Privacy Policy

This Privacy Policy describes how Skillset Squad Private Limited ("Skillset Squad", "we", "us", "our") processes personal data in connection with:

• Our websites, landing pages, forms, and newsletters (collectively, the "Sites");
• Our professional services (Discord management, social media management, video editing, customer care, and related consulting) delivered to our clients (the "Services");
• Our marketing and sales activities, including giveaways and events.

For most client work we act as a Processor (or "Service Provider/Processor/Contractor" under applicable laws) processing data on behalf of our client (the "Controller/Business"). For our Sites, marketing, hiring, and internal operations, we act as a Controller/Business.

We use:

• Strictly necessary cookies (authentication, security, basic functions).
• Preferences cookies (remember choices like language, forms).
• Analytics cookies (aggregate usage, performance).
• Marketing/attribution cookies (campaign effectiveness).

Where required, we will present a cookie banner and honor your choices. You can also control cookies in your browser. Some features may not function without essential cookies.

Do Not Track: Browser "DNT" signals are not consistently honored by industry; we apply privacy choices via our consent tools instead.

We share personal data only as needed:

• With clients (when we act as Processor, we provide outputs, logs, and reports to the client who is Controller).
• With vendors/sub-processors who help us operate (hosting, storage, ticketing/helpdesk, analytics, email/ESP, project management, creative tools, communications). We require appropriate contracts, confidentiality, and data-protection commitments.
• With professional advisors (legal, tax, audit) under confidentiality.
• With authorities if required by law or to protect rights, safety, and security.
• Business transfers: in a merger, acquisition, or reorganization, data may transfer subject to this Policy's protections.

We maintain a current list of sub-processor categories and will provide details on request. A DPA is available for clients.

We are India-based and serve global clients. Data may be processed in India and other countries where our team or vendors operate. When laws require protections for cross-border transfers (e.g., EU/UK), we use recognized safeguards such as:

• Standard Contractual Clauses (SCCs) and UK addendum/IDTA, as applicable.
• Contractual and technical measures (encryption, access controls, minimization).
• DPDP (India): we comply with Government of India transfer requirements, where applicable.

We implement technical and organizational measures designed to protect personal data, including:

• Encryption in transit (TLS) and at rest where feasible;
• Role-based, least-privilege access; credential vaulting;
• Environment separation; audit trails for privileged actions;
• Vendor due diligence and contractual safeguards;
• Employee confidentiality obligations and training;
• Secure deletion and disposal practices.

No method of transmission or storage is 100% secure. If we learn of a security incident affecting personal data, we will notify the appropriate parties without undue delay and in accordance with applicable law and our contractual commitments.

We retain data only as long as necessary for the purposes stated or as required by law/contract. Typical horizons (unless otherwise agreed with a client):

• Site analytics & logs: 12–26 months (aggregate afterward).
• Sales & support inquiries: up to 24 months from last interaction.
• Contract/billing records: 7 years (or as legally required).
• Service work product (Processor): per client instructions (e.g., project term + defined archival window).
• Giveaway records: per legal/regulatory requirements and fraud prevention needs.

We will anonymize or securely delete data when retention ends.

Depending on your location, you may have rights including:

• Access: know whether we process your data and obtain a copy.
• Correction: rectify inaccurate or incomplete data.
• Deletion: request deletion, subject to legal/contract limits.
• Restriction: limit processing in certain cases.
• Portability: receive data in a portable format (where applicable).
• Object: object to processing (e.g., marketing).
• Withdraw consent: where processing is based on consent.

When operating communities or support for a client:

• We follow the relevant platform's Terms and policies.
• We may access public or permitted content, metadata, and IDs to moderate, organize events, manage tickets, and generate analytics for the client.
• We implement anti-spam/anti-abuse and eligibility checks for giveaways.
• Where required, we provide or assist clients with community notices.

For video editing, we process footage, voice/likeness, and project files solely to deliver agreed outcomes, under confidentiality and secure asset handling.

We may use automation to route tickets, detect spam/abuse, or prioritize tasks. We do not make decisions with legal or similarly significant effects solely by automated processing without human review.

For creative or operational workflows, we may use AI-assisted tools (e.g., transcription, captioning, color correction, summarization) under confidentiality and vendor terms. We do not use your materials to train third-party foundation models unless you or our client expressly authorize it and the vendor contract permits an opt-out/opt-in aligned with your instruction.

Postal address: 8th Floor, Arunachal Bhavan, Sector 30A, Vashi, Navi Mumbai, Maharashtra - 400703

Data Processing Addendum (DPA): Available on request. The DPA incorporates appropriate international transfer mechanisms (e.g., SCCs/UK IDTA) and defines our security, confidentiality, sub-processing, and assistance obligations.

• Emails/Newsletters: Click unsubscribe in any email or reach us at support@skillsetsquad.com.
• Cookies/Tracking: Use the cookie banner (where available) or browser settings to manage preferences.
• Platform settings: Adjust privacy and notification settings on Discord/social platforms you use.
• Consent: Where our processing is based on consent, you can withdraw it at any time; this does not affect prior lawful processing.