Privacy Policy
At AskMentor, your privacy is fundamental to our mission. This policy explains what data we collect, why we collect it, and how we protect it.
1. Information We Collect
Account Information
When you register, we collect your name, email address, and profile picture (via Google OAuth). Alumni/mentors additionally provide professional background, work history, and educational details to power their AI persona.
Payment Information
Payments are processed securely by Cashfree Payments. AskMentor does not store your full card number or CVV. We store only transaction metadata: order IDs, amounts, and payment status. Bank details for mentor withdrawals are stored encrypted.
Usage Data
We collect chat messages, session durations, credit usage logs, and interaction patterns to improve AI response quality and detect abuse. Messages are stored encrypted at rest in Supabase (PostgreSQL).
Technical Data
IP addresses, browser type, device information, and access logs are collected automatically for security monitoring and rate-limiting.
2. How We Use Your Information
- Powering AI persona chat using your uploaded knowledge base (RAG pipeline)
- Processing payments and managing wallet balances via Cashfree
- Calculating mentor earnings and processing withdrawal requests
- Sending transactional emails (payment confirmations, withdrawal updates)
- Detecting and preventing fraud, abuse, and unauthorized access
- Improving model quality through anonymized usage analytics
- Complying with legal obligations under Indian law (IT Act 2000, DPDP Act 2023)
3. Data Sharing
We do not sell your personal data. We share data only with:
Supabase
Database & Authentication
Cashfree Payments
Payment Processing
Groq (LLM)
AI Response Generation
Nomic AI
Text Embeddings
ElevenLabs / Sarvam
Voice Synthesis
Cloudinary
Avatar Image Storage
4. Data Retention
Account data is retained until deletion request. Chat history is retained for 12 months for context quality. Payment transaction records are retained for 7 years as required by Indian tax law. Deleted accounts have personal data anonymized within 30 days.
5. Your Rights (DPDP Act 2023)
Under the Digital Personal Data Protection Act 2023, you have the right to:
- Access a copy of all personal data we hold about you
- Correct inaccurate or incomplete personal data
- Erase your data (right to be forgotten)
- Withdraw consent for data processing
- Nominate a person to exercise rights on your behalf
Submit requests to: privacy@askmentor.online
6. Cookies
We use only essential cookies for authentication (Supabase JWT session) and security (CSRF protection). We do not use third-party tracking cookies or advertising cookies.
7. Security
Data is encrypted in transit (TLS 1.3) and at rest (AES-256). Payment data is handled exclusively by Cashfree, which is PCI-DSS compliant. We conduct regular security audits and use rate limiting to prevent brute-force attacks.
8. Contact
For privacy concerns, contact our Data Protection Officer at privacy@askmentor.online or write to: AskMentor, India.