Privacy Policy

1. Introduction

This Privacy Policy explains how SkillsBridge ("we," "us," "our") collects, uses, stores, and protects personal data belonging to organizations, their team members, and their students (collectively, "users") who use our platform.

By registering for or using SkillsBridge, you agree to the terms of this Privacy Policy. If you do not agree, please do not use the platform.

2. Who This Policy Applies To

This policy applies to the following users:

• Organization Admins — the primary account holders who register an organization on SkillsBridge
• Invited Team Members — Course Admins, Module Admins, and Facilitators added to an organization
• Students — learners invited or enrolled by an organization

Each organization using SkillsBridge acts as the data controller for its own students' data — meaning the organization decides what student data to collect and why. SkillsBridge acts as the data processor, storing and processing that data on the organization's behalf, in line with a Data Processing Agreement (see Section 9).

3. What Data We Collect

From Organization Admins & Team Members

• Full name, email address, phone number (optional)
• Role within the organization
• Organization name, type, and branding details (logo, colors)
• Login credentials (passwords are stored securely, hashed — never in plain text)

From Students

• Full name and email address
• Course enrollment and progress data
• Quiz and assessment results
• Certificates earned
• Live session attendance records

Payment Information

We do not directly store full card details. Payments are processed through our third-party payment providers (Paystack/Flutterwave), who handle and secure this data under their own compliance standards.

Automatically Collected Data

Login timestamps, device/browser type, and general usage data (e.g., which features are used), for the purpose of improving the platform and diagnosing issues.

4. How We Use This Data

We use collected data to:

• Create and manage organization, team, and student accounts
• Deliver core platform features (courses, assessments, certificates, live sessions)
• Process payments and manage subscriptions, including usage-based billing where applicable
• Send account-related communications (welcome emails, trial reminders, subscription confirmations, invoices)
• Improve platform performance and troubleshoot issues
• Comply with legal obligations where applicable

5. Legal Basis for Processing

We process personal data based on:

• Consent — given at registration and at first login for invited users
• Contractual necessity — to provide the services an organization has subscribed to
• Legitimate interest — for platform security, fraud prevention, and service improvement

6. Who We Share Data With

We share data only where necessary to operate the platform:

• Payment processors (Paystack/Flutterwave) — to process subscription and course payments
• Hosting/infrastructure providers — to store and serve platform data securely
• The organization itself — student data is visible to the organization that enrolled them, since the organization is the data controller for its own students

7. Data Retention

• Active organizations: data is retained for as long as the organization maintains an active subscription
• Paused organizations (trial expired without converting, or subscription lapsed): data is retained for 12 months to allow reactivation. If the organization does not reactivate within this period, data may be scheduled for deletion
• Cancelled organizations: upon a formal cancellation request, data will be deleted within 30 days, except where we're required to retain it for legal or financial record-keeping purposes (e.g., transaction and invoice records)
• Students who complete a course: certificate and completion records may be retained longer than active enrollment data, since certificates often need to remain verifiable long-term

8. Data Security

We take reasonable technical and organizational measures to protect personal data, including:

• Encrypted data transmission (HTTPS/TLS)
• Hashed and salted password storage — we never store passwords in plain text
• Role-based access controls, so users only see data relevant to their role (e.g., a Facilitator cannot see another course's students)
• Multi-tenant data isolation, ensuring one organization cannot access another organization's data
• Regular review of third-party providers (hosting, payment processors) for their own security compliance

9. Data Processing Agreement (Organizations)

Because organizations act as data controllers for their own students, each organization subscribing to SkillsBridge enters into a Data Processing Agreement (DPA) with us, covering:

• The scope of student data SkillsBridge processes on the organization's behalf
• Confirmation that SkillsBridge will only process data per the organization's instructions
• Security obligations and breach notification commitments
• What happens to student data if the organization's subscription ends

10. Children's Data

Some organizations on SkillsBridge (e.g., schools) may enroll students under the age of 18. Where this applies:

• The enrolling organization is responsible for obtaining any necessary parental/guardian consent before adding a minor as a student, since the organization — not SkillsBridge — is the party with a direct relationship to the student and their guardians
• SkillsBridge collects only the data necessary for the student to use the platform (name, email, course progress) and does not use minors' data for marketing purposes
• Organizations enrolling minors should ensure their own consent processes comply with applicable regulations in their jurisdiction

11. User Rights

Users (organization admins, team members, and students) have the right to:

• Access the personal data we hold about them
• Correct inaccurate data
• Request deletion of their data, subject to the retention exceptions in Section 7
• Withdraw consent, understanding this may limit or end their ability to use the platform

For students, requests should generally go through their organization's admin first, since the organization is the data controller. Organization admins and team members can contact us directly at support@omegtric.com.

12. Cookies & Tracking

SkillsBridge uses cookies and similar technologies to:

• Keep users logged in
• Remember preferences
• Understand general usage patterns to improve the platform

13. Changes to This Policy

We may update this Privacy Policy from time to time. When changes are material, users will be prompted to review and re-accept the updated policy on their next login.

14. Contact Us

For any questions about this Privacy Policy or how your data is handled, contact us at: