skillsync

Last updated: November 4, 2026

Privacy Policy

Skillsync is where people publish skills (instructions an AI assistant can load and follow), add other people’s skills to a library, and use that library from their assistant. This policy covers the Skillsync app at app.skillsync.com and its connector at app.skillsync.com/mcp. It explains, in plain terms, what we collect, why, and what you can do about it.

Information we collect

  • Your account. You sign up with Google, and we receive your name, email address and profile picture. Some accounts sign in with an email and password instead; for those, we keep the name, email address and password, and the password is stored only as a salted hash, never in plain text. You also choose a username.
  • Your profile. The bio, links and cover image you add, and the skills you pin.
  • Skills you publish. Each skill’s SKILL.md and its files, its name, description, price and visibility, and earlier versions when you update it.
  • Your library. The skills you add or buy, and who you follow.
  • Purchases. What you bought or sold, the price, and when. Payments are handled by Stripe. We never see or store your card number.
  • Selling. If you sell skills, you’re paid through Stripe Connect. Stripe collects the details it needs to pay you, such as your identity and bank account. We don’t store your bank details.
  • Connected assistants. When you connect an assistant such as Claude, ChatGPT or Cursor, we keep the name it gives itself, when you approved it, and the sign-in tokens that let it reach your library.
  • Reports. If you report a skill, we keep the report and the reason you give.
  • Device and log information. For each signed-in session we store the IP address and browser user agent it started from.
  • Product analytics. We use PostHog to see how the app is used: the pages you open, how you got there, and basic browser and device information. If you are signed in, these events are linked to your account. Web addresses are recorded without their query strings. PostHog also records sessions (a replay of how pages were used) to help us find and fix problems; passwords, email addresses and phone numbers typed into forms are masked, embedded frames are left out, and network requests are not recorded.

How we use information

  • To run Skillsync: sign you in, publish and store your skills, and serve your library to the assistants you connect.
  • To process purchases and pay sellers.
  • To show authors how many people visited or added their skills. Authors see counts; they never see who visited.
  • To keep Skillsync safe: prevent abuse, review reports, and remove skills that break our Terms.
  • To understand how the app is used and make it better.
  • To contact you about your account when we need to.

How content is shared

  • Your profile is public. Your username, name, picture, bio and links appear on your profile page.
  • Your skills follow the visibility you choose. Public skills are listed on your profile and anyone can find them. Unlisted skills can be opened by anyone with the link. Private skills can be opened only by you and by people who already have them in their library.
  • Sellers see who bought. When you buy a paid skill, its seller can see your public profile.
  • Assistants you connect. A connected assistant can read the skills in your library and nothing else in your account. It cannot publish, change or delete anything. You can disconnect it at any time in Settings.
  • Service providers, listed below, who process information on our behalf.
  • When the law requires it, or to protect the safety of our users, the public, or Skillsync.

AI processing

When you upload a skill to publish, Skillsync can draft how to use it for you: a few things a person might ask their assistant, and what the skill does for them. To write the draft, we send the skill’s SKILL.md to OpenAI, together with some context about your account: your name, username and bio, the names, descriptions and visibility of up to 40 skills you have published, and the names and descriptions of up to 40 skills in your library. You can edit or replace the draft before you publish.

The assistants you connect, such as Claude, ChatGPT or Cursor, read your skills to do what you ask of them. What they do with that content is covered by their providers’ own policies.

We don’t train AI models on your content.

What we don’t do

  • We don’t sell your personal information.
  • We don’t show ads or share your information with advertisers.
  • We don’t store your card details.
  • We don’t let connected assistants change anything in your account.

Service providers

We rely on a few companies to run Skillsync:

  • Vercel: hosting
  • Neon: database, and storage for skill files and images
  • Stripe: payments, and paying sellers through Stripe Connect
  • Google: sign-in, if you choose it
  • OpenAI: drafting skill descriptions when you publish
  • PostHog: product analytics and session recordings

Data retention

We keep your information while your account is open. You can delete your account in Settings → Delete account. When you do, we sign you out everywhere, disconnect every assistant, remove your sign-in methods, profile, library and follows, and free your username. Skills that nobody else has are deleted. Skills that other people already have stay in their libraries, but become private, so no one new can find them.

Some records stay after deletion: records of purchases and sales, which we keep for accounting, tax and legal reasons, and reports about skills. If a purchase or sale is still in progress, you can delete your account once it is complete.

Security

Passwords are stored as salted hashes. Connections to Skillsync use HTTPS. Assistants connect through OAuth, so they never see your password, and they get read-only access to your library that you can revoke at any time. No system is perfectly secure, but we work to protect your information.

Your rights and choices

  • Edit your profile, and change any skill’s visibility, at any time.
  • Disconnect any assistant in Settings.
  • Delete your account in Settings → Delete account.
  • Ask us for a copy of your information, or to correct or delete it, by writing to founders@skillsync.com. Depending on where you live, you may have other rights under local law, and we will honor them.

International transfers

Skillsync and our service providers may process information in the United States and other countries where they operate.

Children

Skillsync is not meant for children under 13, and we don’t knowingly collect information from them. If you think a child has given us information, contact us and we will delete it.

Changes

If we change this policy, we will update the date at the top of this page. If a change is significant, we will also tell you in the app.

Contact

Questions about privacy? Write to founders@skillsync.com. For help with your account, see Support.