Privacy Policy

1. Introduction

MentorNeko is a product of NekoTech Ventures Inc. (“we,” “us,” or “our”). We operate a B2B SaaS mentoring platform that helps organizations run effective mentoring programs using AI-powered matching.

This Privacy Policy explains how we collect, use, share, and protect information when you use our platform at mentorneko.com and any organization-specific subdomains. It applies to organization administrators who set up accounts, members who participate in mentoring programs, and visitors who browse our marketing site.

2. Information We Collect

Account Information

When an organization administrator creates an account, we collect the organization name, administrator name, email address, and billing contact information. We do not collect passwords. Our platform uses passwordless magic link authentication.

Member Profile Data

Members invited to the platform provide profile information including their name, email address, profile photo, bio, and responses to organization-configured profile dimensions (such as skills, goals, seniority level, department, and professional interests). This data is used to power AI-driven mentor matching.

Usage Data

We automatically collect information about how you interact with the platform, including pages visited, features used, session duration, and device information (browser type, operating system, screen resolution). This data helps us improve the product.

Cookies and Similar Technologies

We use essential cookies for authentication and session management. We use Vercel Web Analytics (cookie-free) to understand how the platform is used. We do not use advertising or tracking cookies. For details, see our Cookie Policy.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the MentorNeko platform
• Power AI-driven mentor-mentee matching using anonymized profile data
• Generate match rationales that help participants understand why they were paired
• Send transactional emails (invitations, magic link authentication, match notifications, program updates)
• Provide customer support and respond to inquiries
• Analyze platform usage to improve features and user experience
• Comply with legal obligations and enforce our terms of service

4. AI Processing & Data Privacy

Our AI features are designed with privacy as a first principle:

• Anonymized matching: Before any data is sent to AI language models for matching or rationale generation, member profiles are anonymized. Names are replaced with generic labels (e.g., “the Mentee,” “Mentor A”), and email addresses and phone numbers are stripped from bios.
• Administrative analytics: When administrators use AI-powered analytics features (such as natural-language data queries), query results may contain limited personal data (such as member names) within the scope of the administrator's existing access permissions. These interactions are subject to the same Zero Data Retention protections described below.
• Zero Data Retention (ZDR): All AI processing routes through Vercel AI Gateway with team-wide Zero Data Retention enforced. This means prompts and model outputs are not stored, cached, or used for model training. The underlying model providers are Vercel's sub-processors, not ours.
• No model training: Your data is never used to train, fine-tune, or improve any third-party AI model. This is enforced through Vercel AI Gateway's Zero Data Retention controls.
• Post-processing only: For matching, real names are substituted back into rationales only after the AI model has finished processing. The model never sees identifying information during matching.

5. Data Sharing

We do not sell, rent, or trade your personal information. We share data only with the infrastructure providers necessary to operate the platform:

• Vercel Inc.: Application hosting, serverless functions, edge network, and AI Gateway
• Neon Inc.: Serverless PostgreSQL database hosting
• Cloudflare Inc.: Object storage (member profile photos) and content delivery
• Inngest Inc.: Background job orchestration for asynchronous workflows
• Resend Inc.: Transactional email delivery
• Upstash Inc.: Rate limiting, caching, and vector processing
• Stripe Inc.: Subscription billing and payment processing
• Functional Software Inc. (Sentry): Error monitoring and performance tracking
• AI model providers (via Vercel): AI model providers are Vercel's sub-processors, not MentorNeko's. All AI processing routes through Vercel AI Gateway with Zero Data Retention enforced. Profiles are anonymized before matching; administrative analytics may process limited personal data within the administrator's authorized scope. See our Sub-processors page for our data protection posture

We may also share data if required by law, to protect our rights, or in connection with a merger, acquisition, or sale of assets (in which case we will notify affected customers).

6. Data Retention

We retain your data for as long as your organization's account is active or as needed to provide services. When an organization's contract is terminated:

• You have a 30-day read-only export window to download your data
• All Customer Data is permanently deleted within 90 days of contract termination (including backups)
• Aggregated, anonymized analytics data may be retained indefinitely as it cannot be linked to any individual

Organizations can request data export at any time during their active contract period.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data, subject to legal retention obligations
• Portability: Request your data in a structured, machine-readable format
• Objection: Object to processing of your data for certain purposes
• Restriction: Request restriction of processing in certain circumstances

Because MentorNeko is a B2B platform, member data is typically managed by your organization's administrator. For rights requests, please contact your organization first. If you need to reach us directly, email privacy@mentorneko.com.

8. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

• We do not sell personal information as defined under the CCPA
• We do not share personal information for cross-context behavioral advertising
• You have the right to know what personal data we collect and how it is used
• You have the right to request deletion of your personal data
• You have the right to request correction of inaccurate personal data
• You have the right to opt out of the sale of personal information (though we do not sell data)
• We will not discriminate against you for exercising your CCPA rights

To exercise your California privacy rights, contact us at privacy@mentorneko.com. We will respond within 45 days as required by the CCPA.

9. International Data Transfers

NekoTech Ventures Inc. is incorporated in Alberta, Canada. MentorNeko's infrastructure is primarily based in the United States. If you are located outside the United States, your data will be transferred to and processed in the United States. We comply with applicable Canadian privacy legislation, including the Alberta Personal Information Protection Act (PIPA) and the federal Personal Information Protection and Electronic Documents Act (PIPEDA). For transfers of personal data from the European Economic Area, we rely on Standard Contractual Clauses (SCCs) and other appropriate safeguards to ensure an adequate level of protection, in accordance with the GDPR.

10. Children's Privacy

MentorNeko is a business-to-business platform designed for use by organizations and their adult employees. Our service is not directed at individuals under 18 years of age, and we do not knowingly collect personal information from minors. If we become aware that we have collected data from an individual under 18, we will delete it promptly. If you believe a minor has provided us with personal information, please contact us at privacy@mentorneko.com.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. If we make material changes, we will notify organization administrators by email at least 30 days before the changes take effect. The “Last updated” date at the top of this page indicates when the policy was most recently revised.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: