SkillFlow is a curated marketplace for AI skills. It helps businesses discover, test, and deploy production-ready AI automations with trust metrics, interactive playgrounds, and verified creators.

How does SkillFlow's Trust Score work?

SkillFlow's Trust Score is calculated based on success rate, total runs, community ratings, and creator verification status. It provides a transparent metric to help users choose reliable AI skills.

Can I try AI skills before buying?

Yes! SkillFlow offers interactive playgrounds where you can test AI skills with your own data before making a purchase. This ensures you get the right tool for your specific needs.

What categories of AI skills are available?

SkillFlow organizes AI skills by business outcomes: Lead Qualification, Content Generation, Data Analysis, Customer Support, Document Processing, and more. Skills are categorized by what you need to accomplish, not by technology.

How do I become a creator on SkillFlow?

Creators can apply to join SkillFlow by submitting their AI skills for review. Each skill goes through a curation process that evaluates quality, reliability, and usefulness before being listed on the marketplace.

Privacy Policy — SkillFlow

1. Introduction

SkillFlow Technologies ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and protect personal data when you use the SkillFlow platform ("Platform") at skillflow.builders. This policy complies with the Brazilian General Data Protection Law (Lei Geral de Proteção de Dados — LGPD, Law No. 13.709/2018) and the European General Data Protection Regulation (GDPR, Regulation EU 2016/679).

2. Data Controller

SkillFlow Technologies is the data controller responsible for your personal data. For data protection inquiries, contact our Data Protection Officer at: [email protected]

3. Data We Collect

We collect the following categories of personal data:

3.1 Account Data

When you create an account via our OAuth provider, we collect: name, email address, login method, and profile avatar. This data is necessary for account creation and authentication (LGPD legal basis: contract performance; GDPR legal basis: Art. 6(1)(b)).

3.2 Transaction Data

When you make purchases, we store: transaction identifiers (Stripe session ID, payment intent ID), amounts, and timestamps. Payment card details are processed exclusively by Stripe and are never stored on our servers (LGPD legal basis: contract performance; GDPR legal basis: Art. 6(1)(b)).

3.3 Usage Data

We collect data about how you use the Platform: search queries, Skill executions (inputs and outputs), reviews, and browsing patterns. This data is used to improve the Platform and provide personalized recommendations (LGPD legal basis: legitimate interest; GDPR legal basis: Art. 6(1)(f)).

3.4 Waitlist Data

If you join our waitlist, we collect: name, email, company name, category of interest, and use case description (LGPD legal basis: consent; GDPR legal basis: Art. 6(1)(a)).

3.5 Cookies and Tracking

We use essential cookies for authentication and session management, and analytics cookies to understand Platform usage. See our Cookie Policy for details.

4. How We Use Your Data

We use your personal data for the following purposes:

Service delivery: To create and manage your account, process transactions, and execute AI Skills.
Platform improvement: To analyze usage patterns, improve search results, and enhance the user experience.
Communication: To send transactional notifications (purchase confirmations, review alerts, milestone achievements) and, with your consent, marketing communications.
Security: To detect and prevent fraud, abuse, and unauthorized access.
Legal compliance: To comply with applicable laws, regulations, and legal processes.
Creator analytics: To provide Creators with aggregated, anonymized statistics about their Skills' performance.

5. Data Sharing

We share personal data only with the following categories of recipients:

Stripe, Inc.: Payment processing. Stripe acts as an independent data controller for payment data. See Stripe's Privacy Policy.
LLM providers: Skill execution inputs are sent to third-party AI model providers for processing. These providers process data as data processors under our instructions.
Authentication provider: OAuth authentication is handled by our identity provider (Manus).
Analytics services: Aggregated, anonymized usage data for Platform analytics.

We do not sell your personal data to third parties. We do not share your data with advertisers.

6. International Data Transfers

Your data may be processed in servers located outside your country of residence, including in the United States (Stripe, LLM providers) and other jurisdictions. When transferring data internationally, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission and the Brazilian National Data Protection Authority (ANPD).

7. Data Retention

We retain your personal data for the following periods:

Account data: For as long as your account is active, plus 30 days after deletion request.
Transaction data: 5 years from the date of the transaction (legal/tax requirement).
Usage data (search logs, executions): 12 months, then anonymized.
Reviews: For as long as the associated Skill is active on the Platform.
Waitlist data: Until the waitlist purpose is fulfilled or you request deletion.

8. Your Rights

Under the LGPD and GDPR, you have the following rights regarding your personal data:

Access: Request a copy of the personal data we hold about you.
Correction: Request correction of inaccurate or incomplete data.
Deletion: Request deletion of your personal data (subject to legal retention requirements).
Portability: Request your data in a structured, machine-readable format.
Objection: Object to processing based on legitimate interest.
Restriction: Request restriction of processing in certain circumstances.
Withdraw consent: Withdraw previously given consent at any time.

To exercise any of these rights, contact us at [email protected]. We will respond within 15 days (LGPD) or 30 days (GDPR).

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including: encrypted data transmission (TLS/SSL), secure authentication mechanisms, access controls, and regular security reviews. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

10. Children's Privacy

The Platform is not intended for users under 18 years of age. We do not knowingly collect personal data from minors. If we become aware that we have collected data from a minor, we will delete it promptly.

11. Regulatory Authorities

If you believe your data protection rights have been violated, you have the right to file a complaint with:

Brazil: Autoridade Nacional de Proteção de Dados (ANPD) — www.gov.br/anpd
EU: Your local Data Protection Authority (DPA)

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on the Platform. Your continued use of the Platform after changes constitutes acceptance of the updated policy.

13. Contact

For privacy-related questions or to exercise your rights: [email protected]

For general inquiries: [email protected]