Legal

Who we are

Plan2Skill is currently operated by a solo founder. An Estonian OÜ (private limited company) is in the process of being incorporated and will be the legal entity of record before any paid tier launches. Until incorporation is complete, the data controller is the individual operating Plan2Skill. For all data-subject requests, write to privacy@plan2skill.com.

What data we collect

We collect the following categories of personal data:

• Account data: Email address, chosen display name, locale preference.
• Learning data: Quest completion records, cognitive-graph edges and weights, session timestamps, response correctness (not raw text responses for open-ended questions).
• Technical data: IP address (anonymised after 24 hours), browser type, device type, operating system. We do not fingerprint devices.
• Communications: Emails sent to any plan2skill.com address are retained for up to 24 months.

Legal basis for processing (GDPR Art. 6)

We process personal data under the following legal bases:

• Art. 6(1)(a) — Consent: Analytics data collected via PostHog and Sentry, when you have accepted cookies via our cookie consent banner.
• Art. 6(1)(b) — Contract performance: Account data and learning data necessary to provide the Plan2Skill service.
• Art. 6(1)(f) — Legitimate interests: Basic server-side logging necessary to operate and secure the service. Our legitimate interest is the secure operation of the platform. You may object to this processing under GDPR Art. 21.

Data recipients

We share data with the following third-party processors, under Data Processing Agreements where required by GDPR:

• Cloudflare: DNS, CDN, and DDoS protection. EU-based data processing where required. Cloudflare Privacy Policy.
• MailerLite: Email list management for waitlist and onboarding sequences. MailerLite Privacy Policy.
• Resend: Transactional email delivery (account verification, notifications). Resend Privacy Policy.
• Sentry: Error monitoring and performance tracing. Enabled only with cookie consent. Sentry Privacy Policy.
• PostHog: Product analytics. Enabled only with cookie consent. EU cloud instance. PostHog Privacy Policy.

We do not sell data to any third party. We do not share data with advertising networks.

For US-based processors (Resend, Sentry), data transfers are governed by the EU-US Data Privacy Framework and Standard Contractual Clauses (SCCs) where applicable.

Retention

We retain personal data for 24 months from last activity, or until Estonian OÜ incorporation triggers a formal retention schedule review, whichever comes first. Learning data (cognitive graph, quest history) may be retained longer at your explicit request, to preserve your progress record.

Your rights

Under GDPR, you have the right to: access your data (Art. 15), correct it (Art. 16), erase it (Art. 17), restrict processing (Art. 18), data portability (Art. 20), and object to processing (Art. 21). To exercise any of these rights, write to privacy@plan2skill.com. We will respond within 30 calendar days.

You also have the right to lodge a complaint with your national data protection authority. In the EU, the list of authorities is available at edpb.europa.eu. In the UK, the relevant authority is the ICO: ico.org.uk.

Acceptance

By creating a Plan2Skill account, you agree to these terms. If you do not agree, do not use the service.

Service description and alpha status

Plan2Skill is an educational platform in alpha. The service is provided free of charge during alpha. Features may change, be removed, or be unavailable without notice. We do not guarantee uptime during alpha. A paid tier will be introduced at a future date — existing users will be given adequate notice before any free tier is modified or removed.

Acceptable use

You agree not to:

• Use the service to generate, distribute, or store unlawful content.
• Attempt to reverse-engineer, scrape, or extract training data from the platform.
• Create accounts for automated use without our written permission.
• Impersonate other users or our team.
• Use the service in any way that damages, disables, or impairs the platform or other users' experience.

Your content

You retain ownership of any content you submit (open-text responses, notes). By submitting content, you grant us a non-exclusive, royalty-free licence to process and store it for the purpose of delivering the service. We do not use your content to train LLMs without your explicit, separately obtained consent.

Our content

All AI-generated quest content is generated on-demand and is not owned by us or you in the traditional sense. We grant you a non-exclusive licence to use generated quest content for personal learning purposes.

Limitation of liability

Plan2Skill is provided "as is" during alpha. We are not liable for any loss or damage arising from use of the service during alpha, except where liability cannot be excluded by law.

Termination

We may suspend or terminate accounts that violate these terms, with notice where possible. You may delete your account at any time via account settings or by writing to privacy@plan2skill.com.

Changes to terms

We will notify registered users by email of material changes to these terms, with at least 14 days' notice before the changes take effect.

Essential cookies (no consent required)

These cookies are strictly necessary to operate the service. They cannot be disabled.

• Session cookie: Keeps you logged in. Expires when you close your browser or after 30 days, whichever comes first.
• Consent cookie: Remembers your cookie consent choice for 6 months (CNIL-aligned duration).

We use Cloudflare Web Analytics for basic traffic measurement on the landing site. Cloudflare Web Analytics is cookieless — it does not set cookies and does not fingerprint visitors. No consent is required.

Analytics cookies (consent required)

If you accept all cookies via the consent banner, we enable:

• PostHog: Product analytics — page views, feature usage, funnel analysis. Session stored in local storage. EU cloud instance. Expires: 1 year.
• Sentry: Error monitoring and performance tracing. Enables us to detect and fix bugs faster. Session-scoped.

Consent management

Your consent is valid for 6 months. After 6 months, we will ask again. You can withdraw consent at any time by clearing your cookies or by clicking "Cookie settings" in the footer. Withdrawal of consent does not affect the lawfulness of processing that occurred before withdrawal.

How to manage cookies

All major browsers allow you to view, delete, and block cookies. See your browser's help documentation for instructions. Note that blocking essential cookies will prevent you from logging in.

Plan2Skill uses artificial intelligence to generate educational content including quests, exercises, and assessments.