1. Introduction
BuySkills ("we", "our", or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Claude Code plugin marketplace platform (the "Service").
2. Data Controller
For the purposes of applicable data protection laws, the data controller is:
3. Information We Collect
3.1 Information You Provide Directly
- Account Information: Email address, name, and password (hashed) for account creation and authentication.
- Payment Information: Billing details and payment method, processed via Stripe for payment processing and payouts.
- Plugin Information: Plugin name, description, category, pricing, and GitHub repo URL for plugin listing and distribution.
- Newsletter/Waitlist: Email address for marketing communications (with consent).
- Communications: Support inquiries and feedback for customer support.
3.2 Information Collected Automatically
- Usage Data: Pages visited, features used, and interactions for service improvement and analytics.
- Device Information: Browser type, operating system, and device type for technical optimization.
- Log Data: IP address, access times, and referring URLs for security and fraud prevention.
3.3 Information We Do NOT Collect
- Source Code: We do not access, read, clone, or store your plugin source code. We only store the GitHub repository URL you provide.
- Full Credit Card Numbers: Payment card details are processed directly by Stripe; we do not store full card numbers.
- Sensitive Personal Data: We do not intentionally collect special category data (health, biometric, religious beliefs, etc.).
4. Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Contract Performance: Processing necessary to provide the Service, including account management, plugin listing, payment processing, and payouts.
- Consent: Newsletter/waitlist communications, non-essential cookies, and marketing emails.
- Legitimate Interests: Security, fraud prevention, service improvement, analytics, and customer support.
- Legal Obligation: Tax compliance, responding to legal requests, and regulatory requirements.
5. How We Use Your Information
- Service Delivery: Operate and maintain the marketplace platform, process transactions, and facilitate plugin distribution.
- Payment Processing: Process plugin purchases and creator payouts via Stripe.
- Communication: Send transactional emails (purchase confirmations, payout notifications) and respond to support inquiries.
- Analytics: Provide creators with sales analytics, download statistics, and engagement metrics.
- Security: Detect and prevent fraud, abuse, and unauthorized access.
- Improvement: Analyze usage patterns to improve features and user experience.
- Marketing: With your consent, send newsletters and promotional content.
- Legal Compliance: Comply with applicable laws, regulations, and legal processes.
6. Information Sharing and Disclosure
We do not sell your personal information. We may share your information in the following circumstances:
- Buyers: Your plugin name and creator name are visible to buyers. Your email address is not shared.
- Service Providers: Third-party processors who assist in operating our Service (see Section 7).
- Legal Requirements: When required by law, court order, or governmental authority.
- Protection of Rights: To protect the rights, property, or safety of BuySkills, our users, or others.
- Business Transfers: In connection with a merger, acquisition, or sale of assets, with appropriate safeguards.
7. Third-Party Processors
We use third-party service providers who process personal data on our behalf, including:
- Stripe: Payment processing (payment details, transaction data).
- GitHub: OAuth authentication (username, email if authorized).
All third-party processors are bound by data processing agreements that require them to protect your data in accordance with applicable laws.
8. International Data Transfers
Your personal data may be transferred to and processed in countries outside your jurisdiction, including the United States. When we transfer data internationally, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) and adequacy decisions where applicable.
You can request a copy of the safeguards we use by contacting us at support@buyskills.ai.
9. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:
- Account Data: Retained while your account is active and for a reasonable period after closure.
- Transaction Records: Retained as required by legal and tax obligations.
- Log Data: Retained for security purposes.
- Marketing Consent Records: Retained for the duration of consent and as required by law.
- Support Communications: Retained for a reasonable period from last interaction.
10. Your Privacy Rights
Regardless of your location, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate or incomplete data.
- Deletion: Request deletion of your personal data.
- Objection: Object to processing based on legitimate interests or for direct marketing.
- Withdraw Consent: Withdraw consent at any time where processing is based on consent.
EU/UK Users: You also have the right to data portability (receive your data in a structured, machine-readable format) and the right to lodge a complaint with your local data protection authority.
California Users: We do not sell your personal information. You have the right to know what data we collect, request deletion, and non-discrimination for exercising your rights.
To exercise these rights, contact us at support@buyskills.ai. We will respond promptly to all legitimate requests.
11. Cookies and Tracking
We use cookies and similar technologies to enhance your experience:
- Essential Cookies: Required for authentication, security, and session management.
- Functional Cookies: Remember your preferences (such as dark/light mode).
- Analytics Cookies: Help us understand usage and improve the Service.
You can manage your cookie preferences through your browser settings or via our cookie settings link in the footer. Disabling essential cookies may affect Service functionality.
12. Data Security
We implement industry-standard security measures to protect your personal data, including encryption in transit (HTTPS/TLS), encryption at rest, role-based access controls, and PCI DSS compliant payment processing via Stripe.
While we strive to protect your data, no method of transmission over the Internet is 100% secure. In the event of a data breach affecting your personal data, we will notify affected users and relevant authorities as required by applicable law.
13. Children's Privacy
Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you believe we have collected data from a child under 18, please contact us immediately at support@buyskills.ai.
14. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. For significant changes, we may also notify you via email or through the Service.