Plain language commitment: This policy is written to be understood, not to confuse. If anything is unclear, email us at hello@skilwi.ai and we will explain it in plain language.
SKILWI.ai is India's first Workforce Intelligence Operating System. We are operated by SKILWI Technologies, incorporated in Bangalore, Karnataka, India.
We provide a software platform that helps organisations understand the skills their employees have, identify gaps, run Training Needs Analysis (TNA), manage recruitment, and make workforce planning decisions.
For the purposes of India's Digital Personal Data Protection Act 2023 (DPDP 2023), SKILWI.ai is the Data Fiduciary. For the purposes of GDPR, SKILWI.ai acts as a Data Controller for our own marketing and website data, and as a Data Processor for employee and candidate data processed on behalf of our enterprise clients.
We collect different types of data depending on whether you are a candidate (applying for a job through SKILWI.ai), an employee (whose employer uses SKILWI.ai), or a visitor to our website.
| Data type | Examples | How collected |
|---|---|---|
| Identity | Name, email, phone number | CV upload or direct entry |
| Resume / CV content | Work history, education, skills, certifications | CV upload (PDF/Word) |
| Skill profile | Extracted skills mapped to ESCO taxonomy, proficiency levels, match scores | Automated AI extraction from CV |
| Assessment results | Personality assessment scores (TKI, DiSC, EQ-i) if conducted | Assessment platform |
| Consent record | Date, time, purpose of consent given | Consent screen at CV upload |
What we strip out: Our CV parser is configured to discard Aadhaar numbers, PAN numbers, date of birth, and biometric data unless your employer has explicitly enabled these for a specific, stated purpose. These fields are never used for matching or scoring.
| Data type | Examples | Source |
|---|---|---|
| Profile | Name, role, department, seniority level | Employer upload or HR system |
| Skill inventory | Current skills, proficiency levels, ESCO codes, confidence scores | CV import + manager assessments + learning completions |
| Performance data | Review scores, goal achievement, skill ratings from manager | Performance review submissions |
| Learning data | Training assigned, in progress, completed, validated | Platform tracking + LMS integration if enabled |
| Career data | Career aspirations (if voluntarily entered), readiness scores, mobility matches | Employee self-entry + automated calculation |
| Wellbeing signals | Anonymous pulse survey responses, aggregate burnout risk score | Weekly 5-question pulse (anonymous) |
| Contact PII | Phone number (encrypted), Aadhaar last 4 digits (encrypted if collected), PAN (encrypted if collected) | Employer HR records |
If you visit skilwi.ai, we collect standard web analytics data (pages visited, browser type, referring URL, time on page) if you accept analytics cookies. We do not collect this data if you decline cookies. We do not use third-party advertising cookies.
If you fill in our demo request form, we collect your name, work email, company name, company size, and industry. This data is used only to contact you about a product demo and is never sold or shared with third parties for marketing.
We collect data only for specific, stated purposes. We do not collect data speculatively or "just in case."
| Purpose | Legal basis (DPDP 2023) | Legal basis (GDPR) |
|---|---|---|
| CV parsing and candidate matching | Consent (given at CV upload) | Consent / Legitimate interest (recruitment) |
| TNA and skill gap analysis | Consent + Employer legitimate interest | Contract performance / Legitimate interest |
| Performance management | Employer legitimate interest | Contract performance |
| Career pathing and internal mobility | Employee consent | Consent |
| Wellbeing pulse surveys | Anonymous — consent not required | Anonymous — consent not required |
| Decision intelligence (upskill vs hire) | Employer legitimate interest | Legitimate interest |
| Platform security and audit logs | Legal obligation | Legal obligation |
| Demo request follow-up | Consent (form submission) | Consent |
Purpose limitation: Data collected for recruitment is not used for performance scoring without fresh consent. Data collected for TNA is not used for marketing. Each dataset has one primary purpose and does not migrate to another without your knowledge.
Concretely, here is what happens to your data inside SKILWI.ai:
We do not sell your data. We do not share your data with advertisers. We share data only in the following limited circumstances.
If you are a candidate or employee, your employer (who is our client) can see your skill profile, TNA results, and performance data. Your employer cannot see your individual wellbeing pulse responses — only anonymised team aggregates.
| Partner | Purpose | Data shared | Location |
|---|---|---|---|
| Groq (Llama 3.3 70B) | AI skill extraction and IDP generation | CV text excerpts, skill names (no PII) | USA |
| Google (Gemini 2.0 Flash) | AI fallback for content generation | Anonymised text prompts (no PII) | USA / EU |
| Hostinger KVM2 | Server hosting and infrastructure | All platform data (encrypted at rest) | EU (Amsterdam) |
| ChromaDB | Vector search for CV-JD matching | Skill embeddings (no raw PII) | On-premise (same server) |
Important: We are in the process of obtaining written confirmation from Groq and Google that they do not train their models on SKILWI customer data. Until this is confirmed in writing, we treat all AI provider calls as potentially retaining data and minimise PII in prompts accordingly.
We may disclose your data if required by Indian law, court order, or a lawful request from a government authority. We will notify you of any such request where legally permitted to do so.
| Data type | Retention period | Reason |
|---|---|---|
| Rejected candidate profiles | 90 days after rejection | DPDP 2023 data minimisation requirement |
| Active candidate profiles | Duration of recruitment process + 90 days | Employer legal obligation |
| Employee skill profiles | Duration of employment + 1 year | Employer legal obligation / audit |
| Performance reviews | Duration of employment + 3 years | Labour law compliance |
| Wellbeing pulse (aggregates only) | 2 years rolling | Trend analysis — no individual data retained |
| CV files (raw) | 90 days after last use | Storage cost + privacy minimisation |
| Demo request data | 2 years or until you opt out | Sales follow-up |
| Website analytics | 13 months | Standard analytics retention |
| Audit/access logs | 5 years | Security and legal compliance |
You can request deletion of your data at any time. See Your Rights below.
We take security seriously. Here is what is currently implemented:
org_id filters on all data access.Upcoming: We are planning a full penetration test and VAPT assessment before onboarding our first enterprise client. Database access logging (who queried what PII and when) is scheduled for Sprint 3.
In the event of a data breach, we commit to notifying affected data principals within 72 hours of discovery (as required by GDPR) and as soon as reasonably practicable under DPDP 2023. We will notify the Data Protection Board of India and relevant EU DPAs as required by law.
You have the following rights over your personal data. To exercise any of these rights, contact us at privacy@skilwi.ai. We will respond within 30 days.
Request a copy of all personal data we hold about you, in a readable format.
Ask us to correct inaccurate data — for example, a skill incorrectly extracted from your CV.
Request deletion of your personal data ("right to be forgotten"). We will hard-delete all PII within 30 days.
Receive your data in a machine-readable format (JSON) to transfer to another service. (GDPR only)
Opt out of automated profiling or TNA scoring. You can request human review of any AI-generated score.
Withdraw consent at any time. This does not affect processing done before withdrawal but stops future processing.
Email privacy@skilwi.ai with the subject line "Data Rights Request" and the following: your full name, email address used in SKILWI.ai, your employer (if an employee), and the specific right you wish to exercise. We will respond within 30 days. If we need to verify your identity, we will ask for confirmation before acting on the request.
SKILWI.ai uses artificial intelligence in several parts of the platform. We are transparent about where AI is used and what decisions it influences.
| AI function | What it does | Human oversight |
|---|---|---|
| CV skill extraction | Extracts skills from your resume and maps them to the ESCO taxonomy | Every extracted skill is visible to the recruiter and candidate. You can dispute any extraction. |
| Candidate match scoring | Ranks candidates against a job description using a 5-signal weighted score | Score is advisory only. Every score shows its reasoning. Hire/reject decisions are made by humans. |
| TNA gap analysis | Identifies skill gaps between an employee's current profile and their role requirements | Gap results are presented as recommendations. Employees and managers can override any gap classification. |
| IDP generation | Writes a personalised development plan narrative using Groq Llama 3.3 70B or Gemini 2.0 Flash | All AI-generated text is clearly marked as AI-generated. Managers and HR edit and approve before sharing. |
| Upskill vs hire recommendation | Calculates the cost and timeline of upskilling vs external hiring | Output is a cost model, not a mandate. Leadership makes the final decision. |
No AI makes a final hiring decision. SKILWI.ai scores and ranks candidates, but every hire, reject, and offer decision is made by a human recruiter or hiring manager. The platform is designed to inform decisions, not replace them.
We are aware that AI models can reflect biases present in training data. Our matching engine scores candidates on skill evidence, not on names, gender, location, or caste. We are planning a formal bias audit — testing the matching engine for gender, age, and location discrimination — scheduled before our first enterprise client onboarding.
If you believe an AI score has treated you unfairly, you have the right to request human review. Contact us at privacy@skilwi.ai.
The Digital Personal Data Protection Act 2023 applies to all personal data of Indian citizens processed by SKILWI.ai. This section sets out our obligations and your rights under DPDP 2023 specifically.
As a Data Fiduciary under DPDP 2023, SKILWI.ai commits to:
We obtain consent before collecting personal data. Consent must be:
DPDP 2023 requires us to have a Grievance Officer. Our Grievance Officer is:
If you are not satisfied with our response, you may escalate to the Data Protection Board of India (once constituted) or approach a court of competent jurisdiction.
Some of your data is processed by our AI providers (Groq, Google Gemini) whose servers are located outside India, primarily in the United States. We process the minimum necessary data through these providers and are monitoring the Government of India's notifications on permitted cross-border transfer countries under DPDP 2023.
GDPR applies to SKILWI.ai when we process data of EU citizens — for example, if an EU-based company uses our platform or an MNC employee in India holds EU citizenship.
When we process employee and candidate data on behalf of an enterprise client, we act as a Data Processor. The enterprise client is the Data Controller. If you wish to exercise GDPR rights over data held in an employer's SKILWI.ai account, please contact your employer first — they will instruct us accordingly.
For data we collect directly (website analytics, demo requests), we act as a Data Controller.
In addition to the rights listed in Section 8, EU residents have the right to lodge a complaint with the Data Protection Authority (DPA) of your EU member state if you believe we have violated GDPR.
Where we transfer EU personal data outside the EU/EEA, we use:
We are in the process of executing SCCs with Groq and Google for EU data transfers. Until these are finalised, we minimise EU PII in all AI provider calls.
We do not currently have a formally appointed DPO. As we grow and our processing of EU data increases, we will appoint a DPO or engage a GDPR-specialist legal advisor. For all GDPR queries, contact privacy@skilwi.ai.
We use cookies on skilwi.ai. The cookie consent banner on our homepage lets you accept or decline non-essential cookies.
| Cookie type | Purpose | Can be declined? |
|---|---|---|
| Essential | Keeps you logged in, remembers your theme preference (light/dark), cookie consent choice | No — required to use the site |
| Analytics | Understand which pages are visited and how (no personal data) | Yes — decline in the banner |
| Advertising | We do not use advertising cookies | N/A |
Your cookie preference is stored in your browser's localStorage under the key skilwi-cookie-consent. To change your preference, clear your browser's localStorage for skilwi.ai or contact us.
We will update this policy as our practices evolve, as we add new features, or as laws change. When we make material changes, we will:
Continued use of SKILWI.ai after a policy change constitutes acceptance of the updated policy. If you disagree with a change, you may exercise your right to erasure or contact us to discuss.
For any privacy-related question, data rights request, complaint, or grievance, use the channels below.
If you are not satisfied with our response to your complaint: