Effective Date: January 1, 2025
Committed to protecting your personal data under the Digital Personal Data Protection Act, 2023
At UpMentor-X, we are deeply committed to protecting your personal data and privacy rights. This Privacy Policy explains how we collect, use, share, and protect your information in compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act) and other applicable laws of India.
By using our Service, you consent to the data practices described in this policy. If you do not agree with this policy, please do not use our Service.
Registration Data
Name, email address, phone number, profile picture, date of birth, and authentication credentials provided during account creation.
Profile Data
Professional information including current role, company, specialty area, years of experience, educational background, skills, certifications, bio, availability, and pricing information.
Communication Data
Messages, session notes, feedback, reviews, and other communications between mentors and mentees on our platform.
Usage Data
Information about how you use our Service, including session history, appointment bookings, search queries, pages visited, features used, and interaction patterns.
Device Data
IP address, browser type and version, device type, operating system, unique device identifiers, and general location information (city/country level).
Payment Data
Payment method details and transaction history. Note: We do not store complete credit card numbers; payment processing is handled by secure third-party payment processors.
Matching & Recommendations
To connect mentees with suitable mentors based on expertise, experience, availability, and preferences.
Communication & Service Delivery
To facilitate communication between users, schedule sessions, process payments, and deliver our core mentorship services.
Service Improvement
To analyze usage patterns, improve our platform features, personalize user experience, and develop new services.
Safety & Security
To verify user identities, prevent fraud, detect and address security threats, and ensure platform safety.
Legal Compliance
To comply with applicable laws, regulations, legal processes, and enforceable governmental requests.
Communication
To send you service updates, notifications, security alerts, and respond to your inquiries. Marketing communications are sent only with your explicit consent.
With Your Matches
Your profile information is shared with mentors or mentees you are matched with to facilitate mentorship connections.
With Service Providers
We share data with trusted third-party service providers (e.g., payment processors, cloud hosting, analytics) who are contractually bound to protect your data and use it only for specified purposes.
Legal Requirements
We may disclose your data when required by lawful court orders, government authorities, or to protect our legal rights and user safety.
Business Transfers
In the event of a merger, acquisition, or sale of assets, your data may be transferred. We will notify you before your data becomes subject to a different privacy policy.
We Never:
Encryption
All data is encrypted in transit (TLS/SSL) and at rest using industry-standard encryption protocols.
Access Controls
Strict role-based access controls ensure only authorized personnel can access user data.
Security Audits
Regular security audits, vulnerability assessments, and penetration testing.
Breach Notification
In case of a data breach, affected users will be notified within 72 hours as required by law.
Note: While we implement robust security measures, no system is 100% secure. We encourage users to use strong passwords and enable two-factor authentication where available.
Under the DPDP Act 2023, you have the following rights:
Right to Access
Request a copy of your personal data we hold and information about how it's being processed.
Right to Correction
Request correction of inaccurate or incomplete personal data.
Right to Deletion
Request deletion of your personal data, subject to legal retention requirements.
Right to Withdraw Consent
Withdraw consent for data processing at any time (may affect service availability).
Right to Data Portability
Request your data in a structured, commonly used, machine-readable format.
Right to Grievance Redressal
Lodge complaints with our Data Protection Officer or the Data Protection Board of India.
To Exercise Your Rights:
Contact our Data Protection Officer at privacy@upmentorx.com or through your account settings. We will respond to your request within 30 days.
We retain your personal data only as long as necessary for the purposes outlined in this policy or as required by law.
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact us.
Last Updated: January 1, 2025 • Version 1.0 • Compliant with DPDP Act 2023
