Welcome to MuchSkills AB ("MuchSkills", "we", "us" or "our"). Your privacy matters to us. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and the choices you have when using the MuchSkills platform (the "Service"). For information about cookies on our public website, see our separate Website Cookie Policy.
1 Who we are
MuchSkills AB is a Swedish company (organisation no. 559282‑2521) headquartered at Andra Långgatan 7 A, 413 03 Gothenburg, Sweden. For the processing activities described in this Policy, we act as data controller.
E‑mail: privacy@muchskills.com
Mail: MuchSkills AB, Attn: Privacy, Andra Långgatan 7 A, 413 03 Gothenburg, Sweden
2 What personal data we process
We collect only the data necessary to operate, secure and improve the Service.
| Ref |
Context |
Definition |
| 2.1 |
Account creation |
Data: Name, e‑mail, login credentials, optional Google / LinkedIn IDs
Source: You or single‑sign‑on provider
|
| 2.2 |
Profile & skills |
Data: Skills, expertise level, certifications, career goals, profile photo, bio text
Source: You; organisation admins / managers; HRIS / API import
|
| 2.3 |
Usage & logs |
Data: Login timestamps, in‑app actions, error & security logs
Source: Collected automatically from your device
|
| 2.4 |
Communications |
Data: Support requests, feedback, newsletter preferences
Source: You
|
| 2.5 |
Organisation data |
Data: Admin contact details, aggregated team‑usage stats
Source: Employer / client organisation
|
3 Why we process your data (legal bases)
| Ref |
Purpose |
Definition |
| 3.1 |
Provide & administer your account |
Legal basis: Contract (Art. 6 (1)(b)) |
| 3.2 |
Maintain security & prevent abuse |
Legal basis: Legitimate interest (Art. 6 (1)(f)) |
| 3.3 |
Improve & develop features |
Legal basis: Legitimate interest |
| 3.4 |
Send onboarding / essential notices |
Legal basis: Legitimate interest / Contract |
| 3.5 |
Optional newsletters & events |
Legal basis: Consent (Art. 6 (1)(a)) |
| 3.6 |
Bookkeeping & legal compliance |
Legal basis: Legal obligation (Art. 6 (1)(c)) |
4 How we use the data
We use personal data to:
- create, secure and maintain your account and workspace;
- let you record, validate and showcase skills and certifications;
- match you with projects, roles or teams inside the organisations you join;
- deliver onboarding flows, support responses and product updates;
- generate anonymised analytics that help us improve the Service;
- meet legal and compliance requirements.
No third-party analytics, tracking pixels, fingerprinting, or profiling technologies are active inside the logged-in Service. Clients may export data via the MuchSkills API for their own analytics; they act as independent data controllers for such processing.
5 Use of artificial intelligence (AI)
Providers, such as OpenAI, operate under our instruction via written data processing agreements, including Standard Contractual Clauses and additional technical safeguards (e.g., strict API input filtering, no retention, no learning from data).
6 Sharing your data
We may share data:
- Within MuchSkills – authorised employees and contractors bound by confidentiality.
- With organisations you join – your profile is visible only inside workspaces you accept.
- With approved sub‑processors (see Section 7) under data‑processing agreements.
- With public authorities when legally required.
- In corporate transactions (e.g. merger or acquisition) – we will notify you.
We never sell personal data.
7 Sub‑processors and hosting
Your data is stored on EU servers provided by Amazon Web Services (Stockholm region). We also use:
- Intercom – in‑app chat and support (EU data centre)
- ActiveCampaign – optional e‑mail automation (Ireland)
- Google Workspace – business e‑mail & documents (EU)
- OpenAI API – AI skill suggestions (USA; SCCs + extra safeguards)
- Forest Admin – internal admin interface (EU-based, partial indirect access via secure proxy)
- MongoDB Atlas – managed cloud database (Stockholm, Sweden)
The full, current list is available in the Service and reviewed regularly.
8 International transfers
If data moves outside the European Economic Area, we rely on:
- an EU adequacy decision; or
- Standard Contractual Clauses plus technical and organisational safeguards (encryption, access controls, pseudonymisation).
9 Retention and deletion
- Self‑service deletion: Users can delete their profile under Profile › Settings › Delete Account; organisation admins can remove a workspace under Admin › Settings › Delete Organisation.
- Back‑ups: Encrypted and retained for up to 35 days before irreversible deletion.
- Logs: Security logs may be retained for up to 12 months for fraud detection and compliance.
10 Your rights
Under the GDPR you can:
- Access your data;
- Rectify inaccurate data;
- Erase data (“right to be forgotten”);
- Restrict processing;
- Object to processing based on legitimate interest;
- Port data to another provider;
- Withdraw consent at any time for optional e‑mails.
Contact privacy@muchskills.com. We reply within one month and may request proof of identity.
11 Cookies and tracking
The logged‑in Service sets only essential session cookies. We do not run external analytics scripts inside the platform. Cookie use on our public website is covered by the Website Cookie Policy.
12 Children’s privacy
The Service is intended for users 18 years and older. If we learn that we have collected personal data from a minor, we will delete it without delay. If you believe an underage individual has accessed the platform, please contact us. We will take immediate steps to investigate and remove associated data.
13 Changes to this policy
We may update this Policy from time to time. Material changes will be announced via in‑app notice or e‑mail at least 30 days in advance. The “Last updated” date at the top shows the current version.
14 Contact & supervisory authority
Questions or requests? E‑mail privacy@muchskills.com.
You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY):
Website: https://www.imy.se
Phone: +46 8 657 61 00
E‑mail: imy@imy.se
Thank you for using MuchSkills – we are committed to protecting your privacy and giving you clear control over your data.
