Privacy policy
Last updated September 9, 2026 · Operated by Gadoci Consulting
Skillhouse is a workspace where a company's teams propose, review, and publish Claude skills to their own GitHub repository. This policy explains what we collect to run it, how we use it, and the choices you have. We keep it short on purpose; if anything is unclear, email us.
Who we are
Skillhouse is operated by Gadoci Consulting LLC (“we”). For privacy questions, contact bg@gadociconsulting.com.
What we collect
- Account details. Your name, email address, and profile picture as provided by the sign-in method you choose (email link, Google, or Microsoft). We use them to identify you inside your company's workspace.
- Workspace content. The skills, proposals, review notes, and settings that people in your workspace create. This content belongs to your company.
- Activity records. An audit log of who proposed, reviewed, approved, published, or changed settings, with timestamps. Workspace administrators can see it; it exists so changes to shared skills are accountable.
- GitHub connection. When an administrator connects a repository, we store the GitHub App installation ID and repository name so we can read and publish skill files there. We never see GitHub passwords.
- Technical data. Standard server logs (IP address, browser, request time) kept by our hosting provider for security and troubleshooting.
We do not use advertising trackers or sell personal information.
How we use it
- To sign you in and show you the workspaces you belong to.
- To run the review workflow: notifying reviewers, recording decisions, and publishing approved changes to your repository.
- To generate optional AI review summaries. When a workspace turns this on, the proposed skill text and the requester's reason are sent to Anthropic's Claude API to produce a summary and risk notes for the reviewer. Workspace administrators can turn this off in Settings.
- To send transactional email: sign-in links, invitations, and review notifications. We do not send marketing email from Skillhouse.
Where it lives and who processes it
Skillhouse runs on Vercel (application hosting), MongoDB Atlas (database), SendGrid (email delivery), GitHub (your repository), and Anthropic (AI summaries, when enabled). Each acts as a processor on our instructions. Data is stored in the United States.
Sign-in with Google or Microsoft
If you sign in with Google or Microsoft we request only your basic profile: name, email address, and picture. We use it solely to create and identify your account. We do not request access to your files, mail, or calendar. Skillhouse's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Retention and deletion
Workspace content and audit records are kept for as long as the workspace exists. When a company ends its use of Skillhouse, we delete its workspace within 30 days of the request. To remove your own account, ask your workspace administrator or email us; we delete account details within 30 days, while audit entries keep a record that an action happened without your personal details.
Security
Access is restricted to invited members of a workspace. Data is encrypted in transit and at rest by our providers, secrets are encrypted at the application level, and every request is scoped to a single workspace. No system is perfectly secure; if you believe you have found a vulnerability, please email us.
Your rights
You can ask us to show, correct, or delete the personal information we hold about you. Email bg@gadociconsulting.com and we will respond within 30 days.
Changes
If we change this policy in a way that matters, we will note the new date at the top and, for significant changes, tell workspace administrators by email.