Privacy Policy

Welcome to Skillmint AI ("we," "us," or "our"). We take your privacy seriously. This Privacy Policy outlines how we collect, use, disclose, and safeguard your personal data when you use our services, in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the EU GDPR where applicable.

 

1. WHO WE ARE

Skillmint AI is a UK-based company providing AI-powered recruitment and interview solutions for recruiters and hiring managers. Our platform helps screen, analyse, and manage candidates through AI-assisted interviews and candidate profiling.

If you have any questions about this policy or our data practices, you can contact us at:
Email: privacy@skillmint.ai
Address: Skillmint AI, 124, City Road, London, EC1V 2NX, United Kingdom, United Kingdom

 

2. PERSONAL DATA WE COLLECT

We collect and process the following categories of personal data:

Data You Provide Directly:

• Name
   

• Email address
   

• Phone number
   

• Job title and employer (for recruiters/hiring managers)
   

• Application materials (CVs, cover letters)
   

• Interview responses, interview recordings and candidate notes
   

Automatically Collected Data:

• IP address
   

• Device/browser type and settings
   

• Operating system and platform
   

• Usage activity on the platform (pages visited, time spent, etc.)
   

Special Category Data:

We do not actively collect special category data (e.g. health data, ethnicity, religious beliefs). However, in cases where candidates disclose such information voluntarily during interviews, we process it only as required to deliver our services and with appropriate safeguards.

 

3. HOW WE USE YOUR DATA

We process your personal data for the following purposes:

• To create and manage accounts
   

• To analyse and transcribe interviews
   

• To generate candidate summaries and recommendations
   

• To personalise recruiter dashboards and analytics
   

• To send updates or administrative information
   

• To respond to inquiries or provide support
   

• To maintain platform security and prevent fraud
   

• To comply with legal obligations
   

All data processing is done under the lawful bases outlined in Article 6 of the UK GDPR, including:

• Performance of a contract
   

• Legal obligations
   

• Legitimate interests (e.g., product improvement, fraud prevention)
   

• Your consent (only where no other legal basis is applicable)
   

We only rely on consent where we have no other valid legal basis for processing. For most processing related to service provision, our lawful basis will be performance of a contract or our legitimate interests.

Where Skillmint AI acts as a data processor on behalf of a client, we will enter into a separate Data Processing Agreement (DPA) that outlines roles, responsibilities, and data handling obligations in compliance with Article 28 of the UK and EU GDPR.

Skillmint AI acts as a data controller for the purposes of managing platform accounts, usage analytics, and service communication. For candidate data processed on behalf of hiring organisations, Skillmint AI acts as a data processor in accordance with their instructions and applicable law.

We use a range of third-party services to support our platform, including but not limited to:

• OpenAI (GPT-4o, GPT-4o mini, o3 mini, DALL·E) 

• Claude (Anthropic Sonnet 3.5) 

• AWS (EC2, Lambda, API Gateway, S3, DynamoDB, CloudFront with WAF, Amplify, Cognito)

• Google Cloud (Cloud Storage, Vertex AI, Text-to-Speech)

These services operate under strict data protection agreements and do not retain or use personal data to train models.

We may also evaluate third-party tools like ZeroGPT to assist with content originality and anti-cheating detection, subject to their compliance with our privacy standards.

 

3A. HOW OUR AI SYSTEM WORKS

Skillmint AI uses machine learning models to analyse candidate interview responses and generate structured summaries, behavioural insights, and match recommendations. These outputs are designed to assist hiring teams in their decision-making process.

Skillmint does not make fully automated decisions that have legal or similarly significant effects. All final decisions, such as shortlisting, rejections, or hiring outcomes, are made solely by the hiring organisation.

Our role is to provide a consistent, fair, and efficient screening layer based on the information candidates provide. If you would like more detail about how AI-generated outputs are created, you can contact us at privacy@skillmint.ai. For questions about a specific hiring outcome, we recommend contacting the hiring company directly.

 

3B. COMPLIANCE WITH THE EU AI ACT

As a high-risk AI system under the EU Artificial Intelligence Act, Skillmint maintains appropriate safeguards to ensure our technology is used responsibly. This includes human oversight, transparency mechanisms, traceability of system outputs, regular bias testing, and detailed documentation of how our AI systems operate. These measures are in place to support ethical and lawful hiring practices by organisations using our platform.

 

4. DATA SHARING

It is the responsibility of the hiring organisation to ensure the lawful collection of candidate data and to obtain any necessary consents prior to using our platform.

We may share your data:

• With authorised Skillmint AI personnel and trusted service providers (e.g., cloud infrastructure, analytics tools)
   

• With recruiters and hiring managers on the platform when relevant to their hiring processes
   

• With third-party platforms that integrate with Skillmint AI (e.g., Applicant Tracking Systems), where such integration is initiated or approved by the user or their organisation
   

• If legally required (e.g., by regulators, courts, or law enforcement)
   

We do not sell personal data to third parties. All third-party service providers are subject to robust data protection obligations.

 

5. INTERNATIONAL DATA TRANSFERS

Where data is transferred outside the UK or EEA, we ensure appropriate safeguards are in place, such as:

• Adequacy decisions by the UK government or European Commission
   

• Standard Contractual Clauses (SCCs)
   

 

6. DATA RETENTION

We retain personal data only as long as necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law, contractual obligation, or client request. Candidate data is generally retained for at least 12 months, but this period may be extended depending on the nature of the service or client requirements.

Clients and candidates may request deletion of their data at any time, and we will comply unless we are required to retain it for legal, regulatory, or operational reasons.

 

7. YOUR RIGHTS

Under the UK and EU GDPR, you have the right to:

• Access your personal data
   

• Rectify inaccurate or incomplete data
   

• Request erasure of your data ("right to be forgotten")
   

• Restrict or object to processing
   

• Data portability
   

• Withdraw consent at any time
   

• Lodge a complaint with the UK Information Commissioner’s Office (ICO): https://ico.org.uk/make-a-complaint/
   

To exercise your rights, email us at privacy@skillmint.ai.

 

7A. USERS OUTSIDE THE UK AND EU

While this Privacy Policy is primarily intended to address the requirements of the UK GDPR and EU GDPR, we recognise that users outside these regions may also access our services.

If you are located outside the UK or EU, the personal data we collect from you will be processed and stored in accordance with this Privacy Policy and applicable local laws. Depending on your jurisdiction, you may have similar or additional rights under your local data protection laws. We will honour such rights where required by law.

If you have questions about how your data is handled, or if you wish to exercise any privacy rights specific to your jurisdiction, please contact us at privacy@skillmint.ai.

 

8. COOKIES AND TRACKING

We use cookies and tracking technologies to:

• Enable essential site functionality
   

• Understand usage patterns
   

• Improve user experience
   

You can adjust cookie settings via your browser or our cookie preferences manager. See our [Cookie Policy] for more information.

 

9. SECURITY

We’ve implemented a range of technical and organisational measures, such as access controls, encryption, and regular monitoring, to help protect your information from unauthorised access, loss, or misuse. We also work with trusted cloud providers who meet industry security standards. While no system is ever 100% secure, we’re committed to keeping your data safe and will act quickly if a risk arises. We also encourage users to take care when sharing sensitive information online.

 

10. CHILDREN’S PRIVACY

Our services are not directed at individuals under the age of 18. We do not knowingly collect data from minors.

 

11. CHANGES TO THIS POLICY

This Privacy Policy may be updated from time to time to reflect changes in legal requirements, best practices, or our services. When updates are made, the "Last updated" date at the top of this document will be revised. We encourage users to review this policy regularly.

This Privacy Policy is incorporated into and subject to our Terms of Use.

 

12. CONTACT US

For questions or to exercise your data rights:
Email: privacy@skillmint.ai
Address: Skillmint AI, 124, City Road, London, EC1V 2NX, United Kingdom