Privacy policy

YoursMentor.in connects students with near-peer mentors. This policy covers both sides — students booking sessions and mentors running them — and is written to meet the Digital Personal Data Protection Act, 2023.

We do not ask your age and we do not restrict the platform by age. If you are under 18, the law treats your personal data as a child’s: a parent or guardian can ask us what we hold about you and have it deleted, on your behalf, at grievance@yoursmentor.in, and we will act on that request without argument.

We do not profile anyone for advertising, and we do not track anyone across other sites — neither adults nor children. If you are a parent who would rather your child was not here, write to the same address and we will remove the account.

Everything here is either given by you or produced by using the product.

• To create your account — your name and email address. That is all that is required.
• To match you with mentors — college, course, graduating year, home state, languages, whether you are the first in your family to go to university, and what you are working towards. All optional. Leaving them blank means worse matches, not a worse account.
• To run bookings and payments — which sessions you booked, what you paid, your credit balance, and the Razorpay payment reference.
• To run the sessions themselves — attendance, any notes a mentor writes, and the reviews you leave.
• If you are a mentor — your headline, employer, college, pricing, availability, LinkedIn URL, and the identity document you upload for verification.
• A profile photo, if you upload one. Nothing breaks if you do not.

We never see your card or UPI details. Payment is handled entirely by Razorpay; we receive a reference and an amount, nothing more.

Mentors are public. If you are a mentor, your name, photo, headline, employer, college, languages, topics, price, rating and reviews appear in the directory to anyone, signed in or not. That is the point of the listing.

Students are not. Your profile is not browsable. A mentor sees your name, photo, college and what you said you are working towards — and only once you have booked a session with them. Other students never see you.

A review you write appears on the mentor’s card under your first name only, never your full name or your college.

• Video and audio are not recorded. Calls run through LiveKit and are not stored by us in any form. Nobody can replay your session.
• Chat messages are stored so an admin can investigate a report. Phone numbers and email addresses typed into chat are automatically replaced before the message is saved — that is a safety measure and it applies to everyone.
• Anything drawn on the shared whiteboard exists only during the call and is not saved.

We do not sell your data and we do not run advertising on it. We use a small number of services to operate at all:

• Supabase — database, accounts and file storage.
• Vercel — hosting and request logs.
• Razorpay — payments. They collect your card or UPI details directly, under their own privacy policy.
• LiveKit — carries the live video and audio, which it does not store.

We also pass an employer’s domain name to a public favicon service to fetch company logos for mentor cards. The logo is then cached on our own storage, so your browser never contacts that service and it is never told who is browsing.

We will hand over data if a law or a court requires it. If that happens and we are permitted to tell you, we will.

• While your account is open, we keep your profile and your booking history — you need it to see what you have paid for.
• When you ask us to delete your account it is immediately hidden from everywhere on the platform, and permanently erased after 30 days. The delay is so a mistaken tap can be undone, and you can cancel it yourself at any point within it.
• Where a payment record has to be kept for tax or accounting, we keep the record of the transaction and not your profile.

Under the DPDP Act you can do all of this yourself, today:

• See and correct what we hold — Settings.
• Take a copy — Settings has an export that downloads everything we hold about you as a single file, including bookings, payments, reviews and credits.
• Have it deleted — Settings, and it completes after 30 days. We will refuse only while you have an upcoming session you have paid for, because deleting then would take the booking with it and leave you out of pocket. Cancel that first and the credit comes back.
• Choose what we email you — reminders, summaries and product news are separate switches in Settings. Session reminders are the one thing we would ask you to keep on.

You can also nominate someone to exercise these rights if you are unable to. Email grievance@yoursmentor.in.

Access to data is enforced in the database itself, per row, not only in the application — so a bug in a page cannot expose another person’s bookings. Passwords are hashed by Supabase and are not visible to us. Payment credentials never reach our servers.

If we discover a breach affecting you, we will tell you and the Data Protection Board as the Act requires. We would rather tell you early and be imprecise than wait until we have a tidy story.

Email grievance@yoursmentor.in and our grievance officer will respond within 30 days, usually far sooner. Details are on the Contact page. If you are not satisfied, you may complain to the Data Protection Board of India.

If we change this in a way that affects what we do with your data, we will email you before it takes effect rather than quietly updating the date at the top.