Privacy Policy

Data We Collect

We collect the following categories of personal data:

• Account data: Name, email address, display name, avatar.
• Payment data: We process payments via Stripe. We never store your card number. We receive a Stripe customer ID and subscription status only.
• Learning progress: Lessons watched, completion status, position, XP, streaks.
• Usage data: Pages visited, session duration, device/browser info (via anonymized analytics).
• Communications: Support tickets and emails you send us.

How We Use Data

We use your data to: provide and improve the platform; process payments and manage subscriptions; send transactional emails (welcome, receipts, password reset, expiry notices); track your learning progress; calculate XP, levels, and streaks; and respond to support requests.

We do not sell your personal data. We do not use your data for targeted advertising.

Data Sharing

We share data with the following processors:

• Stripe — payment processing
• Supabase — authentication and database hosting
• Cloudflare R2 — video storage and delivery
• Resend — transactional email delivery
• Vercel — platform hosting and edge functions

Each processor operates under their own privacy policies and applicable data protection agreements. We do not share your data with third parties for marketing purposes.

Data Retention

We retain your account and progress data for as long as your account is active. If you request account deletion, we will delete or anonymize your personal data within 30 days, except where retention is required by law (e.g., payment records may be retained for 7 years for tax compliance).

Your Rights

You have the right to: access the personal data we hold about you; correct inaccurate data; request deletion of your data; object to or restrict processing; request data portability; and withdraw consent at any time (where processing is based on consent).

To exercise these rights, email privacy@mentorlevel.com.

CCPA & GDPR

EU/UK users (GDPR): Our legal bases for processing include contract performance (providing the service you subscribed to), legitimate interests (platform security, fraud prevention, analytics), and consent (marketing emails). You may withdraw consent for marketing communications at any time.

California users (CCPA): You have the right to know, delete, and opt out of the sale of personal information. We do not sell personal information. To exercise CCPA rights, email privacy@mentorlevel.com.

Contact

For privacy questions or requests, contact: privacy@mentorlevel.com. For EU/UK inquiries, our Data Protection contact is the same address.