SkillPass privacy notice

Account and profile information such as your name, email address, phone number, location, role, employer company details, and worker photograph.

Electrician assessment answers, deterministic scores, preliminary AI-assisted scenario evaluations, safety flags, human reviewer decisions, and audit records.

Basic operational and security information needed to authenticate users, prevent abuse, diagnose errors, and protect the service.

SkillPass uses this information to operate accounts, save worker onboarding, administer electrician assessments, support human verification decisions, publish approved SkillPass credentials, and let employers search verified electricians.

Public profiles are limited to an approved credential snapshot. Email addresses, private phone numbers, assessment answers, AI reasoning, admin notes, authentication data, and internal identifiers are not included.

When a worker explicitly consents, SkillPass sends each scenario question, competency, scoring rubric, and worker answer to OpenAI from the server. The response is validated and stored only as preliminary evidence for a human reviewer.

OpenAI does not make the verification decision and cannot change verification status. Workers should not put names, contact details, addresses, or other unnecessary personal information in scenario answers.

SkillPass requests that OpenAI not store application state for these evaluations. OpenAI may still retain limited abuse-monitoring data under its API data controls. Deployment owners must review their configured OpenAI data controls before launch.

Worker photographs are stored privately during onboarding. When an admin approves verification, SkillPass publishes a processed photograph and an immutable snapshot of the identity, location, experience, and scores reviewed at approval time.

Later private-profile edits do not silently change the active public credential. A revoked or rejected credential is removed from public profile and employer-search results.

SkillPass uses access controls, Row Level Security, server-side authorization, private storage, admin multi-factor authentication, and audit records. No internet service can promise absolute security.

Assessment and decision records are retained for verification audit and safety review. Before public launch, the service operator must publish a final retention schedule and a working privacy contact appropriate for Nigeria.