Privacy Policy

We collect information to provide better career guidance and mentorship matching. The data we collect falls into several categories:

1.1 Information You Provide Directly

• Account Information: Name, email address, phone number, date of birth, and profile photo.
• Educational Background: Current institution, field of study, academic achievements, transcripts (if uploaded), and career aspirations.
• Professional Information: Work experience, skills, certifications, resume/CV, LinkedIn profile, and career goals.
• Mentorship Data: Questions asked, session notes, feedback provided, and communication with mentors.
• Payment Information: If applicable, billing address and payment method details (processed securely through third-party payment processors).

1.2 Information Collected Automatically

• Usage Data: Pages visited, features used, time spent on platform, search queries, and interaction patterns.
• Device Information: IP address, browser type, operating system, device identifiers, and language preferences.
• Location Data: Approximate geographic location based on IP address (we do not track precise GPS location).
• Cookies and Similar Technologies: We use cookies, web beacons, and local storage to enhance user experience and analyze platform performance.

1.3 Information from Third Parties

We may receive information from third-party services you connect to your account (e.g., LinkedIn, Google) or from public databases to verify credentials and enrich your profile.

The primary purpose of data collection is to deliver and improve our services:

• Mentorship Matching: Use algorithms to connect students with mentors based on skills, goals, industry, and geographic preferences.
• Personalization: Tailor career roadmap recommendations, course suggestions, and content based on your profile and behavior.
• Communication: Send important updates, notifications about mentorship sessions, platform announcements, and promotional content (with opt-out options).
• Safety & Security: Detect and prevent fraud, abuse, and unauthorized access. Enforce our Terms of Service and Code of Conduct.
• Analytics & Improvement: Analyze usage patterns to improve platform features, user experience, and overall service quality.
• Legal Compliance: Comply with legal obligations, respond to lawful requests, and protect our rights and those of our users.

3.1 Research Publications

We may publish research findings based on aggregated, anonymized data to contribute to the academic community and advance career development science. Individual users will never be identifiable in such publications.

We do not sell your personal data to third parties. We only share data in the following limited circumstances:

4.1 Service Providers

We work with trusted third-party vendors who assist in operating our platform:

• Cloud Hosting: Amazon Web Services (AWS), Google Cloud Platform for data storage and computing.
• Email Services: SendGrid, Mailgun for transactional and marketing emails.
• Analytics: Google Analytics, Mixpanel for usage analytics (anonymized where possible).
• Payment Processing: Stripe, PayPal for secure payment transactions.

All service providers are bound by strict confidentiality agreements and are prohibited from using your data for any purpose other than providing services to Wimentor.

4.2 Mentors & Mentees

When you are matched with a mentor or mentee, certain profile information (name, photo, bio, skills, goals) is shared to facilitate the mentorship relationship. You control what information is visible in your public profile.

4.3 Legal Requirements

We may disclose your information if required by law, in response to valid legal processes (subpoenas, court orders), or to protect the rights, property, or safety of Wimentor, our users, or the public.

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity. We will notify you via email and/or prominent notice on our platform before such transfer.

We implement industry-standard security measures to protect your data:

• Encryption: All data transmitted between your device and our servers is encrypted using TLS/SSL (HTTPS). Sensitive data at rest is encrypted using AES-256.
• Access Controls: Access to personal data is restricted to authorized personnel on a need-to-know basis, with multi-factor authentication required.
• Regular Audits: We conduct regular security audits and vulnerability assessments to identify and address potential risks.
• Incident Response: We have a dedicated incident response plan to address data breaches promptly and notify affected users as required by law.

Important: While we take extensive precautions, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

You have the following rights regarding your personal data:

6.1 Access & Portability

You can request a copy of all personal data we hold about you in a structured, machine-readable format (e.g., JSON, CSV).

6.2 Correction

You can update or correct inaccurate information directly through your account settings or by contacting us.

6.3 Deletion ("Right to be Forgotten")

You can request deletion of your account and associated data. Note that we may retain certain information as required by law or for legitimate business purposes (e.g., fraud prevention, dispute resolution). Anonymized data used in AI training cannot be individually identified or removed.

6.4 Opt-Out of Marketing

You can unsubscribe from promotional emails by clicking the "unsubscribe" link in any marketing email or adjusting your notification preferences in account settings.

6.5 Cookie Management

You can control cookies through your browser settings. Note that disabling certain cookies may limit platform functionality.

To exercise these rights, contact us at: privacy@wimentor.com. We will respond within 30 days.

We retain your personal data for as long as your account is active or as needed to provide services. After account deletion, we may retain certain data for:

• Legal Compliance: Up to 7 years for tax, accounting, and legal purposes.
• Dispute Resolution: Until all claims and disputes are resolved.
• Anonymized Analytics: Indefinitely, as this data cannot be linked back to you.

Wimentor operates globally, and your data may be transferred to and processed in countries outside your country of residence, including the United States and European Union. We ensure that such transfers comply with applicable data protection laws through mechanisms such as Standard Contractual Clauses (SCCs) and adequacy decisions.

Wimentor is intended for users aged 16 and above. We do not knowingly collect personal information from children under 16 without verifiable parental consent. If we become aware that we have collected data from a child under 16 without consent, we will take steps to delete such information promptly.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes via email or a prominent notice on our platform at least 30 days before the changes take effect. Your continued use of Wimentor after such notice constitutes acceptance of the updated policy.

At Wimentor, we believe your career data belongs to you. This section explains how we collect, use, and protect data within our I.R.I.S. (Intelligent Recruitment & Intelligence System) profiling engine, and affirms your ownership rights as a student.

What I.R.I.S. Collects

The I.R.I.S. engine may collect and infer the following data points through your platform interactions, assessments, and WhatsApp conversations:

• Declared data: Skills, interests, languages, career goals, and education history you directly provide.
• Inferred data: Behavioral signals, engagement patterns, and AI-detected skills or interests extracted from your conversations and activity.
• Assessment data: Results from career assessments, sprint tasks, and post-sprint evaluations.
• Mentorship data: Progress reports, mission outcomes, and feedback from matched mentors.

What Institutions Can and Cannot Access

Your institution (e.g. university, employer, or training organization) that enrolled you on Wimentor has limited visibility into your profile:

• Institutions CAN see: Your sprint progress, mission completion rate, engagement score, and general career readiness indicators.
• Institutions CANNOT see: Your private AI conversations, raw I.R.I.S. behavioral signals, inferred personality data, or any data you have not explicitly consented to share.
• Mentor access: Your matched mentor can only view data relevant to your active mentorship sprint.

Your Rights Over Your I.R.I.S. Data

As a student on Wimentor, you have the following rights regarding your I.R.I.S. profile at any time:

• Right to Access: Request a full export of your I.R.I.S. profile data at any time.
• Right to Correct: Update or correct any inaccurate data in your profile.
• Right to Delete: Request permanent deletion of your I.R.I.S. profile and all associated data.
• Right to Restrict: Opt out of AI-driven behavioral inference at any time from your profile settings.
• Right to Portability: Export your career profile in a machine-readable format (JSON/PDF) to use on other platforms.

Data Retention for I.R.I.S. Profiles

Your I.R.I.S. profile data is retained for as long as your account is active. If you delete your account, all I.R.I.S. data — including inferred insights and conversation history — will be permanently erased within 30 days. Anonymized, non-identifiable aggregate data may be retained for research purposes.

WhatsApp Conversation Privacy

Conversations between you and the Wimentor AI mentor via WhatsApp are encrypted in transit and stored securely. These conversations are used solely to improve your I.R.I.S. profile and deliver personalized mentorship. They are never shared with your institution, mentors, or third parties without your explicit consent.

To exercise any of your data rights or for questions about your I.R.I.S. profile, contact our Data Protection Officer at dpo@wimentor.com.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: