SkillCarrot ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit www.skillcarrot.com or use the SkillCarrot learning management platform at app.skillcarrot.com.
1. Information We Collect
Account Information
When you sign up for SkillCarrot, we collect:
- Name and email address
- Organisation name and your role within it
- Password (stored in hashed form — never in plain text)
- Profile information you choose to add
Platform Usage Data
As you or your learners use the platform, we collect:
- Course content you create or import (including Google Sheets connections)
- Learner enrolments, course progress, and completion status
- Quiz attempts, scores, and certificate records
- Notification preferences (email)
Automatically Collected Information
When you visit our website or app, we may automatically collect:
- IP address and general location (country/city)
- Browser type and version
- Device type and operating system
- Pages visited, features used, and time spent
- Referring website
2. How We Use Your Information
We use the information we collect to:
- Provide, operate, and improve the SkillCarrot platform
- Create and manage your account and organisation
- Send transactional emails and WhatsApp notifications (enrolment confirmations, reminders, certificates)
- Generate analytics and reports for admins on learner progress
- Respond to support requests and enquiries
- Send product updates and relevant communications (you can opt out at any time)
- Detect and prevent fraudulent or unauthorised activity
- Comply with applicable legal obligations
3. Information Sharing
We do not sell or rent your personal information to third parties. We may share data only in the following circumstances:
- Infrastructure providers: SkillCarrot is built on Google Firebase (Cloud Firestore, Cloud Storage, Firebase Authentication). Your data is stored on Google's servers under Google's security standards.
- Analytics: We use Google Analytics to understand website and app usage. Data is anonymised where possible.
- Forms: Our contact and sales forms use Tally.so. Information submitted through those forms is processed by Tally.
- Notifications: WhatsApp notifications are an upcoming feature available on Enterprise plans. When enabled, message delivery is handled via a third-party messaging provider. Only the recipient's phone number and the notification content are shared.
- Legal requirements: When required by law, court order, or government regulation.
- Business transfers: In connection with a merger, acquisition, or sale of assets, with appropriate confidentiality protections.
- With your consent: For any other purpose you explicitly agree to.
4. Learner Data
When an organisation uses SkillCarrot to train its employees or members, the organisation (account owner/admin) is the data controller for learner information. SkillCarrot processes that data on the organisation's behalf.
If you are a learner and have questions about how your data is used, please contact the admin of the SkillCarrot account you are enrolled in. If you need SkillCarrot's help, write to us at hello@skillcarrot.com.
5. Data Security
We implement appropriate technical and organisational security measures to protect your data, including:
- HTTPS encryption for all data in transit
- Firebase security rules controlling access to data at rest
- Authentication tokens that expire and are rotated regularly
- Role-based access controls (Owner, Admin, Learner)
No method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
6. Cookies
SkillCarrot and its website use cookies and similar technologies to:
- Keep you signed in to the platform
- Remember your preferences
- Measure website traffic and usage (via Google Analytics)
You can control or disable cookies through your browser settings. Disabling cookies may affect your ability to sign in or use certain features of the platform.
7. Your Rights
Depending on your location, you may have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate information
- Request deletion of your personal information
- Export your data in a portable format
- Opt out of marketing communications at any time
- Withdraw consent where processing is based on consent
To exercise any of these rights, email us at hello@skillcarrot.com. We will respond within 30 days.
8. Data Retention
We retain your account data for as long as your subscription is active. If you cancel your subscription, your data is retained for 90 days to allow for reactivation, after which it is deleted from our systems. Learner progress records and certificates may be retained longer if required by the account admin for compliance purposes.
9. Third-Party Links
Our website and platform may contain links to third-party websites (e.g., blog posts, Google Sheets, YouTube). We are not responsible for the privacy practices or content of those external sites. We encourage you to review their privacy policies before sharing any personal information.
10. Children's Privacy
SkillCarrot is designed for use by organisations and professionals. Our services are not directed at individuals under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. For significant changes, we will notify account owners by email. We encourage you to review this page periodically.
12. Contact Us
If you have any questions about this Privacy Policy or how we handle your data, please contact us:
- Email: hello@skillcarrot.com
- Website: www.skillcarrot.com