Privacy Policy

SkillPulse, Inc. (“SkillPulse”, “we”, “us”) provides an AI-powered workforce capability platform that delivers microlearning inside Microsoft Teams, Slack, and Google Chat. This Privacy Policy explains what information we collect, why we collect it, how we use and protect it, and the choices and rights you have. It applies to getskillpulse.com, the SkillPulse product (including our chat-platform bots and web app), and related services.

If your employer or organization provisions your SkillPulse account, that organization is the data controller for most workplace data and this policy describes how we process data on its behalf as a processor, as well as the limited data we process as a controller (for example, website and billing data).

1. Information we collect

Account and profile data

• Name, work email address, job title/role, team and manager relationships, and profile settings.
• Authentication data from your identity provider when your organization enables SSO (SAML/OIDC) or SCIM provisioning. We do not receive or store your identity-provider password.

Chat platform data

• Messages and interactions exchanged with the SkillPulse bot on Microsoft Teams, Slack, and Google Chat — for example your responses to learning nuggets, quiz answers, reflections, and bot commands. We process only conversations that involve the SkillPulse bot; we do not read your other chats or channels.
• Meeting metadata used to trigger post-meeting learning nudges: meeting titles, start/end times, and participant lists, obtained through each platform’s calendar or meeting APIs with your organization’s authorization. We do not record, transcribe, or store meeting audio, video, or content.

Learning data

• Learning interactions: lessons viewed, quiz and assessment responses, completions, spaced-repetition scheduling data, skill-tree progress, streaks, XP, badges, and leaderboard standings.
• Learning records exchanged with your organization’s LMS via interoperability standards (xAPI, cmi5, SCORM, LTI) when your organization enables those connectors.

Billing and website data

• Company name, billing contact, subscription tier, and seat counts. Payment card details are collected and processed directly by Stripe, our payment processor — they never touch SkillPulse servers.
• Standard technical data when you visit our website or use the product: IP address, browser/device type, pages viewed, and diagnostic logs used for security and reliability.

2. How we use information

• Delivering the service: sending learning nuggets, nudges, quizzes, and reminders in your chat tools.
• Personalizing learning: recommending content, sequencing spaced repetition, and building manager-guided skill paths based on your role and progress.
• Meeting-triggered delivery: using meeting metadata solely to time post-meeting learning nudges.
• Analytics for your organization: capability and progress reporting available to authorized admins and managers.
• Operating the business: billing, support, security, fraud prevention, and legal compliance.
• Improving the service: aggregate, de-identified usage analysis.

We do not sell your personal information, and we do not share it with third parties for their advertising purposes.

3. AI features and subprocessors

SkillPulse uses third-party AI providers to power reasoning, content generation, and semantic search features:

• Anthropic (Claude models) — used for reasoning tasks such as generating and validating learning content, adaptive questioning, and summarization.
• Voyage AI — used to generate text embeddings that power semantic search and content recommendations.

Data sent to these providers is limited to what is needed for the specific feature, is transmitted over encrypted connections, and is governed by our agreements with these providers, which prohibit them from using your data to train their models. Organizations with data-residency requirements can contact us about private model endpoints.

Other subprocessors include our cloud infrastructure providers (e.g., Oracle Cloud Infrastructure), Stripe (payments), and Cloudflare (network and security). A current subprocessor list is available on request at [email protected].

4. Sharing of information

• Your organization: admins and managers can see learning progress, assessment outcomes, and capability analytics for the workspaces they manage, according to the roles your organization configures.
• Service providers/subprocessors: as described above, under contracts that restrict use of your data to providing services to us.
• Legal: when required by law, subpoena, or to protect the rights, safety, and security of SkillPulse, our customers, or the public.
• Business transfers: in a merger, acquisition, or asset sale, subject to this policy.

5. Your rights

Depending on your location (including under the GDPR, UK GDPR, and similar laws), you may have the right to:

• Access the personal data we hold about you and receive a portable copy.
• Correct inaccurate data.
• Request deletion of your data.
• Restrict or object to certain processing.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with your local supervisory authority.

If your account is managed by your employer, we may direct your request to your organization, which controls that data. To exercise any right, contact [email protected]. We respond within the timelines required by applicable law.

6. Data retention

• Account and learning data are retained for as long as your organization’s subscription is active and are deleted or returned within 90 days of contract termination, unless your organization requests earlier deletion or a longer export window.
• Chat interaction data used for nudge delivery is retained only as long as needed for the learning features it powers.
• Billing records are retained as required by tax and accounting law.
• Diagnostic logs are retained on a rolling short-term basis for security and reliability.

7. Security

We protect data with encryption in transit (TLS) and at rest, tenant isolation with per-tenant scoping enforced at every service, role-based access control, audit logging with tamper-evident records, secrets management, and least-privilege service credentials. We maintain a security program aligned to industry frameworks, and we test backups and disaster recovery. No system is perfectly secure; if a breach affects your data, we will notify affected parties as required by law.

8. International transfers

We may process data in countries other than where you live. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses and equivalent mechanisms for cross-border transfers.

9. Children

SkillPulse is a workplace product intended for users aged 16 and over. We do not knowingly collect data from children.

10. Changes to this policy

We may update this policy from time to time. Material changes will be announced to organization admins and/or in-product, with the “Last updated” date revised above.

11. Contact us

Questions or requests: [email protected].

See also our Terms of Service and Pricing.