Privacy Policy
Last updated: 12 June 2026
1. Who is responsible for your data
ProMentor is a product of DataDecorum.com, an agency of Audit Centric Ltd, a company registered in Scotland. Audit Centric Ltd is the data controller for personal data processed on ProMentor. Contact us through the in-app Support and safety form or via our support page.
2. Pseudonymous by design
You can take part on ProMentor under a chosen display name — your public profile does not have to reveal your legal identity. We still hold your account email so we can operate your account securely and meet legal obligations, but it is not shown to other members.
3. What we collect
- Account data — email address, display name, and the sign-in identity provided by our authentication provider (Supabase; Google or Apple sign-in where you choose them).
- Profile data you choose to share — job title, organisation, bio, skills and learning needs, LinkedIn URL, avatar. All optional.
- Mentoring activity — communities you join, connections, sessions, goals and milestones, badges and reliability levels.
- Safety records — reports you file or that are filed about your conduct, blocks, and moderation actions.
- Support requests — what you send through the Support and safety form, including optional screenshots.
- Analytics — only with your in-app consent, we collect product usage events through PostHog (EU-hosted, cookieless). Decline or withdraw consent at any time in Settings.
4. Why we process it
- To provide the platform (contract): accounts, communities, mentoring features.
- To keep members safe (legitimate interests / legal obligation): moderation, abuse prevention, and — as set out in our Terms — disclosure to law enforcement, voluntarily where we believe conduct may be unlawful or someone is at risk, or upon lawful request.
- To improve the product (consent): analytics as above.
5. Where your data lives and who processes it
- Application data is hosted on EU infrastructure (Germany).
- Authentication is provided by Supabase; analytics (with consent) by PostHog's EU service; DNS and content delivery by Cloudflare; encrypted off-site backups are stored with Backblaze (EU region).
- We do not sell personal data, and we do not share it with advertisers.
6. How long we keep it
For as long as your account is active. When you delete your account in Settings, it is deactivated immediately and your personal data is permanently deleted after the stated grace period, except where we must retain specific records to comply with the law or to handle an ongoing safety matter.
7. Your rights
Under UK GDPR you can ask for access to, correction of, deletion of, or a portable copy of your personal data, and you can object to or ask us to restrict processing. Use the in-app Support and safety form, or our support page. You can also complain to the UK Information Commissioner's Office (ico.org.uk).
8. Children
ProMentor is for people aged 18 and over.
9. Changes
If we make material changes to this policy we will tell you in the app before they take effect.