GDPR & UK-GDPR

Skillvora acts as a data processor under GDPR Art. 28 when an institution licenses the platform, and as a controller for direct individual-plan signups. Lawful basis is contract performance for paying users and legitimate interest for marketing communications, with consent collected for cookies and email marketing.

We support all data subject rights: access, rectification, erasure, portability, restriction, and objection. Requests can be filed at privacy@skillvora.io and are completed within 30 days at no charge.

International transfers from the EU/UK to the United States rely on the EU-US Data Privacy Framework where available and the European Commission's Standard Contractual Clauses (2021/914) plus a Transfer Impact Assessment as a fallback. A signed Data Processing Addendum incorporating SCCs is available for every institutional contract — email dpa@skillvora.io.

EU representative (Art. 27): listed in our DPA on request. UK representative (UK-GDPR Art. 27): listed in our DPA on request.

Data residency: production data is currently stored in US regions. EU-region storage is on the roadmap for institutional plans — contact sales for current ETA and to be added to the early-access list.