Privacy
This page explains in plain language which information we take and why, who we share it with and what rights you have over it.
Last updated:
In short
- We keep your name, your email address, the kind of work you do if you choose to tell us, the list of skills you installed and your payment record.
- Your card details never reach us. A payment provider takes the payment.
- We do not see or collect what you write to your AI, your files or the work you produce.
- We do not use advertising or tracking cookies. We do not sell your information.
- You can have your account and your data deleted at any time.
Who is responsible for your data
Skillducks is run by Rebel Company Reklam ve Danışmanlık Limited Şirketi (Rebel Co. Group), a company established in Türkiye. This company is the data controller under the Turkish Personal Data Protection Law No. 6698 (KVKK) and the EU General Data Protection Regulation (GDPR).
Where this notice says "we", it means this company. For anything about your personal data, reach us through the form on the contact page.
What we collect
What you give us
- Your name and email address. You enter them when you join, or they come from your Google account if you continue with Google.
- The kind of work you do (department). This is optional and you can leave it empty.
- The message you write in the contact form and the topic you pick.
What is created as you use the service
- The list of skills you installed, with setup and update dates.
- A record of your approvals: what you approved and when.
- Your payment record: which plan you bought, the amount, the date and the transaction number given by the payment provider.
- The access log kept by the server: IP address, browser type, requested page and time. We use it for security and to find errors.
What we do not collect
- Your card number, expiry date and security code. These stay with the payment provider only.
- The requests you write to your AI and the answers you get.
- The files on your computer and the work you produce with skills.
- A password. Sign-in does not use one, so there is none to keep.
Setup happens on your computer, inside your own AI tool. The only thing that reaches us is which skill was installed.
Why we use your data
Every use has a reason and a legal basis.
- To open your account, recognize you and send your sign-in link. Basis: our contract with you.
- To suggest the skill set for your job, install skills and tell you about new versions. Basis: contract.
- To record payments and meet invoicing and accounting duties. Basis: legal obligation.
- To answer your questions and resolve your requests. Basis: contract and legitimate interest.
- To protect the service from misuse and to find errors. Basis: legitimate interest.
We send you the emails the service needs: sign-in links, payment information, changes to the terms. We send promotional email only if you separately agree, and you can leave with one click from any of them.
We do not use your data for profiling or to make automated decisions about you. Your department only decides which set you are shown.
Does your data leave the country
The servers of the providers we work with may be located outside Türkiye and outside the country you live in. In that case your data is transferred in line with the cross-border rules of KVKK and with the safeguards GDPR requires.
If you want to know which provider keeps data in which country, write to us and we will tell you.
How long we keep it
- Account details and your installed skill list: for as long as your account is open.
- When you delete your account: we delete these within 30 days.
- Payment and invoice records: even after you delete your account, for the period tax and commercial law requires.
- Contact form messages: until your request is resolved, and for a reasonable period afterwards in case of a dispute.
- Server access logs: for the short period security requires, then they are deleted.
Your rights
Under GDPR and Article 11 of KVKK you can:
- Learn whether we process your data and get information about it.
- Get a copy of your data and move it to another service.
- Learn why it is processed and who it has been shared with, inside or outside the country.
- Have incomplete or wrong data corrected.
- Have your data deleted.
- Ask us to restrict processing, or object to processing based on legitimate interest.
- Withdraw a permission you gave, at any time.
- Object to a result against you that comes only from automated analysis, and claim compensation if unlawful processing harmed you.
How to make a request
Write through the form on the contact page, using the email address on your account. We answer free of charge within 30 days at the latest. We may ask for extra information to be sure it is you.
If our answer does not satisfy you, you can complain to the data protection authority of the country you live in, or to the Personal Data Protection Board in Türkiye.
How we protect your data
The connection between the site and your browser is encrypted. Access to the database is restricted. Because we do not use passwords, there is no password list that could be stolen.
No system is free of risk. If a breach affects your data, we will inform you and the competent authority within the time the law sets.
Age limit
Skillducks is designed for people at work and is not for anyone under 18. If we notice that someone under 18 has opened an account, we delete the account and its data.
If this notice changes
When we update this notice, we change the date at the top of the page. For an important change that affects how we use your data, we email the address on your account before it takes effect.