Privacy Policy - Skillbridge

Effective Date: 5/17/2026

1. Introduction

This Privacy Policy describes how Skillbridge ("we," "us," or "our") collects, uses, and discloses your personal information when you use our software as a service (the "Service").

We are committed to protecting your personal information and your right to privacy. When you visit our software as a service and use our products, you trust us with your personal information. We take your privacy very seriously. In this Privacy Policy, we seek to explain to you in the clearest way possible what information we collect, how we use it, and what rights you have in relation to it.

This Privacy Policy applies to all information collected through the Service, including our website, authenticated application, and related support or contact channels.

Please read this Privacy Policy carefully as it will help you understand what we do with the information we collect.

2. Definitions

To help explain things as clearly as possible in this Privacy Policy, every time any of these terms are referenced, they are strictly defined as:

• Cookie: a small file placed on your device to enable certain features and functionality.
• Company: when this policy mentions "Company," "we," "us," or "our," it refers to CaTT Solutions, which operates the Skillbridge service.
• Country: where Skillbridge or the owners/founders of Skillbridge are based, in this case France.
• Customer: refers to the company, organization, or person that signs up to use the Skillbridge Service.
• Device: any internet-connected device such as a phone, tablet, computer, or any other device that can be used to visit Skillbridge and use the services.
• Personal Data: any information that directly, indirectly, or in connection with other information allows for the identification of a natural person.
• Service: refers to the software as a service provided by Skillbridge as described in the relative terms and on this platform.
• Third-party service: a company other than Skillbridge that provides hosting, authentication, analytics, scheduling, or other tools integrated into or linked from the Service.
• Website: Skillbridge's site, which can be accessed via https://skill-bridge.fr.
• You: a person or entity that is registered with Skillbridge to use the Services.

3. Information We Collect

We collect several different types of information for various purposes to provide and improve our Service to you.

3.1 Personal Data

When you create an account, sign in, or update your profile, we collect personal data about you as the account holder. This information is used to identify you, manage your account, communicate with you about the Service, and secure access to your account. Depending on how you use the Service, we may collect:

• First name and last name
• Email address
• Phone number
• Account identifiers and settings, such as an internal user ID, your account role (for example, standard user permissions).
• Authentication information, including the password you choose at registration (processed securely; we do not store your password in plain text) and data needed to maintain your signed-in session

3.2 Documents and content you provide

When you use Skillbridge for recruitment and staffing workflows, you may upload documents and enter related information as part of the Service. This section describes personal data contained in or generated from that content.

• Candidate documents (CVs) : You may upload PDF files relating to candidates (for example, résumés or CVs) and provide a label or name to identify the document in your workspace. If you use analysis features, we process the content of the file to extract and store candidate profile information derived from the document (for example, professional experience, skills, education, or contact details that appear in the PDF).
• Proposals and client documents : You may upload PDF files relating to proposals, calls for proposals, or client opportunities, together with information such as a proposal name and client name. If you use analysis features, we process the content of the file to extract and store proposal-related information derived from the document (for example, project scope, requirements, industry, or other details present in the PDF).
• File and processing data : We store the uploaded files, file metadata (such as file name and identifiers), analysis outputs when you use analysis features, and technical data used for matching, as needed to operate the Service.
• Personal data about third parties : Documents you upload may contain personal data about other individuals (such as candidates, applicants, employees, or client contacts) and about organizations. That data may include information you do not enter in your account profile—such as postal address, email, phone number, employment history, compensation, or other details—because it appears inside the file you upload.
• You are responsible for ensuring that you have a lawful basis to collect and upload such information and to use Skillbridge to process it, in accordance with applicable law and our Platform Rules.

What this section does not cover : This section does not describe your account personal data (see section 3.1) or technical usage data and cookies (see the following sections).

3.3 Usage Data

When you access or use the Service, we automatically collect technical information about how the Service is accessed and used (“Usage Data”). We use this information to provide, secure, maintain, and troubleshoot the Service. Usage Data may include:

• Connection and device information, such as your IP address, browser type, operating system, and similar technical data sent by your browser or device
• Activity information, such as the pages or screens you visit, features you use, sign-in events, and the date and time of your actions
• Diagnostic information, such as error messages, HTTP status codes, and logs related to failed or abnormal requests
• When you are signed in, this information may be linked to your account for security and support purposes.
• Optional product analytics or error-monitoring tools (for example, Mixpanel or Sentry) are not active unless you accept the relevant cookies; see section 3.4.

This section does not describe cookies used for authentication or preferences; those are covered in section 3.4.

3.4 Tracking Technologies and Cookies

We use cookies and similar technologies (such as local storage where applicable) to operate Skillbridge, keep you signed in, remember certain preferences, and—only if you agree—enable optional measurement or third-party features.

A cookie is a small text file stored on your browser or device. Some cookies are set by Skillbridge; others may be set by third-party services when those services are loaded.

Your choices : When you first visit the Service, we show a cookie banner with options to accept all non-essential categories, refuse them, or manage preferences.

You can change or withdraw your choices at any time by:

• selecting Manage preferences in the cookie banner;
• using the Cookie settings link in the website footer; or
• opening cookie preferences from your account settings (when signed in).

These options open a settings panel where you can accept, refuse, or customize each category.

Your selection is stored in a cookie (sb_cookie_consent) for up to approximately 13 months, unless you delete it sooner. Refusing optional cookies does not prevent you from using the core Service, but some optional features may not work.

You can also configure your browser to block or delete cookies. If you block necessary cookies, parts of the Service (including sign-in) may not function correctly.

Categories of cookies

• Strictly necessary — Required for the Service to work (for example: sign-in session, secure API access, storing your cookie choice). These are always active.
• Preference — Remember choices such as language or display theme, where enabled.
• Analytics (optional) — Help us understand how the Service is used to improve the product. Example if enabled: Mixpanel. Not loaded unless you accept this category.
• Diagnostic (optional) — Help detect and fix technical errors. Example if enabled: Sentry. Not loaded unless you accept this category.
• Third-party services (optional) — Load integrated tools you choose to use after accepting this category (for example, Stripe checkout). The Calendly scheduler on Book a meeting loads when you open that page; see our Cookie policy.

We do not use cookies for advertising or marketing purposes.

For the list of cookies, providers, purposes, and retention periods, see our Cookie policy.

Technical logs about how you use the Service are described in section 3.3. Account and uploaded content data are described in sections 3.1 and 3.2.

4. How We Use Your Information

We use the personal data described in section 3 for the purposes below.

To provide and operate the Service :

• Create and manage your user account and profile
• Authenticate you, maintain your session, and protect access to the Service
• Enable core features you use, including storing, displaying, downloading, and deleting uploaded documents (such as CVs and proposals) and related labels or metadata you provide
• Run document analysis when you request it (for example, to extract candidate or proposal information from a PDF)
• Provide search and matching features between candidates and proposals, including technical processing such as embeddings where applicable
• Manage access to content within the Service when you share or assign items to other users (for example, by email address)
• Process subscriptions or payments for paid features and manage related entitlements (for example, credits or subscription status), where applicable (see section 9.6)

To communicate with you :

• Send service-related messages needed to operate your account (for example, a one-time verification code when you create an account, password reset, or other security-related communications)
• Respond to contact or support requests you send us by email or other channels listed on our Contact page, including GDPR or personal-data requests (the Contact page form helps you draft a message but does not automatically transmit your message to us)

We do not use your data to send unsolicited advertising or promotional emails. If we introduce optional product or recruitment alerts in the future, we will describe them in the Service and, where required, rely on your consent or applicable opt-out rights.

To secure, maintain, and improve the Service :

• Monitor, troubleshoot, and fix errors or abuse
• Protect the Service, our users, and third parties (fraud prevention, access control, incident response)
• Improve reliability and performance of the Service
• Measure and understand usage only where permitted (for example, after you accept optional analytics cookies, as described in section 3.4)

To meet legal requirements and enforce our terms :

• Comply with applicable legal obligations
• Enforce our Terms of Use, Platform Rules, and other agreements
• Establish, exercise, or defend legal claims

Other uses :

• For any other purpose disclosed to you when you provide the information
• With your consent, where consent is required by law

We process personal data about candidates and other third parties contained in files you upload on your instructions, to provide the features above. You are responsible for having a lawful basis to upload and process that information, as described in section 3.2.

5. Legal basis for processing (GDPR)

If you are in the European Economic Area (EEA) or the United Kingdom, we process your personal data only where we have a valid legal basis under the General Data Protection Regulation (GDPR). The legal basis depends on what we process and why. The main bases we rely on are below.

5.1 Performance of a contract :

We process personal data when it is necessary to provide the Service under our agreement with you (or to take steps at your request before entering into an agreement), including to:

• create and manage your account and profile (section 3.1);
• authenticate you and provide access to the Service;
• store, display, download, delete, and otherwise handle documents and content you upload (section 3.2), including optional analysis and matching you request (section 4);
• manage sharing or access to content within the Service when you use those features;
• process payments and subscriptions when you purchase paid features (section 9.6).

This basis applies to personal data relating to you as our customer user.

5.2 Legitimate interests

We process personal data where it is necessary for our legitimate interests, and those interests are not overridden by your rights, including to:

• secure the Service and prevent fraud, abuse, or unauthorized access;
• operate, maintain, and troubleshoot the Service (including technical logs described in section 3.3);
• improve reliability and performance of the Service;
• communicate with you about important service or security matters;
• enforce our terms and protect our legal rights.

Where we rely on legitimate interests, you may object to processing in certain cases (see section 12).

5.3 Consent

We process personal data based on your consent when required, including when you:

• accept optional cookie categories (analytics, diagnostic, or third-party services such as Calendly) as described in section 3.4;
• choose to load a third-party widget or feature that is not strictly necessary.

You may withdraw consent at any time via the cookie banner, footer Cookie settings, or (when signed in) Settings → Privacy & data → Cookie settings. Withdrawal does not affect processing that already occurred before withdrawal.

5.4 Legal obligation

We process personal data when necessary to comply with applicable law, for example to respond to lawful requests from authorities, comply with accounting or regulatory duties, or meet other legal requirements.

5.5 Personal data about candidates and other third parties in your uploads

When you upload documents that contain personal data about candidates, clients, or other individuals, we generally process that information on your instructions to provide the Service (for example, storage, analysis, or matching).

For that data, you are typically responsible for deciding the lawful basis and for informing the individuals concerned, as explained in section 3.2. We process such data to deliver the features you use under our contract with you and, where applicable, as a processor acting on your behalf.

If you need a data processing agreement for your organization, contact us using the details in section 15.

6. Retention of Your Personal Data

We keep personal data only for as long as needed for the purposes described in this Privacy Policy, unless a longer period is required or permitted by law.

6.1 While you use the Service

• Account data (section 3.1) is retained for as long as your account is active.
• Documents and content you upload (section 3.2), including related analysis and matching data, are retained until you delete them in the Service or until your account is deleted, unless we must keep certain data for legal or security reasons.
• Usage data and logs (section 3.3) are generally kept for a limited period appropriate for operation, security, and troubleshooting, and may be kept longer when needed to investigate incidents or protect the Service.
• Cookie preferences (sb_cookie_consent) are stored for up to approximately 13 months, unless you delete them earlier (see section 3.4).

6.2 When you delete data or your account

You can:

• delete individual files (such as CVs or proposals) from within the Service, where the feature is available; and
• delete your account from Settings → Security (this removes your user account from our systems and your Firebase authentication account).

After deletion, we delete or anonymize personal data within a reasonable timeframe, except where we must retain it as described below.

Important: Deleting your account or individual files may not immediately remove all copies from backups, logs, or related records (for example, embeddings, shared access, or data linked to other users). If you need confirmation that specific data has been erased, contact us (section 15) or see Manage my data.

6.3 When we keep data longer

We may retain personal data for longer when necessary to:

• comply with legal obligations (for example, regulatory, tax, or accounting requirements);
• retain billing and payment records related to subscriptions or purchases processed via Stripe, where applicable;
• resolve disputes and enforce our agreements;
• protect the security and integrity of the Service; or
• establish, exercise, or defend legal claims.

When retention is no longer necessary, we delete or anonymize the data in accordance with our internal practices.

6.4 Contact and GDPR requests

If you contact us (for example, via the Contact page or a personal-data request), we retain the information needed to handle your request and any follow-up, typically for the time required to complete the request and any applicable statutory limitation period.

7. International transfers of your personal data

Skillbridge (see section 2) is based in France. Personal data we collect may be stored and processed in France, in other countries of the European Economic Area (EEA), and in countries outside the EEA, depending on how the Service is hosted and which providers we use.

7.1 Why transfers may occur

We may transfer personal data to countries other than your own when:

• you use the Service from outside France or the EEA;
• our infrastructure or service providers process data in facilities located abroad (for example, cloud hosting, authentication, or file storage);
• you use third-party services that process data outside the EEA (for example, the Calendly scheduler on Book a meeting, or Stripe checkout after accepting third-party cookies, as described in section 3.4); or
• we use providers that are established outside the EEA but provide services to us (for example, Google Cloud or Firebase/Google for hosting and authentication, Google Gemini for document analysis you request, Stripe for payments, or optional tools such as Mixpanel or Sentry if you consent to them).

In those countries, data protection laws may differ from those in your country.

7.2 Safeguards

When we transfer personal data outside the EEA, we implement appropriate safeguards as required by applicable law, such as:

• an adequacy decision by the European Commission, where applicable; and/or
• Standard Contractual Clauses approved by the European Commission, or other lawful transfer mechanisms,

and we take steps to ensure your personal data remains protected in line with this Privacy Policy.

7.3 Your acknowledgment

By using the Service and, where required, by accepting this Privacy Policy or optional cookies, you understand that your personal data may be transferred and processed as described in this section.

For more information on third-party providers, see section 9. For questions about transfers, contact us (section 15).

8. Disclosure of your personal data

We do not sell your personal data. We disclose personal data only as described in this Privacy Policy or when required by law.

8.1 Service providers

We use service providers (subcontractors) to help us operate the Service—for example, cloud hosting, authentication, file storage, or optional analytics and error monitoring if you consent. They process personal data on our behalf and only for the purposes we specify. See section 9 for more detail.

8.2 Sharing at your direction

When you use features that share or assign access to content with other users (for example, by email address), we disclose the relevant personal data or documents to those users as instructed by you within the Service.

You are responsible for sharing data only with people who are authorized to receive it.

8.3 Business transactions

If Skillbridge is involved in a merger, acquisition, reorganization, or sale of assets, your personal data may be transferred as part of that transaction. We will provide notice before your personal data becomes subject to a different privacy policy, where required by law.

8.4 Legal and safety

We may disclose personal data when we believe in good faith that disclosure is necessary to:

• comply with a legal obligation, court order, or lawful request from public authorities;
• protect the rights, property, or safety of Skillbridge, our users, or others;
• detect, prevent, or address fraud, security issues, or abuse of the Service; or
• establish, exercise, or defend legal claims.

9. Third-party service providers

We use companies and services that process personal data on our behalf to run Skillbridge. They may only use personal data according to our instructions and for the purposes described in this Privacy Policy, except where they act as independent controllers (for example, when you interact directly with their widget).

This section supplements section 8.1. Cookie-specific third parties are also described in section 3.4 and our Cookie policy.

9.1 Hosting, storage, and authentication

9.2 AI document processing

When you request analysis of an uploaded document, we use Google Gemini (via Google’s AI services) to process document content and generate structured results used in the Service (for example, candidate or proposal information, or embeddings for matching).

This processing is part of the feature you request. Document content may be sent to Google for that purpose. See Google’s Privacy Policy and applicable Google AI terms.

9.3 Optional analytics (with your consent)

If you accept analytics cookies (section 3.4), we may use tools such as Mixpanel to understand how the Service is used and improve the product. These tools are not loaded unless you consent.

• Mixpanel (if enabled): Mixpanel Privacy Policy

We do not use Google Analytics on the Service.

9.4 Optional diagnostics (with your consent)

If you accept diagnostic cookies (section 3.4), we may use Sentry in your browser to monitor errors, improve stability, and debug issues. Depending on your choice, this may include:

• error messages, stack traces, and related technical context;
• browser and device information (for example, browser type, operating system, and approximate technical metadata sent with error reports);
• Session Replay (video-like reproduction of your session) only when you accept the Diagnostic category — with text fields masked, media blocked, and inputs masked where technically supported;
• performance profiling (function-level timing to diagnose slowness or UI jank), where supported by your browser (currently Chromium-based browsers such as Chrome or Edge), only when you accept the Diagnostic category;
• structured logs (for example, selected console output and application log messages sent for debugging), only when you accept the Diagnostic category.

You can withdraw consent at any time via Cookie settings (footer or account settings). After withdrawal, the browser SDK should stop sending new diagnostic data.

Separately, when error monitoring is enabled for our infrastructure, we may collect server-side error logs (for example, failed API requests on our servers) without using the browser cookie categories above. These logs are limited to what is needed to operate and secure the Service.

• Sentry (if enabled): Sentry Privacy Policy — processor for error monitoring and, with your consent, Session Replay, browser performance profiling, and logs.

9.5 Third-party widgets

Integrated providers may set their own cookies or process data under their policies, for example:

• Calendly (scheduling when you open Book a meeting): Calendly Privacy Notice

9.6 Payment processing

When you subscribe to or pay for paid features of the Service, we use Stripe as our payment processor.

• What Stripe processes: payment card details, billing information you enter at checkout, and data needed to complete the transaction, prevent fraud, and meet legal requirements. Card details are collected and processed directly by Stripe; we do not store full payment card numbers on our servers.
• What we may receive from Stripe: information needed to manage your subscription or purchase (for example, payment status, transaction identifiers, and limited billing details such as card brand or the last four digits of your card).
• Standards: Stripe processes payment data in accordance with the PCI-DSS standards for secure payment handling.

Stripe may also set cookies or use similar technologies when its checkout or payment components are loaded; see section 3.4 and our Cookie policy.

• Stripe: Stripe Privacy Policy

10. Security of your personal data

We take appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. These measures include, where appropriate:

• encrypted connections (HTTPS) between your browser and the Service;
• access controls and authentication for user accounts;
• HttpOnly session cookies for API access, as described in section 3.4;
• hosting and file storage on Google Cloud Platform, with authentication via Firebase/Google (see section 9).

No method of transmission over the Internet or electronic storage is completely secure. While we work to protect your personal data, we cannot guarantee absolute security.

If you believe your account or data has been compromised, contact us promptly (section 15).

11. Children

Skillbridge is a professional B2B service for recruitment and staffing workflows. It is not directed at children.

We do not knowingly collect personal data from anyone under 16 years of age. If you are a parent or guardian and believe a child has provided us with personal data, please contact us (section 15). If we learn that we have collected personal data from a child without appropriate authorization, we will take steps to delete it.

12. Your data protection rights

Depending on where you live (in particular in the EEA or UK), you may have rights regarding your personal data, including:

12.1 How to exercise your rights

You can take the following steps without waiting for us:

• Update your profile in Settings (name, email, phone, where available).
• Delete individual files (CVs, proposals) in the Service, where the feature is available.
• Delete your account in Settings → Security.
• Manage cookies via the cookie banner, footer Cookie settings, or Settings → Privacy & data → Cookie settings (section 3.4).

For other requests (access, export, erasure confirmation, objection, or questions about data in uploaded documents), contact us (section 15) or see our Manage my data page.

We will respond within one month of receiving your request, as required by the GDPR (this period may be extended by two further months where permitted, if the request is complex).

We may need to verify your identity before processing a request. If we cannot fulfill a request in full (for example, because of legal retention obligations or data linked to other users), we will explain why.

12.2 Complaints

If you are in the EEA or UK and believe we have not handled your personal data properly, you may lodge a complaint with your local supervisory authority. In France, the authority is the CNIL (https://www.cnil.fr). We encourage you to contact us first so we can try to resolve your concern.

13. Links to other websites and services

The Service may contain links to third-party websites or services (for example, Calendly, legal pages, or provider privacy policies). We do not control those sites and are not responsible for their content or privacy practices.

When you leave Skillbridge or load a third-party widget, that provider’s policy applies. We recommend reading their privacy information before sharing personal data with them.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will post the updated version on this page and change the effective date at the top.

If changes are material, we may also notify you by email or through a notice in the Service, where appropriate and permitted by law.

Your continued use of the Service after an update means you accept the revised policy, unless otherwise required by law. We encourage you to review this page periodically.

15. Contact us

If you have questions about this Privacy Policy or how we handle personal data, contact us:

For GDPR requests, include enough information for us to identify your account (for example, the email address used to register) and describe your request clearly.