SkillDB

Privacy Policy

Last updated: October 5, 2026

1. Information We Collect

SkillDB collects the following information when you use our platform:

  • Account Information: Email address, display name, and profile picture when you sign in with Google.
  • Authenticated API Usage Data: API key identifiers, request timestamps, endpoints accessed, and response times for billing and analytics.
  • Payment Information: Processed securely by Stripe. We do not store credit card numbers.
  • Community Content: Posts, comments, polls, and messages you submit to the community.

Anonymous catalog MCP: The public catalog MCP endpoint does not require an account. We process search keywords and public skill IDs in memory to answer requests; the SkillDB application does not persist or log these request bodies. We keep IP-based request counters in memory for rate limiting, using a 60-second window. Counters can remain in memory beyond that window until a later request triggers cleanup or the service instance stops. Google Cloud hosting collects operational request metadata, including IP addresses, which is retained for 30 days.

2. How We Use Your Information

  • Providing and improving the SkillDB platform
  • Processing payments and managing subscriptions
  • Tracking API usage for billing and rate limiting
  • Communicating service updates and security notices
  • Analyzing usage patterns to improve skill recommendations

3. Third-Party Services

We use the following third-party services:

  • Google Cloud Platform: Authentication (Firebase Auth), data storage (Cloud Firestore), file storage (Cloud Storage), hosting, and operational request logs
  • Stripe: Payment processing and subscription management

4. Data Storage & Security

Your data is stored on Google Cloud Platform infrastructure with encryption at rest and in transit. API keys are hashed before storage. We follow industry-standard security practices.

5. Data Retention

Account data is retained while your account is active. Authenticated API usage logs are retained for 90 days. Google Cloud hosting request metadata for anonymous catalog MCP requests, including IP addresses, is retained for 30 days. Community content is retained indefinitely unless you request deletion.

6. Your Rights

You have the right to:

  • Access your personal data
  • Request deletion of your account and associated data
  • Export your data in a machine-readable format
  • Opt out of non-essential communications

7. Contact

For privacy-related inquiries, contact us at privacy@skilldb.dev or through our contact form.