Privacy Policy

1. Introduction

Mentorrd Technologies Private Limited ("Mentorrd", "we", "us", or "our") operates the website https://mentorrd.com and related applications (collectively, the "Platform"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you use our Platform.

By accessing or using Mentorrd, you consent to the practices described in this policy. If you do not agree, please discontinue use of the Platform.

This policy is published in compliance with:

• The Information Technology Act, 2000 and IT (Amendment) Act, 2008
• The Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011
• The Digital Personal Data Protection Act, 2023 (DPDP Act)
• The Consumer Protection (E-Commerce) Rules, 2020

2. Information We Collect

2.1 Information You Provide

• Account data: Name, email address, phone number, password (hashed), and profile photo when you register.
• Resume & career data: Work history, education, skills, certifications, and any other content you input into our AI tools.
• Payment data: Billing name, address, and masked card/UPI details processed via our payment gateway (Razorpay). We do not store full card numbers.
• Communications: Messages you send us via contact forms, email, WhatsApp, or support chat.
• Assessment responses: Answers to psychometric tests, aptitude tests, and career assessments.

2.2 Information Collected Automatically

• Usage data: Pages visited, features used, time spent, clicks, scrolls, and navigation paths.
• Device data: IP address, browser type and version, operating system, screen resolution, and device identifiers.
• Location data: Country and region inferred from IP address. We do not collect precise GPS location.
• Cookies and tracking technologies: See our Cookie Policy for full details.

2.3 Information from Third Parties

• Social login: If you sign in with Google or LinkedIn, we receive your name, email, and profile photo from that provider, subject to your privacy settings there.
• Referrals: If you arrive via a partner or affiliate link, we may receive referral attribution data.

3. How We Use Your Information

We process your personal data for the following purposes:

3.1 Providing the Service

• Creating and managing your account.
• Generating AI-powered resumes, cover letters, LinkedIn profiles, and interview responses.
• Delivering psychometric and aptitude test results.
• Processing payments and issuing invoices.
• Connecting you with human career consultants and resume writers.

3.2 Improving the Platform

• Analysing usage patterns to improve features and UI/UX.
• Training and fine-tuning our AI models using anonymised, aggregated data only. We will never use your identifiable data to train AI without explicit consent.
• Conducting A/B tests and product experiments.

3.3 Communication

• Sending transactional emails (receipts, password resets, order updates).
• Sending product updates, tips, and career resources (you may unsubscribe at any time).
• Responding to your support queries.

3.4 Legal & Safety

• Complying with applicable laws and regulatory obligations.
• Detecting and preventing fraud, abuse, and security incidents.
• Enforcing our Terms of Service.

4. Legal Basis for Processing

Under the DPDP Act, 2023, we process your personal data on the following lawful bases:

• Consent: For marketing communications, optional analytics cookies, and AI model improvement.
• Contract: To fulfil the services you have purchased or signed up for.
• Legitimate interest: For fraud prevention, security, platform analytics, and improving service quality.
• Legal obligation: To comply with applicable Indian laws and court/regulatory orders.

5. Sharing Your Information

We do not sell your personal data. We share it only in the following circumstances:

5.1 Service Providers

We engage trusted third-party vendors who process data on our behalf under strict data processing agreements:

• Cloud hosting: AWS / Vercel
• AI processing: OpenAI (anonymised prompts)
• Payments: Razorpay
• Email: Resend / SendGrid
• Analytics: Google Analytics, Microsoft Clarity
• Support chat: Crisp
• Error monitoring: Sentry

5.2 Professional Service Delivery

If you purchase a human-assisted service (resume writing, career counselling, mock interviews), your resume data is shared with the assigned professional solely for service delivery.

5.3 Legal Disclosure

We may disclose your data if required by law, court order, or government authority, or to protect our legal rights, property, or safety of users.

5.4 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all assets, your data may be transferred. We will notify you via email before your data becomes subject to a different privacy policy.

6. Data Retention

We retain your personal data for the following periods:

• Active account data: For as long as your account is active.
• After account deletion: Up to 90 days in backups, then permanently deleted, unless legal retention obligations apply.
• Payment records: 7 years as required under Indian tax and accounting laws.
• Support communications: 3 years for dispute resolution.

7. Your Rights

Under the DPDP Act, 2023 and applicable law, you have the following rights:

• Right to access: Request a copy of the personal data we hold about you.
• Right to correction: Request correction of inaccurate or incomplete data.
• Right to erasure: Request deletion of your data, subject to legal retention requirements.
• Right to data portability: Receive your data in a machine-readable format.
• Right to withdraw consent: Withdraw consent for optional processing (marketing, analytics) at any time without affecting prior lawful processing.
• Right to grievance redressal: Lodge a complaint with our Grievance Officer (details below).
• Right to nominate: Nominate another person to exercise your rights in the event of your death or incapacity.

To exercise any right, email support@mentorrd.com with subject "Data Rights Request". We will respond within 30 days.

8. Data Security

We implement industry-standard technical and organisational measures to protect your data:

• TLS 1.2+ encryption for all data in transit.
• AES-256 encryption for sensitive data at rest.
• Role-based access controls — only authorised personnel access personal data.
• Regular security audits and vulnerability assessments.
• Multi-factor authentication for all internal systems.

Despite these measures, no transmission over the internet is 100% secure. In the event of a data breach affecting your rights, we will notify you within 72 hours of becoming aware, as required by applicable law.

9. Children's Privacy

The Platform is not directed to children under 13. We do not knowingly collect personal data from children under 13.

Our psychometric tests for students (ages 13–18) require verifiable parental consent before processing. If you believe we have inadvertently collected data from a child under 13, contact us immediately at support@mentorrd.com and we will delete it promptly.

10. International Data Transfers

Your data is primarily stored on servers in India and the United States (AWS / Vercel infrastructure). When data is transferred outside India, we ensure adequate safeguards are in place through standard contractual clauses or equivalent mechanisms as required under the DPDP Act.

11. Third-Party Links

Our Platform may link to third-party websites. We are not responsible for their privacy practices. We encourage you to read their privacy policies before providing any personal data.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email and/or a prominent notice on the Platform at least 14 days before changes take effect. Your continued use after the effective date constitutes acceptance.

13. Contact & Grievance Officer

For privacy-related questions, requests, or complaints, contact:

• Email: support@mentorrd.com
• Grievance Officer: , grievance@mentorrd.com
• Address: Mentorrd Technologies Private Limited, Mumbai, Maharashtra, India
• Response time: working days

If you are unsatisfied with our response, you may approach the Data Protection Board of India once constituted under the DPDP Act, 2023.