PowerlevelPowerlevel

Privacy Policy

Last updated: March 9, 2026

1. Introduction

Powerlevel ("we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at powerlvl.me ("the Platform").

2. Information We Collect

Information You Provide

  • Account data: name, email address, and authentication credentials (Google OAuth or email OTP)
  • Profile data: career profile information, work history, education, and certifications you choose to enter
  • Resume data: if you upload a resume for skill extraction, we store the file and parsed content
  • Learning data: course progress, quiz responses, SCORM interactions, badge achievements, and skill records
  • AI conversations: messages you exchange with our AI tutor and career coach

Information Collected Automatically

  • Usage data: pages visited, features used, session duration, and interaction patterns
  • Device data: browser type, operating system, IP address, and device identifiers
  • Cookies: session cookies for authentication and analytics cookies for platform improvement (see Section 7)

3. How We Use Your Information

We use your information to:

  • Provide, maintain, and improve the Platform
  • Personalize your learning experience, including AI tutoring and career recommendations
  • Track your skill development and issue verifiable digital badge credentials
  • Analyze learning patterns to improve course content and AI responses
  • Process subscription payments through Stripe
  • Send transactional emails (OTP codes, enrollment confirmations, learning reminders)
  • Detect and prevent fraud, abuse, and security threats
  • Comply with legal obligations

4. AI Data Processing

Our AI features (tutor, career coach, skill analysis) process your learning data and conversation history to provide personalized guidance. Specifically:

  • AI conversations are stored to maintain context across sessions and improve response quality
  • Learner memory profiles are created from interaction patterns to personalize tutoring style
  • Your data is sent to Anthropic's API for AI processing; Anthropic does not use this data to train their models
  • AI-generated insights (knowledge gaps, career recommendations) are stored in your account

5. How We Share Your Information

We do not sell your personal information. We share data only in these circumstances:

  • Service providers: Stripe (payments), AWS (hosting and storage), Anthropic (AI processing), Vercel (deployment), Neon (database)
  • Badge verification: when you share a badge, the verifier can access the badge metadata and your name via the Open Badges 3.0 API
  • Public portfolio: if you enable a public skills passport, your badges and skill data are accessible via your portfolio URL
  • Legal requirements: when required by law, regulation, or legal process

6. Data Security

We implement industry-standard security measures to protect your data, including:

  • Encryption in transit (TLS) and at rest
  • Row-level security in our database for tenant isolation
  • Secure authentication via OAuth 2.0 and time-limited OTP codes
  • Regular security reviews and dependency updates

No method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Cookies

We use the following types of cookies:

  • Essential cookies: required for authentication and core Platform functionality
  • Analytics cookies: help us understand how the Platform is used (Google Analytics)

You can control cookies through your browser settings. Disabling essential cookies may prevent you from using the Platform.

8. Data Retention

We retain your data for as long as your account is active or as needed to provide services. Specifically:

  • Account and learning data: retained until you delete your account
  • AI conversation history: retained for up to 12 months, then summarized
  • AI usage logs: retained for billing and analytics purposes
  • Badge credentials: retained indefinitely as verifiable records (unless revoked)

Upon account deletion, we delete or anonymize your personal data within 30 days, except where retention is required by law.

9. Your Rights

Depending on your location, you may have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate or incomplete data
  • Delete your account and associated data
  • Export your data in a portable format
  • Object to or restrict certain processing activities
  • Withdraw consent where processing is based on consent

To exercise these rights, contact us at privacy@powerlvl.me. We will respond within 30 days.

10. Children's Privacy

Powerlevel is not intended for children under 16. We do not knowingly collect personal information from children under 16. If we learn that we have collected data from a child under 16, we will delete it promptly.

11. International Data Transfers

Your data may be processed in the United States and other countries where our service providers operate. We ensure appropriate safeguards are in place for international transfers in accordance with applicable data protection laws.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a new "Last updated" date. Your continued use of the Platform constitutes acceptance of the updated policy.

13. Contact

For privacy-related questions or requests, contact us at privacy@powerlvl.me.