Terms of Use and Sale
Last updated: 10 November 2026
1. Provider, scope and contract documents
hilighter, available at hilighter.io and app.hilighter.io (the “Service”), is provided by SkillsBoard SAS, registered with the Boulogne-sur-Mer Trade and Companies Register under number 978 379 709 (SIRET 978 379 709 00014), whose registered office is 509 avenue des Églantines, 62176 Camiers, France (“SkillsBoard”). Contact: contact@hilighter.io. Full company details appear in the Legal Notice.
These terms apply to independent individuals and organizations of any legal type, including businesses, associations, institutions, public bodies where permitted by law, and self-employed professionals, together with their authorized users. A person creating an organization workspace represents that they are entitled to bind that organization. Personal accounts and organization workspaces are distinct, even if accessed using the same credentials.
Depending on the circumstances, the accepted order form, plan and feature description presented before purchase, the Data Processing Agreement (DPA) governing processing on behalf of organizations, the Privacy Policy, and the cookie notice also apply. In the event of a conflict, a signed order takes precedence on negotiated commercial matters, the DPA on processor obligations, and these terms otherwise. The Privacy Policy is a transparency notice, not general consent to processing.
2. Service and availability of features
hilighter offers job and skills mapping, skills matrices, personal profiles, evidence of learning and work, self-assessment, AI-assisted suggestions of skills and proficiency levels, review and validation by authorized managers, development pathways and team-level insights. The contracted plan and current service description determine the features included. Features labelled “coming soon”, experimental or beta are not included until expressly released and may be governed by additional terms.
3. Independent accounts, organization workspaces and access
The Service is intended for adults aged 18 or over. Each user may maintain an independent personal account, with or without membership in an organization. Independent users may use the personal Free features. As of this version, paid subscriptions are available only to organizations, including organizations of any legal form and freelancers acting professionally through an organization workspace. The Service does not currently offer paid consumer subscriptions.
An organization may appoint administrators and managers, assign roles, learning journeys and skills, and record authorized assessments. It must manage staff access and remove workspace permissions when appropriate. Users are responsible for account accuracy and credentials. Leaving an organization ends the workspace relationship, not the user's independent personal account. Anyone accepting an organizational paid order warrants they are authorized to bind that organization.
4. Personal portfolio versus employer-managed records
The personal portfolio includes user-managed skills, self-assessments, CVs, experience, personal evidence and learning records. Skills added by an employer and manager-validated skill levels remain available in the individual's skills profile when they leave, with provenance and date, subject to lawful restrictions on associated confidential material. A user may add, remove or self-assess personal skills; those edits do not necessarily erase lawfully retained organizational history.
An organization workspace contains its job roles, skills frameworks, professional assignments, internal comments, assessments and confidential evidence. Assigning a role or a learning journey to a role can automatically add associated skills and journey requirements to employees occupying that role. Company-submitted evidence of achievements can update the employee's linked skill levels under the product's validation rules. The interface should show the source and history of each such update; employers cannot browse unrelated personal profile information without the user's action or a separate lawful basis.
Employee-authored AI assessments, evidence and certificates remain in their personal portfolio, subject to third-party rights. Employer-authored or employer-submitted documents and evaluation records remain portable only to the extent authorized by the organization or required by law. Validated skill levels may remain as context-labelled achievements even where the underlying confidential document stays restricted. Data protection rights override settings and allocation rules.
5. Obligations of organizations
Organizations determine the purpose and lawful basis for employment-related assessments, inform staff, restrict permissions, apply employment and anti-discrimination law, and consult employee representatives where required. They must ensure uploaded data and documents are lawful, relevant and appropriately minimized, with no unnecessary sensitive content. Covert workforce monitoring, discriminatory use and hidden disciplinary scoring are prohibited. Each organization remains responsible for employment and career decisions relating to its staff and contractors.
6. Artificial intelligence and skills assessment
AI supports role creation, skill extraction, CV and achievement evidence review, indicative proficiency levels and learning recommendations. Outputs may be wrong, incomplete or biased. AI suggestions, self-assessments and manager/admin validations are distinguished. An employee may see AI suggestions and the manager's recorded validation. hilighter does not currently have an in-app assessment appeal workflow; the user can update or remove personal skills and retains statutory rights to data rectification and, where legally applicable, human review of an Article 22 GDPR decision.
Organizations and their authorized managers must review evidence and remain responsible for skills validation and all employment decisions, including recruitment, promotion, compensation, performance management, discipline and termination. Unlawful solely automated or discriminatory decisions are prohibited. Skills-based performance review is an intended future product use and current workplace skill evaluation is an intended use; both require an independent EU AI Act and employment-law risk assessment. Human confirmation does not automatically remove a system from high-risk AI classification.
SkillsBoard currently invokes OpenAI APIs to deliver AI functions and does not voluntarily opt in to general model training on customer content. API request processing, possible logging, retention and international transfers are described in the Privacy Policy.
7. Content rights, confidentiality and no sale of profiles
Users and organizations retain their respective rights in uploaded content, subject to third-party rights. They grant SkillsBoard a limited permission to process content as necessary to deliver, secure, support and back up the Service, and for other specifically authorized lawful purposes. SkillsBoard does not sell or deliver identifiable email addresses, individual profiles, skills or assessment records to advertising partners for their marketing. Authorized staff and service providers are bound by appropriate confidentiality obligations. SkillsBoard will not knowingly authorize its AI provider to use customer content for model training without a separate lawful basis and authorization. SkillsBoard documents the applicable OpenAI configuration in its internal processing records and updates this notice when that configuration changes materially.
8. Optional partner marketing
During registration, individuals may choose, through a separate unchecked box, whether to receive emails sent by SkillsBoard about training, learning programs and relevant partner services. Subscription to such communications is optional, does not affect ordinary account access or pricing, and can be withdrawn at any time in account settings or through the unsubscribe link in every email. SkillsBoard sends campaigns itself and does not disclose identifiable contact details or profiles to partners.
Initial targeting may use job role and skills lawfully held by SkillsBoard as controller of the individual's personal portfolio. Targeting based on proficiency levels is not activated under this version and would require clear advance notice and, where needed, a renewed lawful consent. Employer-provided records accessed by SkillsBoard solely as processor will not be repurposed for its own marketing simply because an employee opts in. A separate lawful authorization and framework would be needed. Organizations may opt out of partner promotions inside their workspace without overriding individuals' independent communication choices outside it.
9. Plans, fees and fair use
The Free, Starter, Growth, Business, Scale and Enterprise plans, or any successor plans, have the features and active job-role limits stated in the accepted order or published plan description. Individual personal accounts are Free; paid plans are currently for organizations only. "Unlimited employee profiles" does not mean unlimited AI computations, API calls or uploaded-file storage.
The Service may limit automated scraping, unreasonable API traffic, excessive bulk file processing or other objectively disproportionate activity. Where feasible, SkillsBoard gives warning and an opportunity to reduce use or purchase a suitable capacity arrangement before imposing a proportionate restriction. Binding numerical quotas must be disclosed before purchase or agreed later; no secret threshold creates unexpected fees. Fair-use mechanisms cannot deprive a customer of the plan's essential promised functionality.
10. Payments, renewals and plan changes
Current billing is manual through ordinary SkillsBoard SAS invoices under the accepted quotation or order. Stripe checkout is under development and is not currently available. Fees, VAT where applicable, due dates and currency appear in the accepted order or invoice. Where offered, monthly plans renew monthly and annual plans renew for 12-month periods; any annual discount is shown before acceptance.
Upgrades follow the agreed order and any agreed prorating. Downgrades normally take effect at the next renewal. For non-payment, SkillsBoard gives notice and a reasonable opportunity to cure before proportionate suspension; late-payment B2B rules are applied in accordance with French law. Future online or paid consumer checkout must not be switched on until mandatory all-tax-inclusive pricing, pre-contract information, withdrawal, digital-service conformity, online cancellation, and consumer dispute processes have been implemented.
11. Cancellation, Free accounts, deletion and data exit
Cancelling an organizational subscription, leaving an organization and deleting a personal account are separate acts. Current paid monthly subscriptions can be stopped at the end of their monthly period and annual subscriptions at renewal, subject to the accepted order and mandatory law. Until online sales are deployed, cancellation requests are sent to contact@hilighter.io and acknowledged in writing. Where a paid workspace continues under Free it retains its data, but roles exceeding the Free plan limit become read-only, allowing administrators to select active roles.
Users retain their independent personal Free accounts after leaving an employer, unless they personally request deletion or lawful termination applies. To request data export, email contact@hilighter.io identifying the account or organization workspace. SkillsBoard verifies identity and authority, separates employee personal records from restricted employer data and targets export delivery within 30 days unless mandatory law or applicable provider-switching arrangements require different timing. Where appropriate, delivery uses secured CSV/JSON exports with relevant metadata, original portable files and a time-limited secure link.
After a verified deletion request, the target is to erase or anonymize eligible active data within 30 days, subject to lawful retention and rights of others. Daily database backups are retained for 30 days; restoration procedures must prevent unintended revival of erased records. S3 uploaded files currently lack an automatic global expiry, so deletion requires explicit object removal and must be verified before the active-deletion target is represented as operational. Statutory record retention and applicable EU Data Act switching rights remain unaffected.
12. Availability, support and security
Core application hosting is on AWS in France, with daily backups retained for 30 days. AI requests to OpenAI may involve processing outside France and the EEA. The Service implements access restrictions by user role and organization, authentication and technical monitoring. Application-level MFA is not currently enabled, and is therefore not promised in these Terms.
Standard support: contact@hilighter.io, normally Monday–Friday 09:00–18:00 Paris time, excluding French public holidays. Non-binding first-acknowledgment targets are five business days for Free, two business days for paid organizations, and one business day for critical incidents notified by paid organizations. These are not guaranteed fix times or grounds for service credits. No availability percentage is guaranteed unless an Enterprise SLA is signed. Maintenance, third-party incidents and security measures can temporarily affect the Service without removing mandatory statutory remedies.
13. Acceptable use and suspension
Users must not unlawfully access systems or data, introduce malicious code, evade published usage limits, perform abusive automated calls, copy or resell the Service without permission, upload unlawful material, infringe intellectual property rights or use the platform for unlawful discrimination. SkillsBoard may temporarily restrict access to the extent necessary to protect systems and individuals, explaining the reason and enabling remediation where safe and practicable. Serious or repeated breaches may lead to termination following appropriate notice, subject to statutory rights.
14. Intellectual property
SkillsBoard retains rights to its source code, product design, methodology and hilighter brand. Users obtain a non-exclusive, non-transferable right to access the Service within the scope and term of their plan. User-provided documents, CVs and evidence remain subject to their authors' rights. Product feedback may be used to improve the Service, without exposing confidential content or infringing personal rights.
15. Warranties and liability
SkillsBoard performs the Service with reasonable care but does not warrant flawless AI outputs or particular employment, learning or commercial outcomes. Organizations must validate relevant assessments and decisions.
For professional customers only, to the extent legally enforceable, SkillsBoard's aggregate contractual liability for proven direct loss from an event is capped at the fees excluding taxes actually paid during the preceding twelve months. A professional Free-only customer has a proposed cap of EUR 1,000 per event. For example, if a company paid EUR 1,548 net in the preceding twelve months, its proposed contractual ceiling for that event is EUR 1,548. This is a cap on SkillsBoard's potential liability, not a deductible or insurance limit. It may be negotiated for Enterprise contracts and must not exclude gross negligence, intentional wrongdoing, bodily injury, mandatory obligations, or deprive an essential obligation of substance where French law prohibits it. Statutory GDPR remedies are not reduced.
The professional cap does not apply to individual consumers or their mandatory rights.
16. Consumer withdrawal, conformity and online termination
No paid subscriptions are currently offered to consumers. Independent adults can use personal Free accounts. Before any future paid consumer offering goes live, SkillsBoard will implement legally required consumer disclosures, VAT-inclusive prices, the statutory 14-day withdrawal right where applicable, remedies for lack of conformity of digital services, simplified online termination, renewal information and consumer mediation. Mere acceptance of Terms does not constitute withdrawal-right waiver. Where applicable, a consumer can contact contact@hilighter.io or use the annexed withdrawal form; fees for performance begun during a withdrawal period are governed by applicable mandatory rules and the necessary separate consents. Required verbatim French statutory renewal provisions must be added if the relevant automatic-renewal consumer contracts are introduced.
17. Complaints, mediation, law and language
Complaints: contact@hilighter.io. Business customers should first seek an amicable resolution; French courts have jurisdiction only to the extent permitted by applicable jurisdiction rules. Consumers must be offered an appropriate free consumer mediation route when consumer mediation rules apply, following a prior written complaint: Where French consumer mediation rules apply, SkillsBoard will communicate the contact details of an accredited consumer mediator after a prior written complaint sent to contact@hilighter.io.. Business size by itself is no exemption.
French law governs, subject to mandatory protections for consumers in their habitual country of residence. The French version is the authoritative contractual text, subject to mandatory linguistic transparency and consumer protection requirements.
18. Changes and notices
SkillsBoard may update these terms for functional, commercial, legal or security reasons. Material adverse changes are communicated through a durable medium with reasonable advance notice, normally 30 days, unless urgent legal or security grounds justify faster action. Statutory objection or cancellation rights continue to apply. Prior versions and acceptance records are maintained. Operational service messages are not marketing consent.
Annex A – Sample consumer withdrawal form
To SkillsBoard SAS, 509 avenue des Églantines, 62176 Camiers, France – contact@hilighter.io: “I hereby give notice that I withdraw from my hilighter subscription contract entered into on [date], in the name of [name], account email [email]. Date: [date].”