Privacy Policy
Last updated: September 2026 • Transparency on what data we collect, why we process it, and how your privacy is protected.
1Information We Collect
SkillFarm collects only the information necessary to provide, personalize, and secure our AI engineering learning ecosystem:
Account Information
Your name, email address, password hash (salted via scrypt), and OAuth profile identifiers when signing in via Google.
Learning Profile & Goals
Target engineering roles, self-reported skills, weekly availability hours, learning styles, and interactive roadmap progression.
Resume & Portfolio Documents
PDF or plaintext resume files uploaded for skill extraction and career roadmap alignment (stored in private Cloudflare R2 buckets).
AI Mentor Conversations
Messages and queries exchanged with our 6 specialist mentors, conversation topics, and synthesized multi-agent engineering drills.
2Why We Collect Data & Data Flow Mapping
We do not sell personal data to advertisers. We process your data exclusively for the specific purposes outlined below:
| Data Category | Specific Purpose |
|---|---|
| Name & Email | Account authentication, password reset dispatch, and verification. |
| Learning Profile | Generating and adapting your multi-week interactive engineering roadmap. |
| Uploaded Resume | Extracting known skills and identifying knowledge gaps for career growth. |
| Mentor Conversations | Streaming real-time mentor responses and multi-agent synthesis drills. |
| Long-Term Memory | Personalizing future mentor interactions so you don't need to re-explain context. |
| Telemetry & IP Data | Enforcing rate limits, preventing API abuse, and securing infrastructure. |
3How AI Models Process Your Data
SkillFarm leverages enterprise LLM APIs (such as Google Gemini, OpenAI, and Anthropic Claude) to generate engineering mentorship:
- When you send a message or request a roadmap, your query and relevant profile context are transmitted securely over HTTPS to the configured AI provider.
- Under our enterprise API agreements, your prompts are processed strictly to generate your response and are not used by the LLM providers to train public foundation models.
- You can view and customize your preferred LLM provider and model directly in your Settings tab.
4Long-Term Personalized Memory (Mem0)
For authenticated users, SkillFarm uses a long-term memory engine (powered by Mem0) to remember important learning milestones, preferred tech stacks, and topics you find challenging.
- Transparency: You can inspect every memory item saved about you in the Settings → Memory & AI tab.
- User Control: You can add custom memory rules or permanently delete any memory record at any time.
5Resume Storage & Cloudflare R2
When you upload a resume to personalize your learning roadmap:
- Resumes are stored in a private, encrypted Cloudflare R2 bucket.
- Files are accessible only through short-lived server-signed URLs.
- Delete Resume at Any Time: Authenticated users can permanently delete their uploaded resume file at any time directly from the Resume section in Settings. Deletion physically purges the document from Cloudflare R2 object storage and deletes the corresponding database record and extracted skill matrix from our primary database.
6Guest Sessions & Ephemeral Storage
SkillFarm provides a temporary Guest Sandbox allowing visitors to explore the platform without creating an account:
- Guest session state is stored in an ephemeral Redis cache with an automatic Time-To-Live (TTL) expiration.
- Guest sessions do not write to long-term memory (Mem0) or the primary PostgreSQL database.
- All guest session data is automatically purged upon session expiration.
7Cookies & Local Storage
We use minimal, essential browser storage mechanisms:
- Session Cookies: Encrypted, HTTP-only JWT cookies (
skillfarm_session) to maintain your secure login state. - Local Storage: Browser
localStorageis used to store UI preferences (such as your chosen LLM provider) and temporary guest session IDs. - We do not employ third-party tracking cookies or cross-site advertising beacons.
8Third-Party Service Providers
We rely on trusted cloud infrastructure partners to deliver SkillFarm:
- Neon Database: Serverless PostgreSQL database for account profiles, roadmaps, and learning data.
- Cloudflare R2: S3-compatible encrypted cloud object storage for user resumes.
- Upstash Redis: Low-latency distributed rate-limiting, temporary cache, and idempotency tracking.
- Mem0: Semantic memory store for personalized mentor memory and engineering context.
- Resend / SMTP: Transactional email service for verification codes, welcome emails, and password resets.
- LLM Providers: Enterprise API integrations with Google Gemini, Groq, Mistral, OpenAI, and Anthropic for roadmap generation, mentor advice, and resume analysis.
- Tavily Search: Real-time technical documentation and discovery search.
9Data Retention Policy
- Account Data: Retained for as long as your account remains active. You can request deletion at any time.
- Uploaded Resumes: Retained until deleted by the user or account termination.
- Guest Sandbox Data: Automatically deleted upon TTL expiration.
- Security & Access Logs: Retained for a rolling 30-day period for abuse detection and security auditing.
10Your Privacy Rights (DPDP Act 2023 & Global Standards)
In accordance with applicable data protection legislation (including India's Digital Personal Data Protection Act, 2023 and international privacy frameworks), you have the right to:
- Access: Request a summary of the personal data SkillFarm processes about you.
- Correction: Update or correct inaccurate profile or skill information.
- Erasure / Deletion: Request complete erasure of your account, memories, resumes, and conversation records.
- Grievance Redressal: Submit inquiries directly to our privacy contact.
11Security Safeguards
SkillFarm implements robust technical and organizational measures to safeguard your information:
- Strict TLS/HTTPS encryption across all data in transit.
- Cryptographic password hashing using salt-strengthened
scryptalgorithms with constant-time verification. - Isolated guest sandboxes preventing cross-user data leakage.
- Sliding-window rate limiting protecting API routes against brute-force and credential stuffing.
12Children's Privacy
SkillFarm is designed for software engineers, university students, and adult learners (minimum age 16+). We do not knowingly collect personal data from children under the age of 16. If we discover that a minor under 16 has provided personal data without parental consent, we will promptly delete the data.
13Privacy Grievance & Contact Officer
For any privacy-related requests, data export, or grievance redressal, please reach out to our team at: