Privacy policy
Last updated 30 September 2026.
1. Who is responsible
gods in business now EOOD, 24 Lyuben Popov Str., 9005 Varna, Bulgaria (VAT BG208525450), is the controller. Contact: support@mentorfactory.ai.
2. The short version
- We don’t log your messages or your material. The server records usage metadata only and keeps the detailed rows for 90 days.
- Your documents, mentors and conversations live on your computer.
- Nothing you supply is used to train a model.
- You can delete your account from inside the app. What we must keep afterwards is listed below, not hidden.
3. What we process, and why
| What | Why | Where | Kept for |
|---|---|---|---|
| Your email address | to sign you in and identify your account | our server (EU); our email delivery provider, to send the sign-in link | while your account exists; after deletion, only a scrambled fingerprint of it, to stop repeat free trials |
| Usage metadata: tokens, credits, model, timing, and mentor and conversation identifiers | to meter credits and show your usage history | our server (EU) | detailed rows: 90 days. Daily totals: while your account exists, then kept only without your email address |
| Credit ledger: grants, purchases, spending, expiry | to run your balance and meet accounting law | our server (EU); our accountant, bound by professional confidentiality | as accounting law requires |
| A device identifier derived from your computer’s hardware | so free credits can’t be claimed again with a new email address | our server (EU) | while your account exists; after deletion, only the device’s free-trial record (it belongs to the device, is shared by all accounts on it, and holds no email address, conversations or mentors), to stop repeat free trials |
| Referral records | to apply referral credits | our server (EU) | while the programme runs |
| Payment and tax records | to charge you and comply with tax law | Stripe (merchant of record); we hold the customer reference and the ledger | as tax law requires |
| Support emails | to answer you | our email provider | 24 months after our last exchange |
Inactive accounts. An account nobody has signed in to for 24 months is deleted, together with all its account data (not only support emails). We email you 30 days before. Deletion is the same erasure as deleting the account in the app. Afterwards we keep only two things, both only to stop repeat free trials: a scrambled fingerprint of your email address, and the device’s free-trial record (it belongs to the device, is shared by all accounts on it, and holds no email address, conversations or mentors). Records that tax and accounting law require stay as listed above.
We don’t collect or keep: your documents, your mentors, your conversations, your voice recordings, the text of your questions or of the answers, or your card number.
Legal bases: contract (GDPR Art. 6(1)(b)) for the account, credits and support; legitimate interest in preventing abuse of the free plan (Art. 6(1)(f)); legal obligation (Art. 6(1)(c)) for tax and accounting records.
4. What leaves your computer, and when
- Building a mentor. Your material is read on your computer, then sent to our server in parts so the mentor can be built. The parts are processed and not stored: our database has no field that could hold your material. This step always uses our server, even with a local model switched on, because the generation method lives there.
- Asking a question. The mentor retrieves the relevant passages from your local copy and sends those passages and your question, through our server, to the AI model provider that writes the answer. Nothing else is sent: not your library, not your other mentors, not your history.
- Asking with Enhanced privacy mode (Mentor Guides and Mentor Workforce). Your own model, on your computer or your own network, writes the answer. The conversation never comes to us.
- Signing in. We email you a one-time link.
- Paying. Stripe handles the payment. Card details never reach us.
- Voice and recordings. Transcribed on your computer. The audio never leaves it: only the text of the transcript is used, like any other material.
- Exporting. Exporting a mentor, a profile or a conversation writes a file on your computer. Nothing is uploaded.
5. Who processes data for us
| Category | What they do | Where |
|---|---|---|
| Server hosting | runs our server | EU |
| AI model provider | writes answers and builds mentors | may be outside the EEA, see below |
| Email delivery | sends sign-in links and account emails | may be outside the EEA, see below |
| Payments | Stripe, merchant of record: takes payment, handles VAT, issues refunds | EU; may be outside the EEA, see below |
| Website hosting | serves this website | may be outside the EEA, see below |
Every processor works under a written data-processing agreement with us. We tell account holders by email before we add one.
Transfers outside the EEA. Answers may be generated by an AI model provider outside the EEA. Our email delivery, payment and website hosting providers may also process data outside the EEA. Those transfers are covered by Standard Contractual Clauses or an adequacy decision of the European Commission.
How we meet the GDPR. We are established in Bulgaria, so the GDPR applies to us directly. We keep a record of processing, publish the list above and hold a data-processing agreement with each processor. We notify affected users and the supervisory authority within 72 hours of learning of a personal-data breach. A data-processing agreement is available to business customers on request.
6. Your rights
You can access, correct, erase or export your data, restrict or object to processing, and complain to a supervisory authority.
- Export: the app exports your mentors, profiles and conversations to files on your computer.
- Deletion in the app: User settings → Account → Delete account, confirmed by an emailed code. What survives is limited to the three items in the terms (section 10).
- Everything else: write to support@mentorfactory.ai from the address on the account. We answer within 30 days.
- Complaints: the Bulgarian Commission for Personal Data Protection (КЗЛД), or your local authority.
7. Separate accounts on a shared computer
Each email address sees only its own mentors, conversations, Board sessions and recordings, even when several people use the same computer. This is separation by account, not encryption. Anyone who can log into your computer account can open those files directly. Use a login password and full-disk encryption.
8. Cookies and tracking
This website sets no advertising cookies and carries no tracking pixels, ad scripts or social embeds. The app sends no analytics to third parties. The website uses no analytics or tracking cookies.
9. Security
Data in transit is encrypted. The server runs in the EU, with restricted access.
10. Changes
If we change how we handle data, we update this page and email account holders before the change applies.