Privacy Policy

1. Who we are

Easy Mentor is a platform for mentoring businesses, developed and operated by 57.552.876 ANTONIO MIGUEL MAGDALENO GUEDES, Brazilian company registration (CNPJ) 57.552.876/0001-68, based in Cidreira/RS, Brazil ("Easy Mentor", "we"). This policy explains how we process personal data on the website easymentor.com.br, on the platform (app.easymentor.com.br and each mentoring business's address, such as yourmentoring.easymentor.com.br) and in the integrations we offer, in accordance with Brazil's General Data Protection Law (Law 13,709/2018, "LGPD").

2. Our role

• Website visitors, people who request the free trial, and the mentoring businesses that subscribe (mentors and their team): we are the controller.
• Students and the content a mentoring business puts on the platform: the mentoring business is the controller, and Easy Mentor acts as a processor, handling the data on its behalf and following its instructions. Students should send requests about their data to their mentoring business; if they reach us, we forward them and help the business respond.

3. Data we process

• Website and free trial: name, email, WhatsApp number, mentoring business name, niche, number of students, Instagram and website entered in the form; and Google Analytics browsing data, only if you accept it in the cookie notice.
• Platform accounts: name, email, password (stored hashed by the authentication provider; we cannot read it), role in the mentoring business and access logs.
• Mentoring content: lessons, materials, exercises and answers, uploaded files, team comments and corrections, session diary (session reports and next steps), lesson progress and notifications.
• AI assistant (when the mentoring business enables it): the student's questions, the answers, and the context sent to the model — progress, exercises, comments and session diary, according to the sources the business allowed; the text of files uploaded in exercises; and the business's knowledge material.
• Zoom integration (when a mentoring business connects its Zoom account): the Zoom account identifier, access tokens (stored encrypted) and recording metadata — meeting ID and topic, date, duration and host. The video is transferred from Zoom to the business's own video hosting account and is not stored on our servers. We do not access participant lists or chat messages.
• Panda Video integration: the business's API key, stored encrypted.
• Usage measurement: we use Google Analytics on the mentoring team's screens to understand how the product is used. We do not measure student screens.

4. Purposes and legal bases

• Providing the contracted service: accounts, content, integrations and the AI assistant (performance of a contract).
• Answering free trial requests and contacting those who signed up (pre-contractual steps at the data subject's request).
• Security, abuse prevention and access logs (legitimate interest and legal obligation, such as Brazil's Internet Civil Framework).
• Measuring website usage (consent) and team screen usage (legitimate interest in improving the product).
• Complying with legal, tax and regulatory obligations.

We do not sell personal data and do not use mentoring content for advertising.

5. Artificial intelligence

The AI assistant uses the Anthropic API. Under Anthropic's commercial terms, data sent through the API is not used to train models; it may be retained for a limited time, according to Anthropic's policies, for safety and abuse prevention. Students are told what the assistant uses before they ask, and the mentoring business decides whether its team can read the conversations. The assistant's answers may contain errors and do not replace the mentoring business's guidance.

6. Who we share data with

We use service providers that process data on our behalf, only to provide the service:

• Supabase — database, authentication and file storage (servers in São Paulo, Brazil).
• Vercel — website and platform hosting.
• Anthropic — AI assistant.
• Resend — email delivery.
• Google — Google Analytics.
• Zoom and Panda Video — when the mentoring business connects its own accounts.

We may also share data with authorities when required by law.

7. International transfers

Some of these providers process data outside Brazil, mainly in the United States. These transfers follow article 33 of the LGPD, with providers that adopt appropriate contractual safeguards and security measures.

8. Retention

• While the mentoring business's account is active.
• Free trial without subscription: data is deleted 7 days after the trial ends.
• After cancellation: the business's data is deleted or anonymized within 90 days, except what the law requires us to keep.
• Access logs: 6 months, as required by Brazil's Internet Civil Framework.
• Zoom integration: access tokens are deleted when the business disconnects Zoom or removes the app from its Zoom account.

9. Security

Data is encrypted in transit (TLS) and at rest. Integration credentials are kept in an encrypted vault. Each mentoring business can only access its own data, and within it, access depends on each person's role (administrator, support or student). Internal access is limited to the people who need it to operate the service.

10. Your rights and how to exercise them

Under the LGPD, you may request at any time:

• confirmation that we process your data, and access to it;
• correction of incomplete, inaccurate or outdated data;
• anonymization, blocking or deletion of unnecessary or excessive data, or data processed unlawfully;
• portability of your data to another provider;
• deletion of data processed based on your consent;
• information about who we share your data with;
• information about the option not to consent and its consequences, and withdrawal of consent;
• objection to processing carried out without consent, when it does not comply with the law;
• review of decisions made solely by automated processing.

To exercise any of these rights, write to antonio@sgagenciadigital.com.br. We respond within 15 days. If you are a student of a mentoring business, you can contact the business directly or contact us, and we will forward your request. You may also file a complaint with Brazil's National Data Protection Authority (ANPD). If you are in the European Union, the equivalent rights under the General Data Protection Regulation (GDPR) can be exercised through the same channel.

11. Cookies

On the website we use essential cookies and, only with your consent in the cookie notice, Google Analytics cookies. On the platform we use essential cookies to keep signed-in users logged in and, on team screens, usage measurement cookies.

12. Data protection officer and contact

Our data protection officer can be reached at antonio@sgagenciadigital.com.br.

13. Changes to this policy

We may update this policy. When a change is significant, we notify mentoring businesses on the platform or by email. The date of the last update is shown at the top of this page.