Legal
Privacy Policy
We are committed to protecting your privacy. This policy explains what personal information MentorME collects, why we collect it, and how we use and protect it.
Last updated:
1. Information We Collect
We collect information you provide directly to us and information generated automatically when you use our platform.
Account Information
- Full name and email address
- Profile picture (uploaded directly or retrieved via Google OAuth)
- Phone number, date of birth, and address (optional)
- Education details: institution, field of study, graduation year (optional)
- Short biography or personal statement (optional)
Session & Payment Information
- Session booking details, mentor selections, and scheduling
- Mobile Financial Service (MFS) transaction IDs used to verify payments: we do not store full payment credentials
- Session feedback and ratings you submit
- Withdrawal requests and associated MFS account numbers (for mentors)
Automatically Collected Information
- Authentication tokens stored in browser cookies to keep you signed in
- Server-side audit logs of administrative actions for security and accountability
- Standard server logs (IP address, browser type, request time) retained for operational purposes
Google OAuth Information
If you sign in with Google, we receive your name, email address, and profile picture from Google. We do not receive your Google password or any other Google account data beyond what you explicitly authorize.
2. How We Use Your Information
We use the information we collect to operate, maintain, and improve MentorME:
- Create and manage your account and authenticate your identity
- Match you with appropriate mentors based on your goals
- Process session bookings and verify payment transactions via MFS
- Send transactional emails: account verification, password resets, and session-related notifications
- Facilitate mentor payouts through your registered MFS account
- Monitor platform integrity, detect fraud, and enforce our Terms of Service
- Generate anonymized, aggregate analytics to improve our services
- Comply with legal obligations under the laws of Bangladesh
We do not sell, rent, or trade your personal information to any third party for their marketing purposes.
3. Information Sharing
We share your information only in the following circumstances:
Between Mentees and Mentors
When a session is booked, your name and the session details are shared with the assigned mentor. Mentors' names, categories, and expertise are visible to mentees during the booking process.
Service Providers
- Cloudinary: stores and serves your profile pictures and session attachments securely
- Google: provides authentication services when you use “Sign in with Google”
- MongoDB Atlas: hosts our database in a secure cloud environment
- Email Service Provider: delivers transactional emails on our behalf
Legal Requirements
We may disclose your information if required to do so by law, court order, or governmental authority in Bangladesh, or when we believe disclosure is necessary to protect our rights, protect your safety or the safety of others, or investigate fraud.
5. Data Security
We implement industry-standard technical and organizational measures to protect your personal information:
- All passwords are hashed using bcrypt before storage, we never store plain-text passwords
- Authentication is enforced via signed JWTs; tokens are role-segregated (admin, mentor, mentee) with separate secrets
- Password reset and email verification links are single-use and expire within 15 minutes
- API rate limiting is applied globally and specifically to authentication endpoints to prevent brute-force attacks
- Administrative actions are logged in an immutable audit trail
- Sensitive operations (e.g., password resets) use atomic database operations to prevent race conditions
Despite these measures, no internet transmission or electronic storage is completely secure. We encourage you to use a strong, unique password and to sign out when using shared devices.
6. Data Retention
We retain your personal information for as long as your account is active or as needed to provide our services. If you request account deletion, we will delete your personal data within a reasonable timeframe, except where we are required to retain it for legal, financial, or compliance purposes (e.g., transaction records).
Session history and transaction records may be retained for up to 7 years in accordance with Bangladeshi financial regulations.
7. Your Rights
You have the following rights regarding your personal information:
- Access & Update: view and edit your profile, education, and contact details at any time via your account settings
- Change Password: update your password from the Security tab in settings, or use the Forgot Password flow
- Profile Picture: upload or change your avatar at any time
- Account Deletion: contact us at admin.mentorme@gmail.com to request deletion of your account and associated data
- Data Portability: request a copy of your personal data by contacting our support team
8. Children's Privacy
MentorME is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us immediately at admin.mentorme@gmail.com and we will delete that information promptly.
9. Third-Party Links
Our platform may contain links to third-party websites (e.g., payment portals, social media). We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any third-party services you visit.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. When we make material changes, we will update the “Last Updated” date at the top of this page. Continued use of MentorME after any changes constitutes your acceptance of the revised policy.
11. Contact Us
If you have any questions about this Privacy Policy, want to exercise your data rights, or need to report a privacy concern, please contact us:
Also read our Terms of Service
Understand the rules governing your use of MentorME, including session policies and account responsibilities.
Read Terms of Service →