Legal
Privacy Policy
Effective July 18, 2026
This policy explains what data Mentora (operated by Mentora Labs) collects, why, and how it's handled. We built this to be honest and specific about a small product's actual data practices, not a copy-pasted legal template.
1. What we collect
- Account data: name, email, password (hashed, we never see it in plain text), school and field of study if you provide them.
- Content you upload: PDFs, text, and prompts you submit to generate exams or flashcards.
- Study activity: exams generated, answers, scores, flashcard progress, and study sessions you schedule.
- Billing data: handled entirely by Paddle, our payment processor — we never see or store your card details.
- Basic usage data: pages visited and errors encountered, used only to keep the product working.
2. How we use it
- To generate exams, flashcards, and feedback from your material using AI (currently Google Gemini).
- To run your account: authentication, your dashboard, progress tracking, study reminders.
- To send transactional email: signup verification, password resets, study reminders (via Resend).
- To process payments for Pro/Scholar plans (via Paddle).
- To fix bugs and improve the product.
We do not sell your data, and we do not use your uploaded study material to train AI models.
3. Who we share it with
We use a small number of infrastructure providers to run Mentora, each processing only what's needed for their function:
- Supabase — database, authentication, and file storage.
- Google Gemini — processes your uploaded material and prompts to generate exam content. Your content is sent to Gemini's API for this purpose only.
- Resend — delivers account and reminder emails.
- Paddle — processes payments for paid plans.
- Vercel — hosts the application.
We don't sell or rent your personal data to third parties for marketing.
4. Data retention
We keep your data as long as your account is active. If you delete your account from Settings, your profile, documents, exams, attempts, flashcards, and study sessions are permanently deleted — this cascades through our database and can't be undone.
5. Your rights
- Access: everything you've created is visible in the app (Exams, Flashcards, Analytics).
- Deletion: delete individual documents anytime, or your entire account from Settings → Security.
- Correction: update your name, school, and field of study from Settings anytime.
- Portability/export: email us and we'll help you get a copy of your data.
6. Security
Data is encrypted in transit (HTTPS) and at rest via Supabase. Access to your data is protected by row-level database policies so other users can never see your content — only you, and Mentora administrators for support/moderation purposes.
7. Children's privacy
Mentora is intended for users 13 and older. We don't knowingly collect data from children under 13.
8. Changes to this policy
If we materially change how we handle your data, we'll update this page with a new effective date and, where appropriate, notify you by email.
9. Contact
Questions, deletion requests, or data export requests: support@mentorastudy.com.