Privacy Policy

1. Introduction

mentorOS ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered personal growth and mentorship platform ("Service").

We understand that your personal development journey involves sharing sensitive and personal information. We take this responsibility seriously and have designed our systems with privacy as a core principle.

By using mentorOS, you consent to the data practices described in this Privacy Policy. If you do not agree with these practices, please do not use our Service. This policy applies to all users accessing the Service through web browsers, mobile applications, or any other means.

2. Information We Collect

Account Information

We collect your name, email address, password (stored in hashed form only), timezone, and profile preferences when you create an account.

Conversation Data

Messages you send and AI-generated responses are stored to enable the mentorship experience, including continuity across sessions.

Memory Data

The AI extracts and categorizes insights from your conversations, including patterns, beliefs, goals, strengths, preferences, commitments, and breakthrough realizations. Each memory is scored by importance and tagged to relevant life domains.

Domain Data

Life domain scores you set during onboarding and update through check-ins, along with mood ratings, energy levels, and self-reported wins and challenges.

Usage Data

We collect interaction timestamps, feature usage patterns, and session duration to improve service quality and performance.

Device Data

Browser type, operating system, device type, and IP address (anonymized after 30 days) are collected for security and optimization purposes.

Payment Data

Payment information is processed securely through Stripe, our third-party payment processor. We never store your credit card numbers on our servers.

3. How We Use Your Information

We use collected information to:

• Provide the mentorOS service, including generating personalized AI responses, maintaining your memory profile, identifying behavioral patterns, delivering progress analytics, and tracking commitments.
• Improve our service through aggregated, anonymized usage analytics that help us enhance system performance, feature design, and AI accuracy.
• Communicate important updates including service changes, security alerts, and optional feature notifications.
• Ensure platform security by detecting and preventing unauthorized access, abuse, or fraudulent activity.

4. Data Storage and Security

All data at rest is encrypted using AES-256 encryption, the same standard used by banks and government agencies.

All data in transit is protected by TLS 1.3 encryption, ensuring your conversations cannot be intercepted.

Row-level security (RLS) is implemented at the database level, ensuring you can only access your own data. No other user or staff member can view your personal information through the application.

Our hosting infrastructure is SOC 2 Type II compliant, with regular independent security audits, automated threat monitoring, and intrusion detection systems running continuously.

5. AI and Machine Learning Disclosure

Your conversations are processed by AI models to generate personalized mentorship responses and extract insights for your memory profile.

Your conversation data is not used to train third-party AI models. Your personal information remains within the mentorOS system.

Anonymized, aggregated patterns may be used to improve overall system accuracy and pattern recognition capabilities. You can opt out of this in your Privacy Settings.

Your personal data is never used in identifiable form for any model training or improvement purposes.

6. Third-Party Services and Sharing

We use the following third-party services:

• Stripe for payment processing
• Supabase and cloud providers for hosting infrastructure
• Anonymized analytics tools for service improvement

We do not share your personal data with advertisers, data brokers, or any third party for marketing purposes.

All third-party service providers are bound by data processing agreements that require them to protect your information.

7. Your Rights and Choices

• Access: You can view all stored data about you at any time through your Settings page.
• Export: Download a complete copy of all your data in JSON or CSV format through Settings → Privacy → Export Data.
• Delete: Remove individual conversations, memories, or commitments, or delete your entire account and all associated data.
• Privacy Mode: Enable minimal data retention for sensitive conversations where you do not want memories or patterns extracted.
• Opt-Out: Decline optional data usage for system improvement in your Privacy Settings.
• Account Deletion: Account deletion is permanent. All personal data is removed from our systems within 30 days of deletion request.

8. Data Retention

• Data associated with active accounts is retained as long as the account remains active.
• Deleted conversations, memories, and other content are permanently removed from our systems within 30 days.
• Upon account deletion, all personal data is permanently removed within 30 days.
• Anonymized, aggregated analytics data that cannot be linked to any individual may be retained indefinitely.

9. Cookies and Tracking

We use essential cookies for authentication and session management. These are required for the service to function.

We do not use advertising cookies or tracking pixels. We do not participate in ad networks or retargeting programs.

Optional analytics cookies, if implemented, will require your explicit consent before activation.

10. Children's Privacy

mentorOS is not intended for use by anyone under 18 years of age. We do not knowingly collect personal information from minors. If we discover that we have collected information from someone under 18, we will delete it promptly.

11. International Data Transfers

Your data may be processed in countries outside your own. We ensure appropriate safeguards are in place for any international data transfers in compliance with applicable data protection laws.

12. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. Material changes will be communicated through the platform and via email to registered users. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

13. Contact Us

For questions, concerns, or requests related to this Privacy Policy or your personal data, contact us at: support@mentoros.ai

We aim to respond to all privacy-related inquiries within 5 business days.