Privacy Policy

1. Owner and Data Controller

Eugeniuses
1524 Chemin de Stratford, Frontenac, QC J0B 2K0, Canada
Contact: [email protected]

2. Types of Personal Data Collected

okmentor collects the following categories of personal data, either directly from you or through third-party services:

2.1 Data You Provide

• Mentor account data: Name, email address, profile photo, bio, spoken languages, qualifications, certifications, and service descriptions.
• Booker data: Name, email address, and phone number (provided when making a booking).
• Booking details: Selected service, date, time, session notes, and cancellation/refund preferences.

2.2 Payment Data

Payment information (credit card numbers, billing address) is collected and processed directly by Stripe as our payment processor. okmentor does not store your full payment card details. We receive only a transaction confirmation and limited billing information (e.g., last four digits of the card, billing country) from Stripe. See Stripe's Privacy Policy for more information.

2.3 Usage Data

We may automatically collect information about how you interact with the Service, including pages visited, browser type, device information, IP address, and referring URLs.

3. Methods of Processing

We process your personal data using appropriate technical and organizational security measures to prevent unauthorized access, disclosure, modification, or destruction. Processing is carried out using computers and IT-enabled tools, following organizational procedures strictly related to the purposes indicated.

In addition to the data controller, your data may be accessible to:

• Persons involved in the operation of the Service (administration, development, support).
• Third-party service providers acting as data processors, including hosting providers, email delivery services, and payment processors (Stripe).

4. Legal Basis of Processing

We process your personal data on the following legal bases:

• Consent: You have given consent for one or more specific purposes (e.g., creating an account, subscribing to communications).
• Contract performance: Processing is necessary for the performance of a contract with you (e.g., processing a booking, delivering the Service).
• Legal obligation: Processing is necessary for compliance with a legal obligation (e.g., tax records, fraud prevention).
• Legitimate interest: Processing is necessary for the legitimate interests pursued by us (e.g., improving the Service, ensuring security), provided such interests are not overridden by your rights.

5. Place of Processing and International Transfers

Data is processed at the data controller's operating offices and at the data centers of third-party service providers. Our primary infrastructure is hosted in Canada and the European Union.

If data is transferred outside of your country of residence, we ensure that appropriate safeguards are in place, such as standard contractual clauses approved by relevant authorities, to protect your data in accordance with applicable privacy laws.

6. Retention Period

Personal data is retained for as long as necessary to fulfill the purposes for which it was collected, including:

• Account data: Retained for the duration of your account. Upon account deletion, personal data is removed, subject to legal retention requirements.
• Booking records: Retained as necessary for legal, tax, or accounting obligations, typically for a period required by applicable law.
• Usage data: Retained in anonymized or aggregated form for analytics purposes.

When personal data is no longer needed, it will be securely deleted or anonymized.

7. Users' Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Right of access: Obtain confirmation as to whether your personal data is being processed and access a copy of it.
• Right to rectification: Request correction of inaccurate or incomplete personal data.
• Right to erasure: Request deletion of your personal data when it is no longer necessary for the purposes for which it was collected.
• Right to restrict processing: Request restriction of processing in certain circumstances.
• Right to data portability: Receive your personal data in a structured, commonly used, and machine-readable format.
• Right to object: Object to the processing of your personal data on grounds relating to your particular situation.
• Right to withdraw consent: Withdraw your consent at any time where processing is based on consent.
• Right to lodge a complaint: Lodge a complaint with a supervisory authority if you believe your rights have been violated.

To exercise any of these rights, contact us at [email protected]. We will respond to your request within the timeframe required by applicable law.

8. Cookies and Tracking

okmentor uses essential cookies required for the operation of the Service, such as session cookies for authentication. We do not use advertising or third-party tracking cookies.

If we introduce analytics or non-essential cookies in the future, we will update this policy and obtain your consent where required by law.

9. System Logs

For operation and maintenance purposes, the Service may collect system logs — files that record interactions with the Service (access logs, error logs). System logs may contain personal data such as IP addresses. This data is used solely for diagnostic and security purposes and is retained for a limited period.

10. Legal Action

Your personal data may be used for legal purposes by the data controller in court or in the stages leading to possible legal action arising from improper use of the Service or related services. You acknowledge that we may be required to disclose personal data upon request of public authorities.

11. Changes to This Privacy Policy

We reserve the right to modify this Privacy Policy at any time. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this page periodically. Your continued use of the Service after any changes constitutes your acceptance of the revised Privacy Policy.

12. Definitions

• Personal data: Any information that directly, indirectly, or in connection with other information allows for the identification of a natural person.
• Usage data: Information collected automatically through the Service, such as IP addresses, browser details, pages visited, and access times.
• Data controller: The natural or legal person that determines the purposes and means of the processing of personal data — in this case, Eugeniuses.
• Data processor: A natural or legal person that processes personal data on behalf of the data controller (e.g., Stripe, hosting providers).
• Service: The okmentor platform, accessible at okmentor.co.
• User: Any individual who uses the Service, whether as a mentor or a booker.