Privacy Policy

1. Introduction

MentorNeko is a product of NekoTech Ventures Inc. (“we,” “us,” or “our”). We operate a B2B SaaS mentoring platform that helps organizations run effective mentoring programs using AI-powered matching.

This Privacy Policy explains how we collect, use, share, and protect information when you use our platform at mentorneko.com and any organization-specific subdomains. It applies to organization administrators who set up accounts, members who participate in mentoring programs, and visitors who browse our marketing site.

2. Information We Collect

Account Information

When an organization administrator creates an account, we collect the organization name, administrator name, email address, and billing contact information. We do not collect passwords. Our platform uses passwordless magic link authentication.

Member Profile Data

Members invited to the platform provide profile information including their name, email address, profile photo, bio, and responses to organization-configured profile dimensions (such as skills, goals, seniority level, department, and professional interests). This data is used to power AI-driven mentor matching.

Usage Data

We automatically collect information about how you interact with the platform, including pages visited, features used, session duration, and device information (browser type, operating system, screen resolution). This data helps us improve the product.

Cookies and Similar Technologies

We use essential cookies for authentication and session management. We may use analytics cookies to understand how the platform is used. You can control cookie preferences through your browser settings.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the MentorNeko platform
• Power AI-driven mentor-mentee matching using anonymized profile data
• Generate match rationales that help participants understand why they were paired
• Send transactional emails (invitations, magic link authentication, match notifications, program updates)
• Provide customer support and respond to inquiries
• Analyze platform usage to improve features and user experience
• Comply with legal obligations and enforce our terms of service

4. AI Processing & Data Privacy

Our AI matching engine is designed with privacy as a first principle:

• Anonymized profiles: Before any data is sent to AI language models, member profiles are anonymized. Names are replaced with generic labels (e.g., “the Mentee,” “Mentor A”), and email addresses and phone numbers are stripped from bios.
• Zero Data Retention (ZDR): All calls to AI language model providers are made through Vercel AI Gateway with Zero Data Retention enforced. This means prompts and model outputs are not stored, cached, or used for model training by any AI provider.
• No model training: Your data is never used to train, fine-tune, or improve any third-party AI model. We enforce this contractually with all AI providers.
• Post-processing only: Real names are substituted back into match rationales only after the AI model has finished processing. The model never sees identifying information.

5. Data Sharing

We do not sell, rent, or trade your personal information. We share data only with the infrastructure providers necessary to operate the platform:

• Vercel Inc.: Application hosting, serverless functions, edge network, and AI Gateway
• Neon Inc.: Serverless PostgreSQL database hosting
• Cloudflare Inc.: Object storage (member profile photos) and content delivery
• Inngest Inc.: Background job orchestration for asynchronous workflows
• Resend Inc.: Transactional email delivery
• Upstash Inc.: Rate limiting, caching, and vector processing
• AI model providers (Anthropic, Google, OpenAI): Accessed exclusively through Vercel AI Gateway with Zero Data Retention enforced

We may also share data if required by law, to protect our rights, or in connection with a merger, acquisition, or sale of assets (in which case we will notify affected customers).

6. Data Retention

We retain your data for as long as your organization's account is active or as needed to provide services. When an organization's contract is terminated:

• Active data is deleted within 30 days of contract termination
• Backup copies are purged within 90 days of contract termination
• Aggregated, anonymized analytics data may be retained indefinitely as it cannot be linked to any individual

Organizations can request data export at any time during their active contract period.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data, subject to legal retention obligations
• Portability: Request your data in a structured, machine-readable format
• Objection: Object to processing of your data for certain purposes
• Restriction: Request restriction of processing in certain circumstances

Because MentorNeko is a B2B platform, member data is typically managed by your organization's administrator. For rights requests, please contact your organization first. If you need to reach us directly, email privacy@mentorneko.com.

8. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• We do not sell personal information as defined under the CCPA
• We do not share personal information for cross-context behavioral advertising
• You have the right to know what personal data we collect and how it is used
• You have the right to request deletion of your personal data
• You have the right to request correction of inaccurate personal data
• You have the right to opt out of the sale of personal information (though we do not sell data)
• We will not discriminate against you for exercising your CCPA rights

To exercise your California privacy rights, contact us at privacy@mentorneko.com. We will respond within 45 days as required by the CCPA.

9. International Data Transfers

MentorNeko's infrastructure is primarily based in the United States. If you are located outside the United States, your data will be transferred to and processed in the United States. We rely on Standard Contractual Clauses (SCCs) and other appropriate safeguards to ensure an adequate level of protection for personal data transferred internationally, in accordance with applicable data protection laws including the GDPR.

10. Children's Privacy

MentorNeko is a business-to-business platform designed for use by organizations and their adult employees. Our service is not directed at children under 16 years of age, and we do not knowingly collect personal information from children under 16. If we become aware that we have collected data from a child under 16, we will delete it promptly. If you believe a child has provided us with personal information, please contact us at privacy@mentorneko.com.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. If we make material changes, we will notify organization administrators by email at least 30 days before the changes take effect. The “Last updated” date at the top of this page indicates when the policy was most recently revised.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: