1. Information we handle
We handle information you or your organisation provide when you use Skills Shift. This may include your name, email address, organisation or cohort, account settings, learning preferences, assessment responses, practice transcripts or typed responses, scenario activity, coaching feedback, progress, and support messages.
We also process technical information needed to operate and secure the service, such as authentication and session data, device and browser information, feature usage, diagnostics, and security logs. We use essential cookies and similar technologies for sign-in, preferences, security, and core platform operation. We do not use Google Workspace data for advertising.
If your organisation pays for Skills Shift, we may keep subscription, entitlement, invoice, and usage records. Payment-card details are handled by the payment provider and are not stored in full by Skills Shift.
2. How we use information
We use information to provide and personalise Skills Shift, maintain accounts and access, deliver assessments and practice, generate learner-requested coaching and feedback, show progress, support organisation-level administration and reporting, respond to support requests, prevent abuse, improve reliability, and meet legal obligations.
Private learner content is not made available to an organisation administrator merely because the learner belongs to that organisation. Administrators may receive participation, completion, readiness, progress, entitlement, or aggregated reporting information according to the product workflow. Content is shared for human review only when the learner uses a feature that explicitly requests or permits that review, or where disclosure is required for security or law.
3. Google Calendar data
Connecting Google Calendar is optional. When you choose to connect it, Skills Shift requests read-only access to events on your primary calendar and reads a limited window of upcoming events, normally the next 14 days. Skills Shift does not create, edit, or delete events in your Google Calendar.
For eligible upcoming events, Skills Shift may read the event title, description, location, start and end time, status, recurrence, event type, visibility, transparency, organiser identifier, and attendee list. The attendee list is used to calculate attendee counts and whether attendees are external to your email domain. Skills Shift does not persist attendee names or email addresses, and stores a one-way hash rather than the organiser's raw email address.
Skills Shift excludes events that Google marks as private and ignores cancelled events, birthdays, working-location entries, focus time, out-of-office entries, free-time entries, and routine items that do not provide a useful preparation signal.
4. How we use Google Calendar data
Calendar data is used only to identify useful upcoming meeting-preparation opportunities, present private preparation recommendations to you, keep those recommendations in sync, and let you choose whether to create a Skills Shift practice scenario for a meeting.
Skills Shift stores a minimised calendar record rather than the raw Google API response. That record can include the event identifier and link, title, description, location, start and end time, attendee counts, a short context summary, and the hashed organiser identifier. Calendar-derived recommendations and records are learner-facing and private by default.
5. AI processing and Google data
Skills Shift does not send Google Calendar data to an AI provider simply because you connect or sync your calendar. If you explicitly choose to create a personalised meeting-practice scenario, relevant minimised calendar context and any notes or documents you add may be sent to a configured AI service provider to generate that scenario and its coaching content.
We use service providers under contractual and technical controls to process data only for the Skills Shift feature you request. Skills Shift does not use Google Workspace API data to develop, improve, or train generalised or non-personalised artificial-intelligence or machine-learning models.
Skills Shift's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
6. When information is shared
We may share information with service providers that help us host, secure, monitor, support, and operate Skills Shift, or provide AI processing when you use an AI-enabled feature. They may process information only to provide those services to us and are not permitted to use it for their own advertising.
We may disclose information when required by law, to protect users or the platform, to investigate fraud or security incidents, or as part of a corporate transaction subject to appropriate safeguards. We do not sell personal information or Google user data, and we do not use or transfer Google user data for targeted advertising, credit, lending, or insurance decisions.
7. Security and retention
We use access controls, encryption in transit, and other technical and organisational safeguards appropriate to the information we process. Google OAuth access and refresh tokens are encrypted before storage. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.
Calendar-derived records are assigned an expiry date 30 days after the event ends and are deleted by a scheduled retention process after that date. Any separate Skills Shift scenario you deliberately create from a recommendation is retained as learning content until it is deleted under the applicable account or organisation retention process, or you request deletion. Operational and security records may be retained for longer where reasonably necessary for security, dispute resolution, legal compliance, or recovery from backup.
8. Your choices and deletion requests
You can choose not to connect Google Calendar. You can revoke Skills Shift's Google access at any time from the third-party connections section of your Google Account. Revoking access prevents future Calendar API access, although already-created Skills Shift learning content is not automatically removed.
You may ask us to access, correct, export, restrict, or delete personal information, including a Google Calendar connection and stored calendar-derived data. The rights available to you depend on your location and, for an organisation-managed account, your organisation's role as controller or account administrator. Send requests to contact@skills-shift.com. We may need to verify your identity and coordinate with your organisation before completing a request.
9. Organisations and international processing
Where an employer, school, customer, or other organisation provides your account, that organisation may determine why some personal information is processed and may have its own privacy notice. Skills Shift processes the account according to the organisation's instructions and the product permissions described above.
Skills Shift and its service providers may process information in countries other than the one where you live. Where required, we use appropriate contractual or legal safeguards for international transfers.
10. Updates and contact
We may update this policy as the platform, law, or our data practices change. We will publish the revised policy here and change the last-updated date. If a change materially affects how we use information, we will provide additional notice where required.
For privacy questions or requests, email contact@skills-shift.com.
