1. Scope of this annex
Mentori is built primarily for learners in India, where the Digital Personal Data Protection Act, 2023 is the governing regime. This statement is an annex that applies additionally to users in the European Economic Area and the United Kingdom.
2. Lawful bases
We rely on performance of a contract to deliver the subscribed service, legitimate interests to keep the service secure and functioning, and consent — given by the holder of parental responsibility — where processing relates to a child's personal data.
3. Data subject rights
Subject to law, you may request access, rectification, erasure, restriction, portability, and object to certain processing. Requests go to grievance@mentori.app and are answered within one month.
4. International transfers
Mentori's infrastructure and sub-processors may process data outside the EEA and UK, including in India. Where that happens we rely on appropriate safeguards such as Standard Contractual Clauses with the relevant provider.
5. Current status
We do not currently claim a completed GDPR compliance programme. This statement describes our position and the safeguards in place; the remaining items — including a published sub-processor register and a formal representative in the EEA and UK — are in progress and will be named here when complete.
Questions about this policy?
Contact our Grievance Officer at grievance@mentori.app. We acknowledge data requests within 72 hours.