Skillshare uses your name, email, location, IP address, and activity data under a legal basis called legitimate interests, which covers a broad range of purposes including marketing, business analytics, and corporate transactions, without requiring your explicit consent for each.
This analysis describes what Skillshare's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Legitimate interests is a flexible legal basis that does not require user consent, and its application to marketing and corporate transaction purposes may be subject to challenge under GDPR if the balancing test does not adequately weigh user privacy interests against Skillshare's business interests.
Interpretive note: Application varies by jurisdiction; the legitimate interests balancing test is a GDPR-specific concept and its adequacy in any specific case depends on supervisory authority interpretation and documented assessment.
Your personal data including your name, email address, and detailed usage activity may be processed for marketing, business analytics, and corporate transaction purposes without explicit consent, relying instead on Skillshare's self-assessed legitimate interest determination.
Cross-platform context
See how other platforms handle Legitimate Interests Processing Basis and similar clauses.
Compare across platforms →Monitoring
Skillshare has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"We process the following categories of Personal Data when we believe it furthers the legitimate interest of us or third parties: first and last name, email address, location information, IP address, and your activity on the Services, including class usage information and community interaction data. Examples of these legitimate interests include: operation and improvement of our business, products, and services; personalization of web content on the Services; analyzing the use of the Services; marketing of our products and Services; provision of customer support; protection from fraud or security threats; compliance with legal obligations; and completion of corporate transactions.— Excerpt from Skillshare's Skillshare Privacy Policy
REGULATORY LANDSCAPE: This provision directly engages GDPR Article 6(1)(f), which requires a legitimate interests assessment balancing the controller's interests against data subjects' rights and expectations. EU/EEA supervisory authorities have scrutinized overbroad legitimate interests claims, particularly where applied to marketing and behavioral analytics. Data subjects in the EU/EEA retain the right to object to processing under Article 21. The FTC Act is relevant to the extent that legitimate interests processing supports advertising and marketing practices directed at US consumers. GOVERNANCE EXPOSURE: Medium. The policy's application of legitimate interests to marketing purposes is an area of active EU regulatory scrutiny. The inclusion of corporate transactions as a legitimate interest purpose is operationally consequential and has been noted in the context of the Superpeer acquisition. The policy does not provide a documented legitimate interests assessment, which GDPR best practice recommends maintaining. JURISDICTION FLAGS: EU/EEA users have the right to object to legitimate interests processing under GDPR Article 21, and Skillshare must provide a means to exercise this right. UK users face similar requirements under UK GDPR. California and other US state privacy laws do not use the legitimate interests framework directly but may impose opt-out rights for certain data uses covered by this provision, such as targeted advertising. CONTRACT AND VENDOR IMPLICATIONS: Enterprise customers subject to GDPR who rely on Skillshare as a data processor should confirm whether legitimate interests processing by Skillshare is consistent with their own legal basis determinations. Data processing agreements should address the scope of legitimate interests processing and whether sub-processor activities are covered. COMPLIANCE CONSIDERATIONS: A documented legitimate interests assessment should be prepared and maintained for each processing purpose claimed under this legal basis, particularly marketing and corporate transactions. The policy should be reviewed to confirm that GDPR Article 21 objection rights are operationally supported and that a mechanism for EU/EEA users to object to legitimate interests processing is clearly accessible. Ongoing review is warranted as EU supervisory guidance on legitimate interests continues to evolve.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
Legitimate interests is a flexible legal basis that does not require user consent, and its application to marketing and corporate transaction purposes may be subject to challenge under GDPR if the balancing test does not adequately weigh user privacy interests against Skillshare's business interests.
Your personal data including your name, email address, and detailed usage activity may be processed for marketing, business analytics, and corporate transaction purposes without explicit consent, relying instead on Skillshare's self-assessed legitimate interest determination.
ConductAtlas has identified this type of provision across 1 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Skillshare.