. Aggregated and De-Identified Data

8. Data Security and Retention

9. Personal Data of Children

10. Your Privacy Rights

    • California Residents

    • Nevada Residents

    • Other US State Residents

    • European Union (EU) Data Subject Rights

11. International Data Transfers

12. Changes to This Privacy Policy

13. Contact Information

1. What This Privacy Policy Covers

This Privacy Policy applies to all users of SkillSwap Services worldwide, regardless of where you are located.

This policy covers:

• What types of personal information we collect

• How we collect, use, and share that information

• Your rights and choices regarding your personal information

• How we comply with relevant global privacy laws, including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA)

This Privacy Policy does not apply to third-party websites, products, or services that may be linked from our Services.
SkillSwap is not responsible for the privacy practices of those third parties.

2. Personal Data We Collect

SkillSwap collects information that identifies, relates to, describes, or is reasonably capable of being associated with a particular individual ("Personal Data").

We have collected the following categories of Personal Data within the last 12 months:

Categories of Personal Data

Notes:

• Some Personal Data categories overlap.

• We collect Personal Data directly from you, automatically through your use of the Services, and from third parties (e.g., payment providers).

3. Categories of Sources of Personal Data

We collect Personal Data from the following sources:

a. Directly from You

• When you create or update your SkillSwap account

• When you complete your profile, schedule a session, or exchange messages

• When you engage with support, feedback surveys, or forms

b. Automatically via Technology

• When you access or use the Services, through cookies, server logs, analytics tracking tools, and similar technologies

c. Third-Party Sources

• Payment providers (e.g., Stripe, PayPal) providing transaction confirmations

• Analytics providers (e.g., Google Analytics) for user behavior insights

• Social login services (if you choose to log in via Google/Facebook in the future)

Important Notes:

• All Personal Data collected is subject to the protections described in this Privacy Policy.

• Where legally required, we request your consent before collecting certain types of data (e.g., cookies for analytics in the EU).

4. Our Business Purposes for Collecting Personal Data

We use Personal Data for the following commercial and business purposes:

a. Providing and Maintaining the Services

• Creating and managing user accounts

• Matching users for skill exchange sessions

• Processing transactions, subscriptions, and balance top-ups

• Enabling real-time messaging, session scheduling, and profile customization

b. Improving and Developing the Services

• Monitoring platform usage trends and engagement

• Conducting research, testing, and analysis to develop new features

• Personalizing the user experience based on learning interests and behavior

• Improving platform speed, usability, and quality

c. Communications

• Sending confirmations, session reminders, and account updates

• Sending responses to user inquiries and feedback submissions

• Sending marketing communications (where permitted and with opt-out options)

d. Marketing and Advertising

• Measuring effectiveness of promotional campaigns

• Providing recommendations and featured sessions that match user interests

(Note: We do not sell your Personal Data to third parties.)

e. Safety and Security

• Monitoring activity to detect fraud, abuse, or violations of SkillSwap policies

• Investigating suspicious or harmful activity

• Enforcing our Terms of Service and Community Guidelines

f. Legal and Regulatory Compliance

• Complying with legal obligations, regulations, and lawful requests

• Protecting SkillSwap’s legal rights and interests in case of disputes

5. How We Share Your Personal Data

SkillSwap shares Personal Data only when necessary and in accordance with the law.
We disclose Personal Data to the following categories of recipients:

a. Service Providers

• Hosting Providers: To store and operate the platform (e.g., AWS, Vercel)

• Payment Processors: For handling subscriptions and balance transactions (e.g., Stripe)

• Analytics Providers: For usage statistics and insights (e.g., Google Analytics)

• Customer Support Services: For managing inquiries and technical support

• Email Delivery Services: For sending confirmations, notifications, and messages

All service providers are contractually obligated to protect your information and only use it to perform services for SkillSwap.

b. Other Users

• Profile Information Sharing: Limited public profile details (e.g., first name, skills) may be visible to other users as part of the matching and session process.

• Session History: Your learning/teaching interactions may be available to you and the users you exchange with.

c. Business Transfers

• In the event of a merger, acquisition, reorganization, bankruptcy, or sale of SkillSwap assets, your Personal Data may be transferred to the successor organization.

• We will notify you before any Personal Data becomes subject to a different privacy policy.

d. Legal Obligations

• We may disclose Personal Data if required to do so by law, subpoena, or similar legal process.

• We may also disclose data when we believe it is necessary to prevent harm or illegal activities.

6. Tracking Tools, Cookies, and Opt-Outs

SkillSwap uses tracking tools such as cookies, pixels, beacons, and similar technologies to collect information about how users interact with our Services.

Types of Cookies and Tracking Technologies:

Your Cookie Choices:

• You can set your browser to refuse or accept cookies.

• You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on.

• Disabling certain cookies may limit the functionality of the Services.

For detailed cookie information, please review our Cookie Policy.

7. Aggregated and De-Identified Data

We may create aggregated, de-identified, or anonymized data derived from Personal Data.
Aggregated data is not considered Personal Data because it does not identify you or any other individual.

We use aggregated or anonymized data for lawful business purposes, including:

• Analyzing platform usage trends

• Researching how to improve the Services

• Developing new features and functionality

• Sharing insights with partners without identifying individuals

We will not attempt to re-identify de-identified information.

8. Data Security and Retention

Data Security

SkillSwap takes appropriate technical and organizational measures to protect your Personal Data against unauthorized access, alteration, disclosure, or destruction.

Measures include:

• Secure encrypted transmission (SSL/TLS)

• Access controls and authentication

• Secure password hashing

• Regular monitoring for vulnerabilities and threats

While we take reasonable steps to protect your Personal Data, no method of transmission over the internet or method of electronic storage is 100% secure.
We encourage you to protect your login credentials and use strong passwords.

Data Retention

We retain Personal Data only as long as necessary to provide the Services and fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

When we no longer need Personal Data, we securely delete, anonymize, or aggregate the data.

9. Personal Data of Children

SkillSwap is intended for individuals aged 12 and older.

We do not knowingly collect Personal Data from children under 13 without verified parental consent.
If we become aware that a child under 13 has provided Personal Data without parental consent, we will promptly delete such information.

If you believe we might have any information from or about a child under 13, please contact us at legal@skillswap.io.

10. Your Privacy Rights

Depending on your location, you have specific rights regarding your Personal Data.

a. California Residents (CCPA/CPRA Rights)

If you reside in California, you have rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA), including:

• Right to Know: Request details about what categories and specific pieces of Personal Data we collect, use, and share.

• Right to Delete: Request deletion of your Personal Data (subject to certain legal exceptions).

• Right to Correct: Request correction of inaccurate Personal Data.

• Right to Opt-Out of Sale: SkillSwap does not sell Personal Data. If we ever do, you will have the right to opt-out.

• Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights.

You can submit requests by contacting us at legal@skillswap.io.

We will verify your identity before responding to your requests.

b. Nevada Residents

If you are a Nevada resident, you have the right to opt out of the sale of certain Personal Data.
SkillSwap does not sell Personal Data.

For inquiries, contact us at legal@skillswap.io.

c. Other U.S. State Privacy Rights

Residents of Virginia, Colorado, Connecticut, and Utah may also have additional rights regarding access, correction, and deletion of Personal Data.
We honor these rights as applicable.

d. European Union (EU), United Kingdom (UK), and Swiss Residents

If you are located in the EEA, UK, or Switzerland, under the General Data Protection Regulation (GDPR), you have the following rights:

• Right of Access: Request access to your Personal Data.

• Right to Rectification: Request correction of inaccurate or incomplete data.

• Right to Erasure ("Right to be Forgotten"): Request deletion of your Personal Data.

• Right to Restrict Processing: Request to restrict further processing of your Personal Data.

• Right to Data Portability: Receive a copy of your Personal Data in a portable format.

• Right to Object: Object to certain types of processing, such as direct marketing.

• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.

To exercise your rights, contact us at legal@skillswap.io.

If you have concerns, you have the right to lodge a complaint with your local Data Protection Authority.

11. International Data Transfers

SkillSwap is registered in Cyprus, a member of the European Union (EU).

By using SkillSwap Services from outside Cyprus, you acknowledge that your Personal Data may be transferred to, processed, and stored in countries outside your own, including the United States and other locations where SkillSwap’s service providers are located.

We protect Personal Data transferred internationally by:

• Implementing Standard Contractual Clauses (SCCs) approved by the European Commission

• Using other lawful transfer mechanisms approved under GDPR

• Ensuring that service providers provide adequate safeguards

If you have questions about international data transfers, please contact us at legal@skillswap.io.

12. Changes to This Privacy Policy

We may revise this Privacy Policy from time to time.

When we make material changes, we will:

• Update the “Effective Date” at the top of this page

• Post a prominent notice on our website

• Notify you via email if applicable

We encourage you to review this Privacy Policy regularly to stay informed about how we are protecting your information.

13. Contact Information

If you have any questions, requests, or concerns regarding this Privacy Policy or your Personal Data, you may contact us at:

Email: legal@skillswap.io
Postal Address: [Insert SkillSwap Company Address in Cyprus]

We aim to respond to all legitimate requests within 30 days.