Legal
Privacy Policy
Last updated: April 16, 2026
Skiltrio (“we”, “our”, “us”) operates the Skiltrio platform at skiltrio.com. This policy explains what data we collect, why we collect it, how we use it, and your rights regarding that data.
1. Data We Collect
Account Information
When you register, we collect your name, email address, and password (stored as a bcrypt hash — we never store your plain-text password). We also store your selected role (HR or Developer), your subscription plan type, and your monthly analysis usage count.
Content You Submit
When you use the analysis tool, we process the job description text and resume documents you submit. This content is sent to our AI processing pipeline and may be temporarily cached to improve response speed (see Section 3).
Payment Information
If you upgrade to a paid plan, payments are processed by Razorpay. We store your Razorpay order ID, payment ID, and subscription status. We do not store your card number, bank details, or any payment credentials — these remain exclusively with Razorpay.
Usage and Analytics
If Google Analytics is enabled on your visit, we collect anonymised usage data including pages visited, session duration, and device type. This data does not include personally identifiable information.
2. How We Use Your Data
- →To authenticate your account and maintain your session using JSON Web Tokens (JWT) via NextAuth.js.
- →To run AI analysis on the job descriptions and resumes you submit, using the Google Gemini API.
- →To enforce your plan's monthly analysis quota and reset it automatically after 30 days.
- →To process subscription payments and verify payment completion via Razorpay webhooks.
- →To send password reset emails when requested (via Resend).
- →To improve the platform based on aggregated, anonymised usage patterns.
3. Third-Party Services
Google Gemini API (Google LLC)
Processes the job description and resume text you submit to generate analysis output. Content sent to Gemini is subject to Google's API data usage policies.
Upstash Redis
Caches analysis results for up to 24 hours to avoid redundant AI processing for identical job descriptions. Cached entries are keyed by a SHA-256 hash of the JD text.
MongoDB Atlas (via Prisma)
Stores your account data, usage counts, and subscription status.
Razorpay
Handles payment processing for Indian Rupee (INR) transactions. We share only the minimum data required to process your order.
Resend
Sends transactional emails such as password reset links. We share your email address for this purpose only.
Google Analytics (optional)
Collects anonymised usage analytics if enabled. You can opt out via your browser's privacy settings or a content blocker.
4. Data Retention
Your account data is retained for as long as your account is active. Analysis cache entries expire after 24 hours. If you delete your account, your personal data is permanently removed from our database within 30 days. Payment records may be retained for longer periods as required by applicable financial regulations.
5. Data Security
Passwords are hashed with bcrypt before storage. Sessions are managed using signed JWTs with a secret key stored as an environment variable. All data is transmitted over HTTPS. Database credentials and API keys are never exposed to the client.
6. Your Rights
Depending on your jurisdiction, you may have the right to access, correct, or delete your personal data. To exercise any of these rights, contact us at privacy@skiltrio.com. We will respond within 30 days.
7. Changes to This Policy
We may update this policy as the platform evolves. Material changes will be communicated via the email address on your account at least 14 days before taking effect. Continued use of the platform after that date constitutes acceptance of the updated policy.
8. Contact
For any privacy-related questions, contact us at privacy@skiltrio.com or through our contact page.