Privacy Policy

Depending on how you use the Platform, we may process:

• Account and identity data: when you sign in with OAuth providers (e.g., GitHub, Google), we may receive email, display name, principal ID, avatar URL, and similar fields returned by the identity provider.
• Usage and device data: access logs, IP address, browser type, request time, page/API paths, and cookies or similar technologies used for sessions.
• User content: Skill packages you upload or publish (ZIP bundles, docs, metadata, versions) and related descriptions.
• Security scan data: status, risk scores, and finding summaries produced by automated content security analysis of Skill packages.
• Admin and audit records: role changes, admin actions, and audit logs for security and compliance.

We process personal data to:

• Provide authentication, session management, authorization, and personalized UI.
• Host, index, search, and distribute Skills you publish or favorite.
• Run content security scanning, abuse prevention, and platform integrity checks.
• Improve features and measure usage in aggregate or de-identified form where practical.
• Comply with law, respond to lawful requests, and protect users, the Platform, and the public.

Sign-in relies on identity providers (e.g., GitHub, Google, enterprise OIDC). Those providers process your data under their own policies; we receive only what is needed to create and maintain your account session.

CLI installs, external docs, or community repositories may be subject to third-party terms and privacy policies.

We use cookies or equivalent mechanisms to maintain login sessions, remember locale/preferences, and help protect the service. Blocking cookies may prevent sign-in or break features.

Account data and Skill metadata are stored in configured databases and object storage. Access across networks or regions may involve transfers with reasonable safeguards.

We retain data for as long as needed to provide the service and operate your account. After deletion or account closure, we delete or anonymize within a reasonable period, except where retention is required for disputes, security, or legal obligations.

We apply reasonable technical and organizational measures, including access controls, encryption in transit where applicable, audit logging, and automated scanning of uploads. No online system is perfectly secure. Do not embed secrets, passwords, or sensitive personal data in Skills or documentation.

We do not sell your personal information. We share data only with infrastructure/vendors needed to run the service, with your consent, as required by law, or when necessary to protect rights, property, or safety.

Where applicable law grants rights of access, correction, deletion, or withdrawal of consent, you may contact us (identity verification may be required). Public Skills already downloaded by others may not be fully retractable.

Use the footer Support channel to submit privacy requests.

The service is intended for adults and organizations with legal capacity, not for children under 16. If we learn we collected a child’s data without appropriate consent, we will delete it promptly.

We may update this policy from time to time. Material changes will be indicated by updating the effective date and/or site notice. Continued use after changes means you accept the revised policy.