Privacy Policy
The short version
- We collect what the marketplace needs: your account, what you list or buy, and how you sign in.
- Stripe handles card payments and seller verification; we never see a full card number or a seller’s bank details.
- Skill packages are stored privately and delivered by links that expire in minutes.
- We set a cookie to keep you signed in and one to remember your cookie choice. Our analytics set no cookie, store no IP address, and wait for your choice where the law asks.
- You can ask to see, correct, export or delete your information: email us.
1. Who we are
QuxSkills is operated by QuxKit Inc., of Dallas Tx, which is responsible for the personal information described here. Contact us about privacy at [email protected].
2. What we collect, and why
| What | Details | Why |
|---|---|---|
| Account | Your email address, and your password stored only as a salted, peppered one-way hash (argon2id). | To give you an account and sign you in. |
| Sign-in and security | Your sessions (when they started and were last used, the IP address and browser they came from) and a log of security events. | To keep your account secure and investigate abuse. |
| Seller profile | Your seller name and handle, your listings and every version you upload, with what our scanner and staff found. | To run the marketplace and keep it safe. |
| Payments | Orders (what, when, how much, the licence accepted), refunds, and the Stripe references for each. Stripe collects card details from buyers, and identity, tax and bank details from sellers; we receive only whether a seller can be paid and what Stripe still needs. | To sell, pay sellers, keep accounts, and answer disputes. |
| Ratings and reports | Your ratings, reviews and reports. Reviews are shown without your name. | To help buyers choose, and to act on problems. |
| Waitlist | When sign-ups are closed and you join the waitlist: your email address, and the name, company and what you are building if you give them; the page and campaign tags that brought you, the referring site, and your country. When we invite you, the invitation and whether you used it. | To invite people in order, and to understand which channels bring them. |
| Cookie choices | When you answer the cookie banner: your choice per category, how you made it, the version of our cookie policy you saw, the page, your country and region, whether your browser sent a Global Privacy Control signal, your browser's user agent, and half of your IP address (never all of it). | To prove what you agreed to, as the law requires. |
| Site analytics | Pages viewed, what you search for, which skills you open and get, referrer, campaign tags, browser, operating system, device type, language and country. The visitor identifier is a one-way hash of the site, your IP address and browser, salted with a secret that changes every month and is then deleted. Your IP address is not stored, no cookie is set, and analytics are not linked to your account. | To understand how the site is used and improve it. |
We do not ask for, and ask you not to upload, personal or sensitive information inside a skill.
5. How long we keep it
Account information, while your account exists. Orders and the records of money, for as long as tax and accounting law requires, even after an account is deleted. Skill packages, while any buyer holds a licence to them. Security logs, for a limited period. The waitlist: until you have an account or ask us to remove you. Consent records: two years by default, to prove what was agreed. Analytics: the identifying salt is deleted monthly, after which the stored hashes can no longer be linked to anyone; aggregate statistics may be kept.
6. Your choices and rights
You can ask us to show you, correct, export or delete the personal information we hold about you, or object to how we use it, by emailing [email protected]. You may also complain to your data-protection authority.
7. How we protect it
Each seller's workspace is isolated from every other by the database itself. Packages are kept in a private store and handed out only by links that expire in minutes, after we check that you hold the skill. Staff actions are recorded.
8. Where it is stored
Our database and storage are hosted in [Hosting region]. Stripe and our email provider may process information in other countries, under their own safeguards.
9. Children
The Service is not for anyone under 18, and we do not knowingly collect their information.
10. Changes to this policy
We will post changes here and, if they are material, tell you before they take effect.
11. Contact
QuxKit Inc., Dallas Tx. Email [email protected].