Overview
SkillSphere Edu ("we", "us", or "our") operates the SkillSphere Edu platform — a suite of online learning tools, course catalogs, and verified certificate services accessible at https://skillsphere-edu.github.io/learn and associated domains and sub-domains (collectively the "Platform").
This Privacy Policy explains what personal information we collect when you use the Platform, why we collect it, how we store and process it, and what rights you hold. It should be read alongside our Terms & Conditions.
Data We Collect
We collect information in two ways: data you actively provide, and data gathered automatically as you interact with the Platform.
Information you provide
- Account Data — your full name, email address, and password when you register.
- Profile Data — optional biography, profile photo, job title, and social links.
- Payment Data — processed by Razorpay. We may store only the last four digits of your card and a tokenised reference; full card numbers never touch our servers.
- Course Activity — lesson completions, quiz scores, progress percentages, and assignments you submit.
- Communications — messages sent via support, official social media handle, discussion forums, or community features.
Information collected automatically
- Device & browser data — IP address, browser type and version, operating system.
- Usage Data — pages visited, time-on-page, click paths, referrer URLs, and video-play events.
- Cookies & local storage — session tokens, preference flags, and analytics identifiers (see Section 9).
| Data Category | Examples | Legal Basis |
|---|---|---|
| Identity | Name, Email, Account ID | Contract Performance |
| Payment | Tokenised Card Ref, Billing Address | Contract Performance |
| Learning Activity | Progress, Quiz Scores, Submissions | Contract Performance |
| Certificate Record | Credential ID, Issue Date, Course, Score | Legitimate interest & Legal |
| Technical | IP address, device, browser | Legitimate Interest |
| Analytics | Page views, session duration | Consent (cookie banner) |
Certificate Data
SkillSphere Edu issues verified digital certificates upon successful completion of eligible courses. The following information forms part of your certificate record and is treated with the highest level of data integrity:
- Your full legal name as provided at registration
- The title and unique identifier of the completed course
- Date of issue and, where applicable, date of expiry
- Unique Certificate Credential ID (UUID)
- Final assessment score or grade
- Issuing instructor name and SkillSphere digital signature
skillsphere-edu.github.io/learn/verify.html?id=[credential-id]. Anyone with this URL can confirm authenticity, but only the selective fields from the list above are exposed — no email address or payment data is visible.
You may request removal of your certificate from the public verification page by contacting skillsphere.work@gmail.com. Doing so renders the certificate unverifiable, and SkillSphere cannot be held responsible for any employment or accreditation implications.
Cloudflare KV Storage & Infrastructure
SkillSphere Edu stores all certificate records in Cloudflare Workers KV — a globally-distributed, edge-replicated key-value data store operated by Cloudflare, Inc. We use Cloudflare KV for the following reasons:
- Low-latency Global Access — verification requests are served from the edge node closest to the verifier, minimising response time worldwide.
- High Availability & durability — KV data is replicated across Cloudflare's global network, ensuring certificates remain accessible during regional outages.
- Immutability by Design — certificate entries are write-once during normal operation. Modifications require explicit administrative approval and are fully audit-logged.
Data stored in Cloudflare KV
Each KV entry is keyed by the Credential ID and contains only the certificate fields enumerated in Section 3. No passwords, payment details, or sensitive personal information are stored in KV.
Cloudflare as a sub-processor
Cloudflare, Inc. operates as a data processor/sub-processor for Indian customers, ensuring compliance with the Information Technology Act and SPDI Rules via a Data Processing Addendum (DPA). Data stored in KV may be cached across various geographic regions.
How We Use Your Data
We use personal data exclusively for the following purposes:
- Service Delivery — creating and maintaining your account, tracking learning progress, issuing certificates.
- Payment Processing — completing transactions via Razorpay and managing refunds.
- Certificate Issuance & Verification — writing, storing, and serving certificate records via Cloudflare KV.
- Customer Support — responding to enquiries, resolving disputes, and debugging technical issues.
- Platform Improvement — aggregated, anonymised analytics to understand how learners use the Platform.
- Legal Compliance — meeting obligations under applicable law, including responses to lawful requests from regulators and courts.
- Marketing Communications — only where you have given explicit opt-in consent; withdrawable at any time.
We do not use your data for automated decision-making that produces legal or similarly significant effects, nor do we build individual advertising profiles.
Sharing Your Data
We do not sell, rent, or trade personal information. We share data only in these circumstances:
- Cloudflare, Inc. — for KV storage and network infrastructure (see Section 4).
- Razorpay — for payment processing.
- Email Providers — for transactional emails, under a signed DPA.
- Analytics Tools — only anonymised/aggregated data; no personally identifiable information.
- Legal Authorities — where required by law, court order, or to protect the rights of SkillSphere Edu and its users.
- Business Transfer — in the event of a merger, acquisition, or asset sale; you will be notified in advance.
Data Retention
| Data Type | Retention Period | Reason |
|---|---|---|
| Account & Profile Data | Duration of Account + 90 days | Service Delivery |
| Payment Records | 7 years | Tax & Legal Obligation |
| Exam / Test Scores | 120 Days | Dispute Resolution |
| Certificate Records (KV) | Indefinite (see note) | Credential Verifiability |
| Learning Activity Logs | 3 years | Dispute Resolution |
| Support Communications | 2 years | Quality Assurance |
| Analytics Data | 13 months rolling | Platform Improvement |
Your Rights
Depending on your jurisdiction, you may hold some or all of the following rights:
- Access — request a copy of the personal data we hold about you.
- Rectification — request correction of inaccurate data. Correcting your name on a certificate may require reissuance (paid service) and will be logged.
- Erasure — request deletion of your account and personal data, subject to legal retention obligations and the certificate retention policy above.
- Restriction — request that we limit processing while a dispute is resolved.
- Objection — object to processing based on legitimate interests.
- Withdraw Consent — withdraw marketing consent at any time via account settings or by emailing us.
To exercise any right, contact skillsphere.work@gmail.com. We will respond within 30 days.
Cookies & Tracking
We use the following categories of cookies and similar technologies:
- Strictly necessary — session tokens and CSRF protection. Cannot be disabled.
- Functional — language and display preferences.
- Analytics — aggregated page-view data (privacy-preserving; no fingerprinting). Requires consent.
- Marketing — conversion pixels on marketing pages only. Requires consent.
Cookie preferences can be managed via the consent banner on first visit, or any time through Account Settings → Privacy. Disabling analytics or marketing cookies will not affect access to courses or certificates.
Kindly note that currently our main website is hosted on a platform which does not store user information or any related cookies. Our e-Learning Platform may store user information for the purposes as defined in Section 5.
Security
We implement industry-standard technical and organisational measures including:
- TLS 1.3 encryption for all data in transit
- AES-256 encryption for sensitive data at rest
- Role-based access controls limiting internal data access
- Regular penetration testing and vulnerability scanning
- Cloudflare DDoS mitigation and WAF protecting all API endpoints
- Full audit logs for all administrative access to KV certificate records
In the event of a data breach that is likely to result in risk to your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours of becoming aware.
Children's Privacy
The Platform is intended for users aged 18 and over. For users between the ages of 16 and 18, the user must seek his/her Guardian's Approval before proceeding on our platform. We do not knowingly collect personal information from children under 16. If we discover we have inadvertently done so, we will delete it promptly. If you believe a child has provided us personal data, please contact skillsphere.work@gmail.com immediately.
It is not the responsibility of SkillSphere Edu to seek or verify the User's Guardian's Approval (where needed). It will be presumed that the User has already taken Guardian's permission.
Changes to this Policy
We may update this Privacy Policy from time to time. Material changes will be communicated by email to registered users or by a prominent notice on the Platform or Official Social Media Handles at least 14 days before the change takes effect. Continued use of the Platform after the effective date constitutes acceptance of the revised policy.
Contact Us
For all privacy-related queries, rights requests, or concerns:
- Email: skillsphere.work@gmail.com
- Post: SkillSphere Edu, [Registered Address]
- Response time: Acknowledgement within 8-10 business days; resolution within 30 days.