Privacy notice

Palmai LLC, New Mexico, United States, operates Installskills. This notice covers the website, governance console, hosted connectors and direct MCP access. Privacy requests and legal notices may be sent to notifications@installskills.com.

We process account, authentication, vault membership, Customer Content, access, review, connection, security, audit, support and billing data. We use it to provide and secure the service, validate and distribute skill packages, administer access, prevent abuse, support customers and meet legal obligations.

Processing relies on contract, legitimate interests in operating a secure service, legal obligations and consent for optional features. Customers must have authority to submit Customer Content and should not add regulated or specially protected data unless an Enterprise agreement expressly permits it.

Palmai LLC is controller of account, billing, security and service-operation data. For Team and Enterprise Customer Content, the customer determines the purpose of processing and Palmai LLC acts as processor or service provider under the applicable agreement. We will enter into a data processing addendum where required.

Google Cloud services and other vetted subprocessors support infrastructure, authentication, service communications, security scanning and billing. Personal and Team use an EU primary Customer Content region. Enterprise residency commitments apply only when recorded in an order. Other limited processing may occur internationally under contractual safeguards, including Standard Contractual Clauses where required. A current subprocessor list is available to Enterprise customers.

Installskills applies vault membership, role and grant checks; stores direct keys as one-way hashes; and delivers approved packages through short-lived signed URLs with checksums. Security scanning supports release decisions but is not a guarantee that a package is risk-free.

After verified deletion, account and Personal Vault data is removed from active systems within 30 days and from backups within 90 days. Plan audit retention is 30 days for Team Free, 90 days for paid Team and as agreed for Enterprise. Security records may be retained up to 24 months and billing or tax records up to seven years. Legal holds and organization-controlled content may be retained when required.

Depending on location, individuals may request access, correction, deletion, restriction, objection or portability, withdraw consent and complain to a regulator. Requests should be sent to notifications@installskills.com and may require identity verification. Organization members may also need to contact their vault administrator.

We do not sell personal information or share it for cross-context behavioral advertising.

Installskills is for people aged 18 or older. We use technologies required for authentication, security, active-vault selection and interface preferences. Optional Google Analytics loads only after you select Allow analytics. It receives page paths, page titles and ordinary browser/device signals; Installskills excludes URL query strings, account identifiers, vault data, skill/package content and form values, and disables advertising signals.

Your analytics choice is stored in your browser and can be changed through Analytics settings in the public footer. Declining prevents the Google tag from loading. Withdrawing consent stops future analytics collection and removes Installskills Google Analytics cookies available to the browser.

We may update this notice when the service, providers or law changes. The revision date remains on this page and material changes will be communicated through an appropriate service channel.