Privacy Policy

This Privacy Policy describes how Mentor Action Platform ("we", "us", or "our") collects, uses, and protects your personal information when you use our mentorship platform at https://mentoraction.net (the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Account Information

When you register, we collect your name, email address, and password. Mentors may also provide professional information including bio, headline, work experience, education, and skills.

1.2 Google Account Data

If you are a mentor and choose to connect your Google account to enable Google Meet session links, we request access to the following Google APIs:

• Google Calendar API — to create calendar events associated with scheduled mentorship sessions.
• Google Meet — to automatically generate a Google Meet conference link attached to those calendar events.

When you authorise this connection, we store:

• An OAuth access token used to make API calls on your behalf.
• A refresh token used to renew your access token without requiring you to re-authorise.
• The expiry timestamp of the access token.

These tokens are stored securely in our database and are only used to create Google Meet links for your scheduled sessions. We do not read, modify, or delete your existing Google Calendar events. We do not access your Gmail, Google Drive, or any other Google service beyond Calendar event creation.

1.3 Usage Data

We may collect information on how the Service is accessed and used, including your IP address, browser type, pages visited, and timestamps.

1.4 Profile Media

We collect profile photos and résumé files that you voluntarily upload.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service.
• Match mentees with suitable mentors.
• Create Google Meet links for mentorship sessions on your behalf (Google account data only).
• Send transactional notifications about mentorship requests and session bookings.
• Improve and personalise your experience, including AI-powered profile matching where you have opted in.
• Comply with legal obligations.

We do not sell your personal data. We do not use your Google user data for advertising or any purpose other than operating the specific features you have enabled.

3. Google API Limited Use Disclosure

Mentor Action Platform's use of information received from Google APIs adheres to the Google API Services User Data Policy , including the Limited Use requirements.

Specifically:

• We only use Google user data to provide or improve user-facing features that are visible and prominent in the Service.
• We do not transfer Google user data to third parties except as necessary to provide our service, or as required by law.
• We do not use Google user data for serving advertisements.
• We do not allow humans to read your Google user data unless you have explicitly given us permission or we are required to do so for security or legal reasons.

4. Data Sharing and Disclosure

We do not share your personal information with third parties except in the following circumstances:

• Service providers: We may share data with trusted service providers who assist us in operating the platform (e.g., cloud hosting, email delivery), subject to confidentiality agreements.
• Legal requirements: We may disclose your information if required by law or in response to valid requests by public authorities.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred. We will notify you before your data is transferred and becomes subject to a different privacy policy.

5. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with the Service. If you delete your account, we will delete or anonymise your personal data within 30 days, except where retention is required by law.

Google OAuth tokens are deleted immediately when you disconnect your Google account or delete your account.

6. Your Rights and Choices

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate personal data.
• Delete your account and associated personal data.
• Disconnect Google at any time via your Google Account permissions page , which will revoke our access to your Google data.
• Opt out of AI-powered features through your account settings.

To exercise any of these rights, contact us at the address below.

7. Security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. OAuth tokens are stored in encrypted form in our database. However, no method of transmission over the Internet or electronic storage is 100% secure.

8. Children's Privacy

The Service is not directed at children under the age of 16. We do not knowingly collect personal information from children under 16. If you become aware that a child has provided us with personal data, please contact us.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

10. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at: