Privacy Policy Last
Updated: May 12, 2025
Welcome to Mentorly! We're happy to meet you.
At Mentorly (referred to as "Mentorly", "we", or "us"), we understand that you want transparency about how we process your personal data. This Privacy Policy contains information about your privacy and your rights. We know there are a lot of privacy policies to read, but we encourage you to take the time to read them before you use Mentorly.
This Privacy Policy applies to your use of the Mentorly Marketplace and related services at https://mentorly.co/marketplace, to our use of social media, to the communications you may have with us from time to time, and to our blog available at http://mentorlyblog.co/ (together, the "Services"). Under the General Data Protection Regulation ("GDPR"), Mentorly is a data controller for the Services.
This Privacy Policy also describes how Mentorly processes personal data on behalf of Clients who are subscribed to the Mentorly Enterprise Solution Services (the "Enterprise Solution Services"). Under the GDPR, Mentorly is a data processor for the Enterprise Solution Services, and our Clients are the data controllers.
If you have any concerns or inquiries regarding the processing of your personal data, do not hesitate to reach out to us! You can e-mail us at info@mentorly.co.
Key Definitions
In this Privacy Policy, the following terms when used with a capital letter have the meaning explained below:
"Client" means organizations that are subscribed to the Enterprise Solution Services. The Enterprise Solution Services are services that we provide to other businesses that want to create and manage their own mentorship program. They may do so internally for their employees or even use it as a commercial offering.
"AI-Enhanced Processing" means the processing of personal data using large language models (LLMs) or other artificial intelligence technologies to analyze, interpret, or generate insights from data, subject to strict data protection measures.
"Managers" means the administrative users authorized by our Clients to administer their mentorship programs through the Manager Portal.
"Manager Portal" means the portal available to Client's Managers which contains built-in tools for managing our Clients' mentorship program, such as accepting and validating Mentees and Mentors.
"Mentee" means a user of the Mentorly Marketplace which uses our Services to connect with Mentors. Our Clients may also have Mentees as part of their mentorship programs, in which case, when we use the word
"Client Mentees", we refer specifically to the Mentees of our Clients, otherwise, Mentees mean any mentees.
"Mentor" means an individual who is providing Mentees with mentorship sessions either through the Mentorly Marketplace or, if indicated as "Client Mentor", through our clients' mentorship program. Otherwise, Mentor means any Mentor.
What do we mean by personal data?
This Privacy Policy applies to personal data. We consider that "personal data" means any information which allows us to identify you directly or indirectly, including "cookies" and other electronic data. Some information may not be personal on its own but may become personal data if associated with or if the sum of the information allows us to identify you.
A "cookie" is information that a website puts on your computer's hard disk so that the website can remember something about you at a later time. In this Privacy Policy, when we refer to "cookies" we include other technologies with similar purposes, such as pixels, tags, beacons. If you are looking for more information on cookies, you can refer to websites such as http://www.cookiecentral.com/ and https://www.allaboutcookies.org/.
This Privacy Policy is for transparency purposes and some of the data that we identify in this Privacy Policy as personal data may not be protected as personal data under applicable laws. For instance, business contact information is excluded under some privacy laws but is considered personal data under the GDPR.
When does this Privacy Policy not apply?
If you click through to links to third parties websites, applications, or services from our Services, this Privacy Policy does not apply to the processing of personal data by such external services. It is always a good idea to read their privacy policies to understand what they do with your personal data!
Our Clients are responsible for implementing their own privacy policy which describes in further detail how they process your personal data when administering their mentorship program. This Privacy Policy does not apply to their processing of personal data outside of the Mentorly Enterprise Solution Services, and we do not have full control over how they process your personal data. Depending on the subscription plan selected by our Clients, our level of involvement in processing personal data may vary. Clients may select some functionalities of the Services as opposed to others. Please refer to their respective privacy policies to have a better understanding.
What types of personal data do we collect and why?
We collect personal data to offer our Services, perform analytics, leverage AI technologies to enhance our services, and on behalf of our Clients using the Enterprise Solution Services. Below is a table containing the categories of personal data that we collect, along with the purpose for the collection.
Depending on the jurisdiction we are in, we use different legal bases to process your personal data. In Canada, we rely on your consent. If you are in the European Union, we rely on different legal bases to justify our processing of your personal data, such as consent, the performance of a contract, and our legitimate interests. These legal bases may not be valid under all jurisdictions and are indicative. Each time consent is a legal basis, you can withdraw your consent at any time. For AI-Enhanced Processing, we rely on the same legal grounds as outlined in this Privacy Policy, including consent, contract performance, and legitimate interests. You have the right to withdraw your consent to AI-Enhanced Processing at any time.
| Category | Description | Purposes and Legal Basis |
| Electronic Data |
We collect:
|
This information is collected automatically by our Services to function effectively, to fix bugs, or ensure the security of our Services. For instance, we may collect the language of your browser so that we present you with the right linguistic version of the Services. Geolocation and time zone allows us to offer you tutoring session schedules based on your time zone.
|
| Usage and Performance Data |
We collect:
|
We collect this information to understand the usage of our Services, whether there are bugs, and generally, to improve our Services. Usage and performance data may also be used to provide our clients with business intelligence on the performance of their mentorship program. Usage data do not allow us to determine your identity and are generally provided as aggregated data or by reference to an anonymous identifier. This data may be subject to AI-Enhanced Processing to derive insights and improve platform performance. We collect usage and performance data based on your consent. |
| Communication Data |
We collect:
|
If you communicate with us by email, on social media, by using our live chat on our Website, or by any other means, we collect the personal data that you share with us, such as your email address and the content of your communication. If you communicate with us using social media, we will have access to your publicly available information. We can also access the booking messages sent from Mentees to Mentors, for instance, to resolve a claim concerning the mentorship session. Communication data may be subject to AI-Enhanced Processing to better understand user needs and enhance our support services, subject to strict data minimization and anonymization protocols We collect communication data based on consent. |
| Support Data |
Support data may include :
|
We collect Support Data so that we can support Mentees or Mentors using the Services, or the Managers of our Clients. We collect support data to perform our contract with you. |
| Mentee Profile Information |
When Mentees make a profile, we collect:
|
We collect this information to build a Mentee profile so that we can help to match you with relevant Mentors based on your needs and interests and those of Mentors, as stated in their Mentor Profile. We may use AI-Enhanced Processing to analyze Mentee profile information to improve mentor-mentee matching and to provide personalized recommendations. This processing is performed in accordance with data minimization principles and with appropriate safeguards. We collect this data based on consent. |
| Mentor Profile Information |
When Mentors make a profile, we collect:
|
We collect this information to build a Mentor profile so that we can match you with relevant Mentees who can contact you for mentorship sessions. We use your needs and interests and those of Mentees to do so. We collect this data based on consent. |
| Login Credentials |
You can log in to our Services in one of two ways:
|
We require an email and password for you to login into the Services. When you use Google, Facebook, or Linkedin Login, your password and email are automatically pulled to allow you to log in. We collect this data based on consent. |
| Interactions between Mentees and Mentors |
Mentorly can see all booking requests (which Mentee booked with which Mentor for instance), and information associated with bookings, such as:
|
We can access these categories of information between Mentors and Mentees so that we can investigate claims about the Services and verify the quality of the Services. We collect this data to perform our contractual obligations. |
| Marketing Data |
We collect:
|
We collect marketing data so that we can send you newsletters and marketing communications. If you consent to receive our newsletters, we will regularly send newsletters announcing new mentors, features, promotions, requests, and important Mentorly information. You can unsubscribe at any time directly in the emails or by contacting us. We collect marketing data based on consent. |
| InKind Fund Application |
Mentees are asked to provide:
|
Mentors are not asked to provide any additional information, but we can see your contribution percentage. We collect this information to determine which Mentees are eligible to receive the InKind Fund and to see which Mentors contribute to the InKind fund. We collect this data based on consent. |
| Blog Comments |
We collect:
|
We require a name and email for someone to be allowed to comment on our blog. We only publish the comments and not the email address. We collect this data based on consent. |
| Financial Information |
To pay Mentors for their work:
To process payments:
Relating to your purchases:
|
We require payment information to allow our payment processor Stripe to process payments. Stripe also uses the Identification Data that you provide with your Financial Information to conduct verifications to prevent fraud, money laundering, and other bad stuff! Stripe is certified PCI DSS Level 1. The Mentor’s SIN number may be collected and tokenized by Stripe through Mentorly to confirm identity and to comply with obligations under tax and fiscal law. We collect this data based to perform our contract with you. |
| Identification Data |
We collect personal data when you fill out forms to communicate with us. For example, we ask that enterprises that want a demo of our Services fill out a demo form providing:
|
If you communicate with us by email, on social media, by using our live chat on our Website, or by any other means, such as by filling out a demo form on our Website, we collect the personal data that you share with us, such as your email address and the content of your communication. If you communicate with us using social media, we will have access to your publicly available information. We collect this data based on consent. |
| Social Media Data |
Publicly available information
|
If you follow us or interact with us on social media, we may process your personal data for marketing or advertising purposes, subject to applicable laws, including those on consent. We collect this data based on our legitimate interests as part of our direct marketing strategy. |
What cookies do you use and why?
We use cookies for our Services to function as intended, to conduct marketing, to provide functionalities on our Platform, to analyze our performance, and to ensure that our Services are secure. Cookies are also useful to identify bugs and errors. We use both first-party and third-party cookies installed by partners on our Website.
We collect essential, functional, and analytics cookies. These are installed by us and third parties. We install essential cookies based on our legitimate interests, as essential cookies are required to provide you with the Services. However, we only install functional and analytics cookies based on your consent.
We collect cookies that classify in each of these categories:
| Type of cookie | Description |
| Essential |
Essential cookies are necessary to operate the core functions of our Services. These include login cookies, session ID cookies, language cookies as well as security cookies. We are not required to obtain your consent for these cookies. |
| Functional |
Functional cookies are used to provide you with some functionalities, such as a live chat, and to remember preferences, consents, and configurations. |
| Analytics |
Analytics cookies are used to generate aggregated statistical data about traffic and behavior of users when using our Services. For instance, we can determine how much time users spend on a page, and how successful our advertising is. For instance, the cookie named “_ga” is used by Google Analytics to gather data about your behavior on our Services. |
*Note that we do not conduct interest-based advertising. This means that we do not use marketing cookies for retargeting purposes.
Do you use Google Analytics?
Yes, Mentorly uses Google Analytics to view key metrics such as how many visitors view the website, peak hours of traffic, and response to specific marketing campaigns or press. Google Analytics is Google’s analytical tool that helps us to understand how users engage with our Services. It uses a set of cookies to collect information and report site usage statistics without allowing us to identify individual visitors. We also track paid ads on Google Analytics.
For more information on Google Analytics, including how to opt-out from certain data collection, please visit https://tools.google.com/dlpage/gaoptout?hl=en.
Who do you share my personal data with?
Yes, we do share your personal data with third parties for a number of reasons including to (1) to provide you with the Services (2) to provide IT support, (3) to process payments, (4) to send emails, and communicate with you, (5) to market our Services, (6) to offer chat functions and videoconferencing (7) to allow Clients to manage Enterprise Solution Services, and (8) to enhance our services through AI-Enhanced Processing, (9) as required by the law. We can also share your personal data in the context of a merger and acquisition, as part of bankruptcy procedures or for other corporate requirements.
Just to be clear, we are not data brokers, and we do not sell your personal data to third parties.
It is important to note that Clients using Mentorly Enterprise Services Solutions can choose to share personal data with other categories of recipients as part of their use of our turnkey solution. Please refer to their respective privacy policies.
In the table below, we provide more information on the third parties we share your personal data with and provide their privacy policies by hyperlinks.
| Category | Explanations |
| Service Providers |
Service providers are used to providing you with some functionalities that are outsourced to third parties. We use different categories of third-party service providers
|
| IT Service Providers |
We use IT, service providers, to offer you the Services, such as to host the Services. For example, we use: |
| AI Service Providers |
We use AI service providers to enhance our services and provide more value to program managers and users through AI-Enhanced Processing. For example, we use:
|
| Communication Providers |
We use communication partners to send you emails, manage our live chats, and send other communications. For example, we use: |
| Marketing Partners |
We use marketing partners to (1) analyze our advertising campaigns’ performance; (2) manage our leads and users, and (3) provide you with marketing content, such as newsletters. For example, we use: |
| Telecommunication Video Partners |
We use telecommunication video partners to offer communication functions within the Services and to offer the sessions between Mentors by videoconference. For example: |
| Financial Partners |
We share personal data with financial partners to complete payments. For example, we use Stripe to process payments. |
| Integration Partners |
If we integrate our Platform with third parties’ applications, such as a payment platform, this may require the sharing of personal data with these third parties. Integration partners are not our suppliers. You are required to enter into distinct agreements with them and review their privacy policy. We are not responsible for the privacy practices of third parties that are not our suppliers, such as ERP software. You must review their privacy policies. We only share your personal data with integration partners if requested through a contract with the organization that gave you access to our Services. |
| Law Enforcement and other authorities | We may receive requests from authorities to access your personal data. We will validate that the request is licit before responding. When possible, we will advise you. We will only share what is strictly required. |
| Clients Managers |
In the Mentorly Enterprise Solution, Managers can access the information of the Mentees in the Manager portal. They can see the following categories of information:
Clients are free to organize their mentorship programs as they see fit, and may share their personal data with other third parties and use them for purposes that they see fit in accordance with their privacy policies. |
In the case of a merger or acquisition, sale of assets, corporate reorganization, bankruptcy filing, insolvency procedures, or similar circumstances, your personal data would be considered our assets and property. In these circumstances, ownership of the personal data we collected may be transferred or we may have to share some of your personal data to conclude, negotiate or discuss with third parties. We will only share what we are required to share for these specific purposes.
Where do you store my personal data?
We use Amazon Web Services (“AWS”) to host our Services and to store your personal data in the United States. However, our service providers may process your personal data internationally, including in the United States, depending on where they are located.
Our Clients may also process your personal data internationally, in accordance with their respective privacy policies.
If you are in the European Union, we are required to ensure that appropriate safeguards are in place prior to transferring your personal data out of the European Union. We do so through standard contractual clauses, as is the case for AWS, or through other safeguards when they are available.
How long do you retain my personal data?
We retain personal data for as long as necessary to provide you with the Services, to perform our marketing campaigns effectively or as required by applicable laws, whichever is longer. We use both persistent and session Cookies. Session cookies are deleted once you close your browser, whereas persistent cookies remain active on your device for some time. For instance, Google Analytics cookies remain installed on your device for 2 years. This allows Google Analytics to track you for analytic purposes, as well as for marketing purposes, and to provide us with aggregated data on your behavior.
How do you keep my personal data secure?
Our data centers are certified by independent auditors based on several frameworks, such as SOC 1/ISAE 3402, SOC 2, SOC 3, ISO 9001, ISO 27001, ISO 27017, and ISO 27018. Our payment processor, Stripe, is certified PCI DSS Level 1. When we develop our Services, we refer to security best practices such as OWASP. However, securing your personal data takes teamwork. You also need to do your part, such as by keeping your credentials confidential and using secure networks, especially when you make payment.
When using AI-Enhanced Processing, we implement additional security measures, including data minimization and anonymization techniques, to ensure that personal data shared with AI Service Providers is protected. We ensure that all AI subprocessors implement technical and organizational safeguards appropriate to the risk level of the processed data.
Can I manage my cookie preferences?
You can manage your cookie preferences through your browser. However, if you turn all cookies off, you may not have access to the same functionalities as other users.
Click on your browser for more information:
- Google Chrome
- Firefox
- Safari
- Internet Explorer
- Opera
What are my rights regarding my personal data?
The law provides you with some rights over your personal data. Your rights vary depending on the laws that apply to your situation, and the specific circumstances of the request. Mentorly acknowledges the right of individuals to access their personal data. Upon request to support@mentorly.co, we will provide you with confirmation as to whether we are processing your personal data, and have the data communicated to you within a reasonable time. Your rights differ depending on where you are located in the world.
With respect to AI-Enhanced Processing, you have the right to:
• Request information about how your personal data is processed using AI technologies
• Object to such processing where permitted by law
• Request human review of automated decisions that significantly affect you
• Withdraw consent to AI-Enhanced Processing where consent is the basis for processing
In most locations, you have the right to correct, amend or delete your personal data where it is inaccurate or has been processed in violation of this Privacy Policy.
In the European Union, you may also benefit from these additional rights:
- The right to revoke your consent when processing is based on consent;
- The right to object to the processing of your personal data;
- The right to restrict the processing of your personal data;
- The right to data portability, which means that your personal data is provided to you or a third party in normal format to allow you to re-use them, including with another provider;
- The right to have automated decisions being reviewed by a human in some cases, and some rights over profiling.
If you would like to learn more about these rights, please click here for a more detailed explanation. All of these rights are subject to limitations within the law, so if we cannot comply, we will respond to you and let you know why.
If you want to exercise one of these rights and the situation allows for such exercise, you can contact us at support@mentorly.co.
We will try to help you with your request free of charge. However, we may request that you pay a reasonable fee if you request a transcript, or a reproduction or for us to send a copy of your personal data if the law allows us to do so. If we need to charge a fee to process your application, we will contact you before addressing your request.
For security reasons and to avoid any fraudulent request, we may be required to ask that you provide proof of identity with your request. We will not use such personal data for any other purposes.
We will respond to your request within thirty (30) days unless agreed otherwise. If your request is denied, we will notify you in writing, and provide you with detailed motives and information on how to contest our decision.
If you are in the European Union, you can contact your local data protection authority. The list of data protection authorities can be found here.
The Office of the Privacy Commissioner of Canada drafted this FAQ to help you access your personal data when it is held by a business. You can also contact the Office of the Privacy Commissioner of Canada’s Information Center:
Telephone
9:00 am to 4:00 pm EST
Toll-free: 1-800-282-1376
Mailing address
Office of the Privacy Commissioner
30 Victoria Street
Gatineau, Québec
K1A 1H3
You can also use this online form.
If you have any issue with how we process your personal data, or how we responded to your request, please let us know. We will do our best to improve our processes to make certain that it does not happen again. We will also provide you with additional information about our practices if you would like us to do so.
If you are still not satisfied, you can lodge a complaint to the Office of the Privacy Commissioner of Canada using this online form, or to your local privacy regulators, or if you are in the European Union, with your local data protection authority.
Changes to this Privacy Policy
We may change this Privacy Policy from time to time. When material changes are made to this Privacy Policy, Customers will be notified through the contact email given to us at least two weeks prior to modification taking effect. Questions about the new Privacy Policy should be addressed to support@mentorly.co.