Privacy Policy
1. What we collect
When you sponsor a skill, commission work, request access, or contact hermosskills, we collect:
| What | When | Why |
|---|---|---|
| Name (optional) | If you give it to us | To greet you and address receipts |
| Email address | Sponsorship, commission, or contact form | To deliver receipts, renewal notices, and editorial updates |
| Billing address | Stripe checkout | Stripe uses this for tax/invoice purposes |
| Payment confirmation | At checkout | To fulfill your transaction. Card numbers go to Stripe, not to us |
| Sponsorship selection | When you sponsor | To route the funds and credit the right skill's maintainer |
| Commission scoping notes | After your deposit clears | To scope the project with the maintainer |
| Credit line / logo (Founding Sponsors) | When you provide it | To render your Founding Sponsor credit on the skill's page |
| Support emails | When you email us | To help you |
2. What we never see
This is the section most people skim, so it gets its own:
- We do not see the prompts you run against any skill in the catalog.
- We do not see the outputs the skills produce for you.
- We do not see API keys, model endpoints, or other infrastructure details of the agents you operate.
- We do not read the contents of repositories, datasets, or documents you load into a skill.
hermosskills is a marketplace and editorial layer. The agent workflows where skills are used run on your own infrastructure, not on our servers. If you ever feel we have crossed that line, contact us immediately.
3. How we use what we collect
We use the data listed in section 1 to:
- Process sponsorship and commission payments.
- Route maintainer payouts and the 30% public-good rebate.
- Send transactional emails: receipts, renewal notices, tax documents, editorial briefings.
- Publish the optional Founding Sponsor credit on skill pages.
- Comply with US tax and business law (we keep payment records for 7 years, as required by the IRS).
We do not use your data for advertising. We do not use your data to train any AI model. We do not sell or "rent" your data to anyone, ever.
4. Who we share it with
We share your data only with the vendors we use to run the business, and only the minimum they need:
| Vendor | What they get | Why |
|---|---|---|
| Stripe | Payment info, basic profile | To process your payment. See Stripe's privacy policy. |
| Cloudflare | Site traffic logs | To run the website. Logs auto-delete after 30 days. |
| Sponsored skill maintainer | Your first name and email (only after you explicitly sponsor) | So they can credit the sponsor and, for sponsorships above a tier, send occasional updates you can unsubscribe from |
| Commission maintainer | Your scoping notes | To scope and execute the commission |
| Public-good rebate recipient | Aggregate, anonymized funding totals | To report on the rebate program. We never share individual sponsor data. |
| Email service (Google Workspace) | Your correspondence | To reply to you. |
We will also share data if a US court orders us to, but we will challenge overly broad requests and notify you if legally permitted.
5. Cookies and analytics
The hermosskills site uses only strictly necessary cookies and local storage (for things like "you have dismissed the funding banner"). We do not use Google Analytics, Meta Pixel, or any third-party advertising trackers.
If we add analytics in the future, we will update this policy and ask for consent where required by your state's law.
6. Your rights under US state privacy laws
If you live in California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, Iowa, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky, Rhode Island, or another state with a comprehensive privacy law, you have the right to:
- Know what personal data we have about you.
- Delete it, subject to the exceptions in section 7.
- Correct inaccurate data.
- Port your data in a machine-readable format.
- Opt out of sale or sharing — we don't sell or share, so this is automatic.
- Non-discrimination for exercising your rights.
To exercise these rights, use the Hermosskills privacy contact form from the address on file. We will respond within 45 days.
California "Shine the Light" (Civil Code § 1798.83): we do not share your data with third parties for their direct marketing purposes.
7. How long we keep it
| Category | How long | Why |
|---|---|---|
| Payment records (receipts, Stripe transaction IDs) | 7 years | US tax law (IRS) |
| Sponsorship status | For the life of the sponsorship + 2 years | Handle renewals, refunds, disputes |
| Commission projects (SOW, deliverables, correspondence) | 4 years after project close | Warranty lookback and dispute window |
| Customer-support emails | 3 years after last contact | Reasonable lookback for follow-ups |
| Founding Sponsor credit (name/logo) | For the life of the Founding Sponsorship + 90 days | Remove promptly upon cancellation |
When the retention period ends, we delete the data within 30 days. If you ask us to delete sooner, we will — except for records we are legally required to keep (tax records), which we isolate from anything that can be used to contact you.
8. How we protect it
We use industry-standard safeguards: TLS for all data in transit, encrypted storage at rest, and access limited to the project owner (Pete) plus a single, password-managed Cloudflare account. Stripe is PCI-DSS Level 1 certified.
No system is 100% secure. If we ever discover a breach affecting your data, we will notify you within 72 hours by email and post a notice on this page.
9. Children's privacy
hermosskills is intended for adult developers, founders, and operators. We do not knowingly collect data from anyone under 16. If we learn we have, we will delete it within 30 days.
10. Changes to this policy
If we change this policy in a material way, we will update the "Effective" date, post a banner on the home page, and email active sponsors. Non-material changes (typos, clarifications) will be made silently.
11. Contact
hermosskills is a project of Peter Bjork. You can reach the data controller at:
- Privacy contact form: Hermosskills privacy request
- Select Privacy/data request so it gets routed quickly.
For complaints, you also have the right to contact your state attorney general or the US Federal Trade Commission.
This is a plain-language privacy policy. It is not legal advice. If you have specific legal questions, consult a lawyer licensed in your state.