Privacy Policy

This policy applies to skillslot.app, the SkillSlot macOS app, license activation services, and purchase and support services. SkillSlot is operated by the SkillSlot team. Privacy questions can be sent to support@skillslot.app.

SkillSlot is local-first. Discovered Skills, Vault files, Loadouts, deployment targets, deployment history, settings, and local caches are generally stored on your Mac. We do not upload your entire Vault to provide basic management and deployment features.

Uninstalling the app may not automatically remove Vault files you chose to keep. You can manage or delete local content through the app and Finder.

When you use Skill summaries or AI Skill Map categorization, SkillSlot sends the content needed to complete the request to the SkillSlot API. Summary requests may include SKILL.md content, the Skill name, identifier, and checksum. Skill Map categorization requests may include Skill names, slugs, and descriptions. Do not store passwords, API keys, or other secrets in Skill files.

When you search or install from the Skill market, requests are sent to the relevant third-party Skill source, such as ClawHub. Those sources process requests under their own privacy policies.

To provide the 7-day trial, prevent repeated trials, and manage device activations, we process a device fingerprint, device name, app version, platform, trial dates, and license status. When a license is activated, validated, or deactivated, we also process the license key, Creem instance ID, activation count, and validity status.

The full license key is stored in an encrypted local cache and validated through the SkillSlot license service and Creem. Do not send a full license key through ordinary email.

Creem acts as the Merchant of Record and handles checkout, payment, tax, invoices, refunds, and license-key delivery. Creem may collect your name, email address, billing address, payment details, and order information. SkillSlot does not receive or store complete card numbers.

SkillSlot receives and stores the minimum order and license metadata needed to fulfil purchases, provide support, and prevent fraud. Creem checkout and the Creem Customer Portal are also governed by Creem’s own privacy notice and Buyer Terms.

The website uses Vercel Analytics and Umami Cloud to understand page visits and basic usage. Hosting, API, and security systems may also process IP addresses, browser and device information, request times, referrers, error information, and security logs. We do not use this data to build cross-site advertising profiles.

We do not sell personal information. We do not disclose personal information except to service providers, when legally required, in connection with a business reorganisation, or with your consent.

Local data remains until you delete it. Order, trial, license, security, and support records are retained for as long as needed to provide the service, prevent fraud, resolve disputes, and meet legal obligations. Privacy-minimised Creem webhook audit records are normally retained for 90 days.

We use measures such as encryption in transit, access controls, and encrypted local license caching, but no system can guarantee absolute security.

You may stop using online features, delete local data, or contact us to request access to, correction of, or deletion of personal information we hold. Certain order, tax, anti-fraud, or dispute records may need to be retained by law. Depending on your location, you may also have rights to restrict processing, data portability, or to complain to a regulator.

We may update this policy. Material changes will be communicated through the website, app, or another reasonable method, and the effective date on this page will be updated.