Privacy Policy

skaills.ai · Version 2026.10.09.2 · Effective 9 October 2026

This policy explains what personal data we collect on skaills.ai, why, who processes it, how long we keep it and what your rights are. It applies to visitors, people who sit tests and evaluations, applicants, people who use the CV, salary, interview and planning tools, members of organizations that use skaills, and anyone who writes to us.

In short: you can use many tools without an account. What you type, upload or answer is stored so the tool can work and so you (or the organization that invited you) can see the result. If an organization invited you, that organization decides about your application; skaills does not. Results and reports have a private link that opens them for anyone who holds it. We use Google Analytics, which you can switch off in «Cookie settings». We do not sell your data. Write to privacy@skaills.ai for anything about your data.

1. Who is responsible

skaills is operated by CEMI Collectively Enhanced Multiple Intelligence, Inc., a Delaware C Corporation (Delaware file no. 10647705, EIN 32-0859414), 7801 NW 37th St, DO80Q56188N, Doral, FL 33195, United States («CEMI», «we», «us»). CEMI is the controller of the data processed on skaills.ai, with two qualifications:

When	Who decides about your data
You use skaills on your own: public tests, CV, salary, interview and planning tools, communities, the talent pool, the contact and AI Staff forms	CEMI, as controller
An organization (an employer or recruiter) invites you, publishes the position you apply to, or registers you as a candidate or employee	That organization is the controller of the data in its process; CEMI processes it on its behalf and on its instructions. The organization's own privacy notice applies too, and you can address your requests to it or to us
An organization contracts skaills with a Dominican invoice	The data of that commercial relationship is handled by COLLECTIVELY ENHANCED MULTIPLE INTELLIGENCE CEMI AI SRL, trade name CEMI.ai, RNC 133-76027-4, Calle Rafael F. Bonnelly No. 17, Evaristo Morales, Santo Domingo, Dominican Republic

Contacts: privacy@skaills.ai (your data), legal@skaills.ai (legal notices), support@skaills.ai (help with the service).

2. What we collect, why, and on what basis

When	What	Why	Basis
You sign in	Sign-in runs through xAId, CEMI's identity service: e-mail and password, or your Google account; your name; the organizations and roles you hold. skaills keeps your user id, e-mail, name, organization memberships and role. Your browser keeps you signed in until you sign out; your role and membership data is held in the browser for up to 4 hours at a time and then refreshed	To give you access to your account and to your organization's data	Performance of the contract (our Terms of Use)
You sit a test or an evaluation	Your name, your e-mail (optional on public tests; required by invitations), your answers, start and finish times, attempt number and language; a random device identifier kept in your browser; a salted one-way hash of your IP address and of its network. The address itself is not saved with your sitting; it is used in memory to limit abuse and, as with any web service, appears in our hosting provider's request logs for a limited time	To score the sitting, keep its timing honest, let you resume it, and detect repeated sittings	Performance of the contract; for the integrity measures, our legitimate interest, and the organization's, in fair assessments
You apply to a published position	Name, e-mail, phone, LinkedIn URL, cover letter and CV file (the last four optional), the version of the policy and terms you accepted and when	To send your application to the organization that published the position	Steps you ask us to take, on the organization's behalf
You answer an assessment invitation	Name, e-mail, phone (if the invitation asks for it), the items you complete, pre-screening answers, the documents you upload, the version of the terms you accepted; if the invitation requires it, or when you resume on another device, a 6-digit code sent to your e-mail (stored only as a hash, valid 10 minutes)	To run the selection process the organization designed	On the organization's behalf; its basis is usually steps before a contract of employment
You join the talent pool	Name, e-mail, phone, LinkedIn, country and city, availability, willingness to relocate, work preferences, experience, sectors, desired role, level, occupations and salary range, summary, CV file, your authorization	To let organizations find you for future positions	Your consent, which you can withdraw at any time
You use the CV tools	Evaluator: the CV is read in memory; we store the result with the name, e-mail, phone, LinkedIn and location found in it, and the job description you gave; we store the CV file only if you ask us to or if you add your CV to the talent pool from there. Translator: processed in memory, not stored. Creator, improver and tailoring (account required): your CV projects are saved in your account, visible only to you; tailoring can fetch a job posting you link to (we keep its address, not its text)	To give you the result and keep it for you when you ask	Performance of the contract; your consent where you ask us to keep the file or to list your CV
You use the salary estimator	Role, country, city, seniority and years of experience (the years are used for the estimate, not kept); your name if you add it; a CV you upload to pre-fill the form is read, not stored. Every estimate is saved with a shareable link	To produce the estimate and let you share it	Performance of the contract
You use the interview simulator, the skill simulators or the planning tools (growth plan, AI readiness, career paths, organizational transformation)	What you enter, the full conversation with the simulator, the AI's review, your first and last name if you give them, and your user id when you are signed in. For a signed-in user, the growth plan also gathers your recent results, interview reviews and latest salary estimate and keeps them in the plan; the organizational transformation plan gathers an organization's aggregate scores and climate survey	To run the tool, give you the review and keep it at its link	Performance of the contract
You take part in a community	Your display name in the public member list; your e-mail, kept apart and visible only to you, the community's moderators and the skaills platform team; your posts and replies, with your name. Communities are public: anyone can read the posts and replies	To run the community	Performance of the contract
Your organization registers you as an employee	What the organization enters: contact details, documents (such as ID, driving licence, diplomas, certificates, CV, photo), onboarding details (such as address, date of birth, nationality, emergency contact), reviews and surveys	To support the organization's HR processes	On the organization's behalf
You write to us (contact or AI Staff form)	Name, e-mail, organization, role, sector or country, your message and, for AI Staff, the role, plan, autonomy, languages and timeline you describe	To answer you and, for AI Staff, to scope the request	Our legitimate interest in answering, or steps before a contract
You browse the site	Pages visited, approximate location, device and browser, through Google Analytics. Analytics is on by default; you can switch it off at any time through «Cookie settings» at the bottom of the page	To understand how the site is used and improve it	Our legitimate interest, to which you can object at any time by switching analytics off
You arrive through a partner link	The partner code in the link (`?ref=`), kept in your browser for one year; we count visits per code and day, without identifying you	To know which partners send visitors	Our legitimate interest
You submit a form, run a tool or arrive through a partner link	A reCAPTCHA v3 score from Google, to tell people from bots	To protect the forms and the tools from abuse	Our legitimate interest in security

What is required: a name and, where shown, an e-mail are needed to sit an evaluation or to apply; without them the organization cannot identify your application. Everything else marked optional is optional.

We do not sell your personal data or share it for advertising, and we do not build advertising profiles.

Automated scoring, not automated decisions. skaills scores tests, compares profiles, and uses AI to review answers, CVs and interviews. Pre-screening can flag an answer that does not meet an organization's requirement; the flag goes to the recruiter, who can override it. skaills does not decide whether you are hired or rejected: the organization does, and our Terms of Use require it to keep a person in that decision. You can ask the organization, or us, how a result was produced and ask for a person to review it.

3. Who can see it

You: your results, at their link; your account data; your saved CV projects.
The organization that invited you, or whose position you applied to: your application, answers, results, documents and pre-screening, limited to its members whose role allows it. Organizations cannot list the records of other organizations.
Anyone who holds a private link. Results, reports, CV evaluations, salary estimates, simulator sessions and plans each have a link with a long random identifier. Anyone who has the link can open it, so share it only with people you choose. These pages cannot be found by listing or searching.
Certificates: if an organization issues you a certificate, anyone with its verification code sees your name, the profile and the scores on it.
Integrations: at an organization's request, CEMI can set up the delivery of each new result (your name, e-mail, the profile and the scores) to that organization's own systems or to those of an integration partner we have an agreement with.
CEMI's authorized team, to run and support the service.

4. Who processes it for us

We use these providers, under contracts that oblige them to protect the data and to use it only for us:

Google (Firebase, Google Cloud): hosting, database, functions, file storage and password-reset e-mails; Google Analytics (until you switch it off); reCAPTCHA; and Gemini, the AI model used by default.
AI providers: the AI features run on the provider set in our configuration — Google Gemini by default; Anthropic (Claude) or OpenAI when configured — and ElevenLabs for the spoken audio of cognitive tests (premium accounts; the audio generated for test items contains no personal data). We send them what the feature needs: CV text, your answers, the conversation with a simulator, the inputs of a tool, your name where a report addresses you. For the CV evaluator we first remove e-mail addresses, phone numbers, Dominican ID numbers and web addresses from the CV text; names and postal addresses are not removed, and the other CV tools send the text as you give it. Our cost ledger records the size, model and cost of each AI request and, where known, your user id or organization, never the text. When Gemini is the provider, the salary estimator asks it to search the web (Google Search), sending the role and the location, not your name; exchange rates come from a currency service that receives no personal data.
Resend: delivery of e-mails (invitations, codes, confirmations). Evaluation invitation e-mails contain a small image that tells the organization when the e-mail was opened.
xAId (CEMI): sign-in and organization memberships.
LinkedIn: where an application form offers to pre-fill from LinkedIn, LinkedIn sends us your name, e-mail and picture to fill the form; we do not store them.

We disclose data to authorities only when the law requires it.

5. International transfers

Our providers process data in the United States and other countries, and our companies are in the United States and the Dominican Republic. We transfer your data there because it is necessary to provide the service you ask for, and with your consent where required. Where the EU-US Data Privacy Framework does not cover a provider, we rely on standard contractual clauses or on the necessity of the transfer for the service.

6. How long we keep it

Today we do not delete data automatically on a schedule. Data stays until you, or the organization concerned, ask for it to be deleted, or until the organization deletes it.
Applications to an organization: each organization sets a retention period (2 years by default) and can delete the applications, CVs and CV results older than it; candidates it keeps in its talent reserve are kept longer.
Consent and acceptance records: kept as proof of what you accepted and when, also after the rest is deleted.
Codes sent by e-mail: valid for 10 minutes and deleted once used; a code that is not used remains only as a hash until it is replaced.
Sign-in: until you sign out; the role data held in your browser is refreshed every 4 hours.
Analytics: under the retention setting of our Google Analytics property.
E-mails you send us: as long as needed to answer and follow up.

We are defining fixed retention periods for every kind of data; when they are in force, this section will list them and the version at the top will change.

7. Your rights

You can ask us to:

access the data we hold about you and know how it is used;
correct it if it is wrong or incomplete;
delete it, or object to a use of it;
switch off analytics at any time, through «Cookie settings», and withdraw any consent you gave (for example, the talent pool);
ask for a person to review a result that concerns you;
and, if you are in the European Union or the United Kingdom, restrict its use and receive it in a portable format.

Write to privacy@skaills.ai from the e-mail you used, and tell us what you need (an application reference such as APP-XXXXXX helps). We answer requests to access your data within 5 business days, and requests to correct or delete it within 10 business days. We may ask you to confirm your identity. When the data belongs to an organization's process, we pass your request to that organization and help it answer within the same time. We keep records the law requires us to keep, and acceptance records, even if you ask us to delete the rest, and we tell you when that is the case.

If you are not satisfied: in the Dominican Republic you may bring a habeas data action before the courts (Constitution, Art. 70; Ley 172-13). In the European Union or the United Kingdom you may complain to your data-protection authority. In the United States you may contact your state attorney general.

8. Cookies and similar technologies

Necessary: your language, your sign-in (kept by Firebase Authentication) and your role data, the device identifier and resume keys that let you continue a sitting, the organization whose branded site you visited, your analytics choice, and short-lived cookies during a LinkedIn pre-fill (10 minutes), kept in your browser's local storage or cookies. They make the site work and need no consent.
Partner code: the skaillsRef cookie and local entry, one year, when you arrive through a partner link.
Analytics (Google Analytics): on by default, so we can understand how the site is used. Advertising storage is always off. You can switch analytics off at any time through «Cookie settings» at the bottom of the page; your choice is kept in this browser and, from then on, Google Analytics is disabled in it.
reCAPTCHA: Google's anti-abuse service loads when you submit a form, run a tool or arrive through a partner link.
Videos: embedded YouTube videos use YouTube's privacy-enhanced mode (youtube-nocookie.com).
Do Not Track: we do not track you across other sites. Because there is no common standard for «Do Not Track» signals, the site does not respond to them; your choice in «Cookie settings» controls analytics.

9. Security

We protect your data with access controls (each organization sees only its own records, and only members whose role allows it), encrypted connections, encryption at rest by our hosting provider, and one-way hashes for codes and network addresses. No system is perfectly secure; if a breach affects your data, we will tell you as the law requires.

10. Children and minors

skaills is a service for adults, professionals and organizations, and it is not directed to children under 13. Public tests do not ask for your age, so we cannot verify it. If you are under 18, use skaills only with the permission of your parent or legal guardian. We do not knowingly collect personal data from children under 13; if we learn that we have, we delete it. A parent or legal guardian who believes a minor has given us data can write to privacy@skaills.ai and we will delete it.

Profiles for the education sector assess the adults who work in schools, not students.

11. Changes

When this policy changes, we update the version and date at the top and, for significant changes, announce it on the site. Where you accepted a version (for example when applying), we record which one.

12. Language

This policy is published in Spanish, English, French and Portuguese. For users in the Dominican Republic the Spanish version prevails; in every other case, the English version prevails.