Privacy Policy

Datenschutzerklärung — Zuletzt aktualisiert: Mai 2026

1. Overview

SkillExchange ("we", "us", "our") operates the website skillexchange.market. This page informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service and the choices you have associated with that data.

2. Data Controller

The data controller responsible for your personal data is:
Ultrion
E-Mail: contact@ultrion.de

3. Information We Collect

We collect information in the following ways:

  • Account Data: Name, email address, and profile information when you sign up via GitHub or Google OAuth.
  • Transaction Data: Payment and payout records processed through Stripe Connect.
  • Usage Data: Skill usage metrics, API call logs, and analytics data.
  • Technical Data: IP address, browser type, device information collected automatically.

4. How We Use Your Data

We use collected data to:

  • Provide and maintain our marketplace service
  • Process transactions and manage payouts
  • Build trust and reputation scores
  • Communicate with you about your account and transactions
  • Improve our platform and user experience
  • Ensure security and prevent fraud

5. Legal Basis (DSGVO / GDPR)

We process your personal data on the following legal bases:

  • Contract Performance (Art. 6(1)(b) GDPR): To fulfill our contractual obligations when you use our service.
  • Legitimate Interest (Art. 6(1)(f) GDPR): For security, analytics, and service improvement.
  • Consent (Art. 6(1)(a) GDPR): When you have given explicit consent for specific processing activities.

6. Data Sharing

We share data with the following third parties:

  • Stripe: For payment processing and payout management (Stripe Privacy Policy applies).
  • GitHub / Google: For OAuth authentication (respective privacy policies apply).
  • Vercel: For hosting and deployment (Vercel Privacy Policy applies).

We do not sell your personal data to third parties.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes described in this policy, or as required by law. Transaction data is retained for the legally required period (typically 10 years for tax purposes in Germany).

8. Your Rights

Under GDPR, you have the right to:

  • Access your personal data (Art. 15 GDPR)
  • Rectify inaccurate data (Art. 16 GDPR)
  • Erasure of your data (Art. 17 GDPR)
  • Restrict processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Object to processing (Art. 21 GDPR)

To exercise any of these rights, contact us at contact@ultrion.de.

9. Cookies

We use essential cookies for authentication (session tokens) and CSRF protection. We do not use third-party tracking cookies. Analytics are collected server-side only.

10. Security

We implement appropriate technical and organizational measures to protect your personal data, including encryption in transit (TLS), encrypted data storage, and access controls.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "last updated" date.

12. Contact

For any questions about this Privacy Policy, contact us at:
E-Mail: contact@ultrion.de