Privacy Policy

MNTOR (“we”, “us”) is a coaching platform operated by CNQR Media FZCO, a company registered in Dubai, United Arab Emirates. MNTOR lets coaches run programs, client portals, applications, contracts, and payments under their own brand at mntor.co and on coach subdomains (yourname.mntor.co).

Questions about this policy or your data: email us at hello@mntor.co.

MNTOR handles data in two distinct roles, and your rights differ by which one applies:

When we are the controller. If you create a coach account, we decide how your account data is processed: your name, email, sign-in method, workspace settings, and subscription billing records.

When we process on a coach's behalf. If you apply to, enroll in, or participate in a coaching program on MNTOR, the coach who runs that program is responsible for your relationship and your data. We store and process it on their instructions: your application answers, program progress, submissions, contracts you sign with the coach, and payments you make to the coach. For requests about that data, contact your coach first — we support them in fulfilling it.

Account data — name, email address, and whether you sign in with Google or an email link. We never see or store passwords; sign-in is passwordless or via Google.

Workspace content — programs, roadmaps, tasks, landing pages, application forms, leads, client records, uploaded files, and messages that coaches and clients create on the platform.

Payment data — handled by Stripe. Card numbers never touch our servers. We store references (customer and subscription identifiers, invoice status) needed to run subscriptions and coach payouts. Coaches connect their own Stripe accounts; client payments go to the coach's Stripe account.

Technical data — server logs, approximate IP-based security signals (we store salted hashes of IP addresses for rate-limiting and abuse prevention, not raw addresses in security logs), and the session cookie that keeps you signed in.

We do not sell personal data. We do not run advertising trackers or third-party analytics cookies. The only cookie MNTOR sets is the session cookie required to keep you signed in.

We use a small set of infrastructure providers to run MNTOR, each processing data only as needed to provide the service: Vercel (hosting), Neon (database), Stripe (payments and billing), Resend (transactional email), Cloudflare R2 (file storage), and Google (optional sign-in). Each provider maintains its own security and compliance programs.

We send transactional emails only: sign-in links, invitations, program and review notifications, billing notices, and — for coaches — a daily summary of items waiting for them. Follow-up emails sent to leads are written and configured by the coach and sent on their behalf; replies go to the coach.

Account and workspace data is retained while the account is active. If a coach cancels, their workspace data is retained so they can reactivate, and deleted on request. You can request deletion of your account and associated personal data at any time by emailing hello@mntor.co; where we process data on a coach's behalf, we will coordinate with the coach to honour it. Some records (invoices, signed contracts, audit logs) may be retained longer where required for legal, tax, or dispute purposes.

Subject to applicable law, you can request access to, correction of, export of, or deletion of your personal data, and object to or restrict certain processing. Email hello@mntor.co and we will respond within 30 days. If you are in the EEA or UK, these rights arise under the GDPR / UK GDPR.

All traffic is encrypted in transit (HTTPS). Access to workspace data is enforced by a permission system on every action, with append-only audit logging of sensitive operations. Payment credentials are held by Stripe, not by us.

If we make material changes to this policy, we will update this page and note the new date above. Continued use of MNTOR after changes take effect constitutes acceptance.