This notice explains how Skilltage handles personal data for public visitors, organisation users, and recruitment workflows.
Last updated: 5 November 2026. Skilltage is operated by Skilltage OÜ, Registry code 17544342, Harju maakond, Tallinn, Kesklinna linnaosa, Pärnu mnt 139b, 11317, Estonia.
General, support, legal, and security requests can be sent to info@skilltage.com. Privacy and data requests can be sent to privacy@skilltage.com.
Skilltage is a B2B service for organisation customers. Customer organisations are normally the controllers for candidate and recruitment data they upload or manage in Skilltage. Skilltage acts as processor for those workflows under the Skilltage terms and data processing terms accepted during onboarding.
Skilltage OÜ acts as controller for limited business operations such as website visitors, account administration, support, legal, security, billing, and consent-managed telemetry.
Skilltage is designed for GDPR-aligned B2B recruitment workflows, with customer-as-controller and Skilltage-as-processor roles, human-reviewed AI assistance, candidate notice support, access controls, retention cleanup, deletion paths, and subprocessor transparency.
Customers remain responsible for their lawful recruitment basis, candidate notices, human decision processes, and compliance with the accepted Skilltage data processing terms.
The Skilltage website offers an AI assistant that answers your questions about Skilltage, its plans, pricing and features. The chat tells you that you are talking to an AI system. Nothing is sent until you send your first message.
Your messages and the assistant's replies pass through Skilltage's Cloudflare Workers to OpenAI's API, the same OpenAI service Skilltage uses for its product, with OpenAI response storage turned off. Your browser does not contact OpenAI directly. A Cloudflare Turnstile check runs once when a chat session starts, and a usage counter for that session limits abuse and cost; the counter is deleted when the session expires.
Skilltage keeps each conversation for 3 years so the team can review how the assistant answers and improve it. After the chat session ends, Skilltage's servers email the messages and replies, with a random conversation reference, the language, the page you started from, your country and whether you contacted the team, to an internal Skilltage mailbox, where they are deleted after 3 years. While you chat, the same messages are also sent to PostHog's AI observability service in the EU, which deletes the conversation text after 30 days and keeps usage figures without text, such as message counts and response times. Your name, IP address and cookies are not included, and this happens whether or not you accept analytics cookies. The conversation also stays in your browser tab's session storage until you close the tab or select Clear. We process this on the basis of our legitimate interest in answering your questions and improving the assistant. You can object or ask us to delete a conversation at privacy@skilltage.com.
If you want a reply from the team, you can use the contact form in the chat. Only when you submit it and confirm the acknowledgement does Skilltage receive your name, work email, company, optional message, the chat transcript, and an AI-estimated summary and assessment of your enquiry. The Skilltage team receives this by email and Slack so it can reply. We handle it as a contact request you started, like the demo request form; it is not consent to marketing.
Please do not share candidate data, CVs or other people's personal data in the chat. The assistant is not part of Skilltage's recruitment workflows and cannot access customer workspaces.
An organisation user can connect an AI app, such as Claude or ChatGPT, to Skilltage. The user signs in to Skilltage and approves the app, which can then read and change recruitment data in the user's organisations with that user's permissions. Billing, member administration and file downloads are not available to connected apps.
Data a connected app requests, including candidate data, is sent to that app and its provider. The customer organisation decides whether its users may use such apps. The AI app provider is not a Skilltage subprocessor; its processing is governed by the customer's or user's own agreement with that provider. Skilltage does not receive the user's conversation with the app.
Skilltage records which app made each request in its API request log, kept for one month, and records in its recruitment audit trail that an action was taken through a connected app. Users can see and disconnect the apps they approved under Settings, MCP Access; an access token the app already holds stays valid for up to one hour.
Skilltage structures candidate evidence, matching signals, recommendation bands, and draft next steps for human review. Skilltage does not make final hiring, rejection, shortlist, interview, ranking, or candidate communication decisions.
Recruitment evidence cleanup is anchored to recruitment-case closure. Uploaded CVs, parsed CV payloads, candidate evaluations, review state, and action drafts are cleaned up 6 months after closure unless another required process applies.
AI trace events use a separate 6-month trace retention window. Klaro consent change evidence is retained for 13 months. Recruitment cases, job briefs, and job ad drafts may remain as non-candidate operational history after candidate evidence cleanup.
Case evidence cleanup starts only after a recruitment case is closed. Customers are expected to close completed recruitment cases or review stale open cases monthly.
Skilltage's own business email is kept for limited periods. Contact, demo and access requests and general correspondence are deleted 3 years after the last contact. Correspondence with customers about their contract is kept until 7 years after the contract ends, and accounting records for 7 years after the end of the financial year, as Estonian accounting law requires.
Candidates should normally contact the customer organisation handling the recruitment process, because that organisation is the controller for candidate recruitment data.
Skilltage assists customers with access, correction, deletion, restriction, objection, export, and breach-support requests according to the Skilltage terms and data processing terms accepted during onboarding. Privacy requests about Skilltage's own controller processing can be sent to privacy@skilltage.com.
