Privacy Policy for uMentor
At uMentor (hereinafter, "the Platform", "we", "us", or "our"), operated by Webempresario Ltd., we take the security and privacy of our users and their end-customers very seriously.
This Privacy Policy outlines how we collect, use, store, and protect information when you utilize our services, including our integrations with third-party tools such as Google Forms.
1. Information We Collect via Google APIs
To enable the seamless synchronization and import of registration data, our Platform allows users to connect their Google accounts using the official OAuth 2.0 authentication protocol.
Upon receiving your explicit consent, we strictly collect and process the following information:
- Form Responses (
forms.responses.readonly): We access, in read-only mode, the responses, timestamps, and user identifiers from the specific Google Form you explicitly connect to your custom subdomain. - Form Structure (
forms.body.readonly): We access, in read-only mode, the questions and structure of that same form, solely to let you match each question to the correct field in your dashboard when connecting it.
2. Limited Use of Google User Data
uMentor's use and transfer to any other app of information received from Google APIs will strictly adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically, data obtained through these APIs:
- Will never be sold or rented to third parties, ad networks, data brokers, or marketing companies under any circumstances.
- Will not be used to serve advertisements inside or outside the platform, nor will it be used to train artificial intelligence (AI) or machine learning models.
- Is only processed to execute the system's operational features explicitly requested by the user (transferring and visualizing registrants within their custom dashboard and database).
3. How We Store and Protect Your Data
All registration data extracted from Google Forms is stored on our secure servers located at IBM Datacenter in Dallas, US.
- We implement industry-standard encryption protocols (HTTPS/TLS) for data in transit and encryption at rest for our databases.
- Long-term access keys (Refresh Tokens) are stored securely and encrypted in our backend, tied strictly to your unique customer account identifier.
4. Data Sharing and Third-Party Transfer
Our platform is designed under a strict confidentiality policy. Your Google Forms registrant data is isolated within the infrastructure and subdomain assigned to your account ([client].umentor.site).
We do not share this data with any external entity, except when:
- Required by law or a binding court order.
- Strictly necessary for technical infrastructure providers (such as our database hosting), who operate under equivalent confidentiality agreements.
5. Data Retention and Deletion
We retain your imported registration data only for as long as your account remains active on our Platform, or until you choose to manually delete it via your dashboard.
If you wish to revoke our Platform's access to your Google account, you can do so at any time directly through your Google Account Security Settings (under "Third-party apps with account access"). Doing so will immediately invalidate our Refresh Token. Furthermore, you can request the permanent deletion of all data stored on our servers by emailing support@umentor.site.
6. Changes to this Privacy Policy
We reserve the right to update this Privacy Policy at any time to reflect technical or regulatory changes. We will notify you of any material changes by placing a prominent notice on the Platform or via your registered email address.