Privacy notice

This notice explains how Skilltage handles personal data for public visitors, organisation users, and recruitment workflows.

Entity and product

Last updated: 13 August 2026. Skilltage is operated by Skilltage OÜ, Registry code 17544342, Harju maakond, Tallinn, Kesklinna linnaosa, Pärnu mnt 139b, 11317, Estonia.

General, support, legal, and security requests can be sent to info@skilltage.com. Privacy and data requests can be sent to privacy@skilltage.com.

Roles

Skilltage is a B2B service for organisation customers. Customer organisations are normally the controllers for candidate and recruitment data they upload or manage in Skilltage. Skilltage acts as processor for those workflows under the Skilltage terms and data processing terms accepted during onboarding.

Skilltage OÜ acts as controller for limited business operations such as website visitors, account administration, support, legal, security, billing, and consent-managed telemetry.

Data protection design

Skilltage is designed for GDPR-aligned B2B recruitment workflows, with customer-as-controller and Skilltage-as-processor roles, human-reviewed AI assistance, candidate notice support, access controls, retention cleanup, deletion paths, and subprocessor transparency.

Customers remain responsible for their lawful recruitment basis, candidate notices, human decision processes, and compliance with the accepted Skilltage data processing terms.

Data categories

  • Website and app visitor data, including request metadata and consent choices.
  • Account and authentication data for organisation users.
  • Organisation workspace, membership, invite, and recruitment-case data.
  • Uploaded candidate PDFs, candidate records, parsed CV facts, candidate evaluation payloads, review status, and action drafts.
  • AI trace events, operational logs, browser error telemetry, and product analytics when enabled and consented.

Lawful bases where Skilltage is controller

  • Contract and pre-contract steps for account, access, support, billing, and customer administration.
  • Legitimate interests for service security, abuse prevention, operational reliability, and limited business communications.
  • Consent for optional browser analytics and browser diagnostics where required.
  • Legal obligation where records must be kept for accounting, tax, corporate, regulatory, or dispute purposes.

AI-assisted recruitment

Skilltage structures candidate evidence, matching signals, recommendation bands, and draft next steps for human review. Skilltage does not make final hiring, rejection, shortlist, interview, ranking, or candidate communication decisions.

Retention and deletion

Recruitment evidence cleanup is anchored to recruitment-case closure. Uploaded CVs, parsed CV payloads, candidate evaluations, review state, and action drafts are cleaned up 6 months after closure unless another required process applies.

AI trace events use a separate 6-month trace retention window. Klaro consent change evidence is retained for 13 months. Recruitment cases, job briefs, and job ad drafts may remain as non-candidate operational history after candidate evidence cleanup.

Case evidence cleanup starts only after a recruitment case is closed. Customers are expected to close completed recruitment cases or review stale open cases monthly.

Rights and requests

Candidates should normally contact the customer organisation handling the recruitment process, because that organisation is the controller for candidate recruitment data.

Skilltage assists customers with access, correction, deletion, restriction, objection, export, and breach-support requests according to the Skilltage terms and data processing terms accepted during onboarding. Privacy requests about Skilltage's own controller processing can be sent to privacy@skilltage.com.