Skill Atlas

Privacy Policy

Last updated: June 15, 2026

Skill Atlas ("we", "us", the "Service") is an independent project operated by an individual developer. This Privacy Policy explains what information we collect when you use the Service, how we use it, and the choices you have. If anything here is unclear, contact us at support@fluxi.cc.

1. Information we collect

We collect the minimum data required to run the Service:

  • Account information. Email address, display name, and profile image when you sign in (provided through our authentication partner, Clerk).
  • Content you create. The prompts you submit, the AI-generated responses returned to you, and the skill atlases, nodes, notes, and library materials you create or upload while using the Service. This content is stored in your account so you can return to it; deletion rules are in Section 5.
  • Usage data. Aggregated logs of feature usage, credit balance, model selection, and request metadata (timestamps, status, error codes) so we can operate, debug, and bill the Service.
  • Payment data. Purchase and subscription records are processed by Paddle, our payment provider. We do not see or store your full card number; we only receive the transaction outcome, product, amount, and a customer identifier.
  • Cookies. See section 4.

2. How we use your information

  • To provide the core features of the Service (rendering atlases, generating AI responses, tracking credits).
  • To process payments and grant entitlements.
  • To diagnose errors, prevent abuse, and improve reliability.
  • To send essential transactional messages (e.g., receipts, account-security notices). We do not send marketing email without your consent.

3. Third-party processors

To run the Service we share the minimum necessary data with the following sub-processors. Each is bound by their own privacy policy.

  • Authentication provider — sign-in and session management (we currently use Clerk).
  • Database and storage provider — primary database and file storage for your atlases, nodes, and library materials (we currently use Supabase).
  • Paddle — payment processing, subscription billing, and tax handling. Paddle acts as the merchant of record for your transaction and is the entity shown on your card statement.
  • Large-language-model providers— when you generate content, the relevant prompt and the minimum required context are sent to a large-language-model provider that backs the Service. If you have unlocked BYOK (Bring Your Own Key), the request goes out using your own API key, and your chosen provider's billing and data-handling policies govern that request directly.
  • Hosting and infrastructure — standard cloud providers used to serve the website and run background jobs.

We do not sell your personal data and we do not use your content to train any third-party AI model.

4. Cookies

We use a small number of cookies, all strictly necessary for the Service to function. We do not use advertising or cross-site tracking cookies.

  • Authentication cookies set by Clerk to keep you signed in.
  • Preference cookies for your theme, locale, and canvas-style choices.

5. Data retention

We retain your account data for as long as your account is active. If you delete your account, we delete your atlases, nodes, library materials, and personal identifiers within 30 days, except where retention is required for legal, accounting, or fraud-prevention purposes (for example, payment records may be kept for the period required by applicable tax law).

6. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete the personal data we hold about you, and to object to or restrict certain processing. To exercise any of these rights, email support@fluxi.cc. We will respond within a reasonable timeframe and will not discriminate against you for exercising any right.

EU / EEA / UK residents (GDPR / UK GDPR). You additionally have the right to lodge a complaint with your local data-protection authority if you believe we have not handled your data lawfully. The legal bases we rely on are: performance of our contract with you (to deliver the Service), our legitimate interests in operating and securing the Service, and your consent where it is required.

California residents (CCPA / CPRA). You have the right to know what categories of personal information we collect, to delete it, to correct it, and to opt out of the sale or sharing of personal information. We do not sell or share personal information as those terms are defined under the CCPA.

7. Security

We use industry-standard security measures (TLS in transit, encrypted storage at rest through our infrastructure providers, and least-privilege access controls). No system is perfectly secure; please use a strong, unique password and protect your account.

8. Children

The Service is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal data from children.

9. International transfers

Your data may be processed in countries other than the one you live in, including by the sub-processors listed above. By using the Service you consent to these transfers.

10. Changes to this policy

We may update this policy from time to time. When we make material changes we will update the "Last updated" date above and, where appropriate, give notice through the Service.

11. Contact

Questions, complaints, or privacy requests: support@fluxi.cc.