Legal
Privacy Policy
Below is the privacy policy for this website and the eLearning Translator service. Please read it carefully.
Effective Date: March 20, 2026
1. Introduction
This Privacy Policy describes how Skillsail GmbH ("we," "us," or "our") collects, uses, stores, and protects the personal information of business customers and authorized users ("you" or "your") of our eLearning Translator app and related services.
The service is intended for business customers only. For account registration, billing, tax handling, website operations, security, analytics, diagnostics, and direct communications, Skillsail GmbH generally acts as controller. For customer files and other customer content that business customers upload for translation or support-related troubleshooting, we generally act as processor or service provider on the customer's behalf unless otherwise agreed. More details are available on our Data Processing Information page.
We do not use customer content to train general-purpose AI or machine-learning models or to improve the service by default. We process customer content to provide the requested service, to troubleshoot or support issues you ask us to investigate, to maintain security, or where otherwise separately agreed.
2. Contact Details
Full name of legal entity: Skillsail GmbH
Managing Director: Nico Schriever
Email address: hello@skillsail.com
Postal address: Elektrastraße 11, 81925 München, Germany
Commercial Register: Amtsgericht München, HRB 303017
VAT ID: DE455583383
You have the right to lodge a complaint with the relevant data protection authority. We ask that you contact us first at hello@skillsail.com so we can address your concerns directly.
3. The Data We Collect About You
When you use our app, we may collect the following categories of personal data:
- Contact and account information, such as your name, email address, organization or workspace details, and authentication-related identifiers.
- Content you choose to process through the app, such as uploaded files, translated output, glossary entries, and related project data.
- Billing and transaction data, such as purchased credit packages, checkout, invoice, receipt, payment or billing status, and Stripe Managed Payments or Link by Stripe transaction references. We do not store your full payment card details.
- Communications you send to us, such as support requests, feedback, and, if you choose to book a call with us, meeting booking information.
- Technical, usage, and security-related data, such as browser or device information, log data, pages or routes visited, referrer or UTM data where present, service performance information, and sampled diagnostic or session replay data used to operate, secure, troubleshoot, and improve the app.
4. Data Security
We take the security of your data seriously and implement appropriate technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, or alteration. These measures include encryption in transit, access controls, and provider-level security safeguards appropriate to the service. No system can be guaranteed absolutely secure, but protecting customer data is a core operational requirement for us.
5. How We Use Your Data
We use the personal data collected for the following purposes:
- To provide, operate, and improve our services, including processing translation requests and delivering translated content.
- To create, manage, and secure your account and authenticated access to the app.
- To process payments, coordinate transaction-related support, maintain credit balances, and handle billing-related support.
- To respond to support requests, feedback, and other communications you send to us.
- To maintain security, prevent abuse, troubleshoot issues, and monitor service stability.
- To understand product usage, measure traffic and campaign performance, and diagnose errors or UX issues, including through web analytics, monitoring, and sampled session replay.
- To send service-related messages and, where you have given consent, marketing communications.
6. Legal Basis for Processing Data
Under GDPR, we process your personal data based on the following legal grounds:
- Contractual Necessity: To provide you with our services, including account access, translation processing, billing, and support.
- Legitimate Interest: To improve service performance, maintain security, prevent misuse, and operate the app efficiently.
- Legal Obligation: To comply with regulatory, tax, accounting, and other legal requirements.
- Consent: Where you opt in to receive marketing communications or where consent is otherwise required.
Where we process customer content on behalf of a business customer, that customer is responsible for determining the relevant legal basis under applicable law, and we process such data under our contract and documented instructions.
7. International Data Transfers
Depending on the service, workflow, and provider involved, personal data may be stored and processed in the European Union and the United States. Where processing involves transfers outside the European Economic Area (EEA), we take steps to ensure appropriate safeguards are in place, such as EU Standard Contractual Clauses (SCCs) or other lawful transfer mechanisms. You can contact us at hello@skillsail.com to request more information about the safeguards we rely on for international transfers.
8. Third-Party Services
We use carefully selected third-party providers and subprocessors to operate, secure, support, and improve the service. The table below provides more information about our current primary providers as well as limited legacy or backup systems we may continue to rely on for continuity.
| Provider | Purpose | Company | Primary Location |
|---|---|---|---|
| Convex | Database and backend infrastructure | Convex, Inc. | United States |
| Supabase | Legacy and backup database, legacy authentication, and storage | Supabase, Inc. | Germany |
| WorkOS | Authentication and user management | WorkOS, Inc. | United States |
| Stripe | Merchant-of-record payment processing, tax handling, receipts, invoices, and transaction support | Stripe, Inc. | United States |
| Cloudflare | File storage and delivery | Cloudflare, Inc. | Western Europe |
| Cal.com | Meeting scheduling when you choose to book support or demo calls | Cal.com, Inc. | United States |
| Inngest | Legacy and backup workflow orchestration | Inngest, Inc. | United States |
| Loops | Transactional email, support notifications, contact management, and marketing communications where permitted | Astrodon, Inc. (Loops) | United States |
| Vercel | Hosting and website analytics | Vercel Inc. | European Union |
| Sentry | Error monitoring, performance monitoring, diagnostics, and sampled session replay | Functional Software, Inc. (Sentry) | United States |
| DeepL | Translation services | DeepL SE | Germany |
| Azure AI | Translation services | Microsoft Corporation | Germany |
We may update this list from time to time as our infrastructure evolves. We only share personal data with providers where necessary for the relevant service purpose and subject to appropriate contractual and data protection safeguards.
A provider's company location does not necessarily determine where all data is stored or processed. Depending on the relevant service, data may be handled in the European Union and the United States, and we apply appropriate safeguards where processing involves transfers outside the EEA.
If your organization requires an executed data processing agreement, please contact hello@skillsail.com.
9. Data Retention
We retain personal data only for as long as necessary for the purposes described in this Privacy Policy or as required by law. In particular:
- Account data is generally retained while your account remains active.
- Uploaded files, translated output, and related project data are retained for as long as needed to provide the service or until you delete them, request deletion, or your account is removed under our retention practices.
- If you delete your account or request deletion, we will delete or anonymize your personal data unless we are required by applicable law to retain certain information.
- Billing, tax, accounting, and similar records may be retained only where and for as long as required by applicable law.
- We periodically review dormant accounts. Where an account appears inactive, we may contact the email address associated with the account to ask whether you want to keep your data. If we do not receive a response or otherwise determine the account is no longer needed, we may remove the account and associated data after reasonable notice.
- If we reasonably suspect abuse, fraud, security misuse, or other violations of our Terms, we may suspend or remove accounts and associated data without prior notice, subject to any legal obligations to retain specific information.
- You can request deletion of your account and associated personal data at any time, subject to any information we must retain by law.
10. Cookie Usage
We use cookies and similar technologies for necessary service operations, preferences, analytics, and diagnostics. Depending on how you use the service, these technologies may be provided by us or by carefully selected service providers. They are used for purposes such as:
- Maintaining your authenticated session and secure authentication
- Remembering basic settings or preferences required for the service to function, such as UI state and similar product preferences
- Measuring website and product usage, page performance, referrers, campaign attribution, and related traffic data through tools such as Vercel Analytics
- Diagnosing errors, monitoring performance, and capturing sampled session replay or similar troubleshooting data through tools such as Sentry
We do not use advertising cookies or third-party ad-targeting technologies on the public marketing site.
11. Your Data Protection Rights
Under applicable data protection law, including GDPR, you have the following rights regarding your personal data:
- Right of Access: You can request information about the personal data we hold about you.
- Right to Rectification: You can ask us to correct inaccurate or incomplete personal data.
- Right to Erasure ("Right to be Forgotten"): You can request deletion of your personal data, subject to certain conditions.
- Right to Restrict Processing: You can request that we limit the processing of your personal data in specific circumstances.
- Right to Object: You can object to our processing of your personal data where we rely on legitimate interests, including the right to object at any time to direct marketing.
- Right to Data Portability: You can request a copy of your personal data in a commonly used format or ask us to transfer it to another provider where applicable.
- Right to Withdraw Consent: Where we rely on consent, you can withdraw that consent at any time for future processing.
To exercise any of these rights, please contact us at hello@skillsail.com. We will respond to legitimate requests within one month unless the request is particularly complex, in which case we may extend this period as permitted by law and inform you accordingly.
12. Data Breach Notification
Where required by applicable law, we will notify affected users and competent authorities without undue delay after becoming aware of a personal data breach.
13. Age Restrictions
Our service is intended for business customers and authorized representatives and is not directed to children.
14. Withdrawing Consent and Unsubscribing
You can withdraw your consent for marketing communications at any time through the following methods:
- Click the "Unsubscribe" link provided in any marketing email you receive from us.
- Email us at hello@skillsail.com with your request to unsubscribe.
Please note that even if you opt out of marketing communications, we may still send important service-related messages, such as security notifications, account notices, and billing updates, where necessary.
If you object to direct marketing or withdraw your consent, we will stop sending marketing communications to you going forward.
15. Jurisdiction and Applicable Law
Skillsail GmbH is established in Germany and processes personal data in accordance with GDPR and other applicable data protection laws. This Privacy Policy is interpreted under the laws of Germany to the extent permitted by applicable mandatory law. The competent court for disputes relating to this Privacy Policy is Munich, Germany, unless mandatory consumer protection law provides otherwise.