Privacy Policy

Last updated: November 2, 2026 · Beta

1. What we collect

When you create an account or use Aanya Cred, we collect:

  • Account details you provide: name, email address, phone number, role.
  • Authentication data from Google or GitHub if you sign in with those providers (name, email, profile ID — we never see your Google/GitHub password).
  • Repository data you submit for analysis: source code, commit history, and metadata from the GitHub repositories you choose to submit.
  • Usage data: submission history, scores, and reports generated by the platform.

2. Why we collect it

  • To create and secure your account (authentication, session management).
  • To analyze the repositories you submit and generate a deterministic skill score and an AI-generated explanation of that score.
  • To send you transactional email (verification codes, password resets) via our email provider.
  • To let recruiters you've shared your report with view your certificate and score, where you've enabled that.

3. How we use it

Your submitted code is cloned into a sandboxed environment, parsed, and scored by our own scoring engine. A summary of the resulting score (not your raw source code) may be sent to a third-party AI provider (e.g. Anthropic, OpenAI, or Google) to generate a natural-language explanation of the result. We do not use your data to train third-party AI models.

4. Third parties we share data with

  • Google / GitHub — only if you choose to sign in or connect a repository via OAuth.
  • Cloudflare Turnstile — bot/spam protection during registration.
  • Resend — our transactional email provider (verification, password reset emails).
  • AI providers (Anthropic / OpenAI / Google) — to generate explanations of your score, as described above.

5. Data retention

We retain your account data and submission history for as long as your account is active. Cloned repository contents are deleted from our servers after analysis completes; only the derived score, report, and metadata are retained.

6. Your rights

You can request a copy of your data or ask us to delete your account and associated data at any time by emailing us at the address below. During the beta, deletion requests are handled manually and we aim to complete them within 30 days.

7. Security

We use industry-standard measures to protect your data, including encrypted connections (HTTPS), hashed passwords, and access controls on our infrastructure. No system is perfectly secure, and we encourage you to use a strong, unique password.

8. Contact

Questions about this policy or your data? Email us at privacy@skillpassport.tech.