How Mentora handles personal data.

Mentora ("Mentora", "we", "us", or "our") provides an educational learning portal for students and parents. This policy explains how we collect, use, disclose, and protect personal data when you use Mentora.

We collect account information such as name, email address, account type, login provider details, and parent-student linking information. We also collect learning information such as diagnostic answers, practice attempts, correctness, progress reports, recommended next steps, XP/activity records, and course progress.

We use personal data to create and secure accounts, provide learning recommendations, generate student and parent reports, support parent-student linking, improve product reliability, prevent misuse, respond to support requests, and comply with legal or operational requirements.

Parent accounts can only view a student's reports after a valid link has been created between the parent and student accounts. Linked access can be revoked. Parents should only connect to a student account where they have permission to support that student's learning.

We use trusted service providers to operate Mentora, including hosting, authentication, database, backend, email, analytics, and security infrastructure. These may include providers such as Supabase, Vercel, Render, Google OAuth, and email delivery providers. We share personal data with these providers only as needed to provide and protect the service.

We do not sell personal data. We may disclose information where necessary to provide the service, protect users, investigate misuse, comply with law, or respond to valid legal requests.

We retain personal data for as long as needed to provide Mentora, maintain records, support security, resolve disputes, and meet legal or operational obligations. We use reasonable technical and organisational measures to protect personal data, but no online service can guarantee absolute security.

You may contact us to request access to, correction of, deletion of, or withdrawal of consent for personal data, subject to applicable legal and operational requirements. Some records may need to be retained for security, audit, billing, legal, or legitimate business purposes.

For privacy questions or data requests, contact support@mentoraedu.tech.