This policy explains what we collect, why, who we share it with, how long we keep it, and what you can ask us to do. Contact us any time at privacy@nurvimo.com.
1Who is responsible
MentorMeGlobal, Inc., doing business as Nurvimo, 391 Las Colinas Blvd E, Ste 130-2084, Irving, TX 75039-6291 United States, is responsible for the personal information described here. Our privacy contact is privacy@nurvimo.com.
We are a United States company. Personal information about users in Canada is transferred to and processed in the United States and is subject to United States law, including lawful access by United States authorities. See section 8.
2What we collect
You give us:
- Account information. Name, email, password, profile photo, country, city and timezone.
- Expert profile information. Introduction video or link, biography, experience and work history, subject categories, session pricing, availability, languages, and any credential documents you choose to submit.
- Booking and session information. What you booked, when, with whom, your stated goals for the session, and attendance.
- Messages. Messages you send through the Platform to another user or to support.
- Reviews and ratings you write or receive.
- Session recordings, only where both participants consented before that session.
- Support communications, including anything you attach.
- Reports you make about another user.
Collected through third parties on our behalf:
- Identity verification information. Stripe collects your identity documents and details to verify you and to enable payouts. Nurvimo receives the verification result and limited status information. We do not receive or store your identity document images or full government identifiers.
- Payment information. Stripe processes card details. Nurvimo never receives your full card number. We receive the last four digits, card brand, the amount, the currency and the outcome.
- Payout information. Bank or payout details are held by Stripe, not by us.
Collected automatically:
- Device and technical information. IP address, browser and operating system, device identifiers, language, referring pages, pages viewed, searches run, clicks, timestamps, crash and error logs.
- Approximate location. Derived from IP address, at city or region level. We do not collect precise GPS location.
- Cookies and similar technologies. See section 10.
From other sources:
- Stripe (verification and payment outcomes), our fraud and security vendors, analytics providers, public professional registers where you claim a credential, and, if you sign in with a third party account, the basic profile that provider shares.
Sensitive information. We do not require or intentionally request government identification numbers, financial account numbers, precise geolocation, biometric identifiers, or information about your race, religion, health, sexual life, political opinions or union membership. Please do not send us these. If you choose to include sensitive information in a profile, message, session or other communication, you are choosing to share it with the other participant, where applicable, and with us as the platform operator.
3Why we use it
| Purpose | Examples |
|---|---|
| Provide the service | Create your account, show profiles, run search and matching, take bookings, host sessions, process payments and payouts, publish reviews |
| Trust and safety | Verify identity, detect fake profiles and fake reviews, investigate reports, enforce our policies, protect users from harm |
| Fraud and financial crime prevention | Detect stolen cards, collusive bookings, chargeback abuse and money laundering patterns |
| Support | Answer your questions and resolve disputes between users |
| Improve the product | Understand what works, fix errors, test changes, measure performance |
| Personalisation | Order search results and suggest categories or Experts based on what you have looked for and booked. We do not make decisions with legal or similarly significant effects about you by automated means alone |
| Communications | Booking confirmations, reminders, receipts, security and policy notices |
| Marketing | Only with your express consent, and only until you withdraw it |
| Legal and compliance | Meet tax, accounting, sanctions and other legal obligations, respond to lawful requests, establish and defend legal claims |
Legal basis. In Canada we rely on your consent, expressed or implied by the circumstances, and on the limited exceptions in privacy law for fraud investigation, legal compliance and business transactions. Consent for anything beyond running the service, such as marketing, is express and separate. In the United States we process on the basis described in this policy and honour applicable state rights.
4When we share it
With other users. Your public profile, first name and last initial, photo, reviews and ratings are visible to other users. When a booking is confirmed, the other participant sees your name, your profile and the messages you send them. Explorers do not see an Expert's payout details, and Experts do not see an Explorer's payment details.
With service providers, only for the purposes above and under contract: Stripe (payments, payouts, identity verification), Amazon Web Services (hosting, United States), our video service (session delivery and recording where consented), email and messaging providers, analytics providers, customer support tooling, and fraud and security vendors. We keep a current list at [nurvimo.com/legal/subprocessors].
For legal reasons. Where required by law, to respond to a valid legal request, to enforce our Terms, to detect or prevent fraud or a security issue, or where necessary to protect the rights, property or safety of any person. We assess requests for validity and, unless legally prohibited, we tell the affected user.
In a corporate transaction. If Nurvimo is involved in a merger, financing, acquisition or sale of assets, personal information may be transferred as part of it, subject to the acquirer honouring this policy or notifying you of a material change. Where required, we will limit disclosure to what is necessary for the transaction and require the recipient to protect it.
We do not sell your personal information, and we do not share it for cross context behavioural advertising, as those terms are defined under United States state privacy laws.
5Sessions and recordings
Sessions are not recorded unless both participants give express consent before that session begins, each time. Recordings are stored encrypted, are accessible only to the two participants and to a small number of authorised Nurvimo staff for a safety or dispute investigation, and are deleted 90 days after the session unless a dispute or legal hold is open. Either participant may delete their access and may request deletion of the recording at any time; where the other participant objects, we will keep it only for the length of any open dispute. We do not use recordings to train models, to build advertising profiles, or for marketing. Full detail is in the Recording and Session Conduct Policy.
6How long we keep it
| Data | Retention |
|---|---|
| Account and profile | While the account is open, then 30 days, then deleted or anonymised |
| Booking and payment records | 7 years, for tax, accounting and dispute purposes |
| Messages between users | 24 months after the session, or the length of any open dispute |
| Session recordings | 90 days, or the length of any open dispute |
| Reviews | Retained and shown after account closure in anonymised form, because they are part of the marketplace record |
| Trust and safety records, including bans | 7 years, so that a banned person cannot simply re register |
| Marketing consent and withdrawal records | 3 years after withdrawal, to prove compliance |
| Acceptance of terms records | 7 years after account closure |
| Technical logs | 12 months, with IP addresses truncated after 24 months |
7Security
We use encryption in transit and at rest, access controls with least privilege, multi factor authentication for staff, logging and monitoring, and an annual independent penetration test. We do not store full payment card data. No system is perfectly secure, and we cannot guarantee absolute security. If a breach creates a real risk of significant harm we will notify affected users and the relevant regulators as the law requires, and we maintain records of all breaches.
8Where your information goes
Nurvimo is based in the United States and our infrastructure is hosted there. If you are in Canada, your personal information is transferred to, stored in and processed in the United States by us and by our service providers. While it is there, it is subject to United States law and may be accessible to United States courts, law enforcement and national security authorities.
We use contractual protections with our service providers that require a comparable level of protection to what applies here. You may contact us for more information about our transfer practices.
9Children
Nurvimo is for adults. You must be 18 to use it. We do not knowingly collect personal information from anyone under 18. If we learn that we have, we delete it and close the account. If you believe a minor has given us information, contact privacy@nurvimo.com.
10Cookies and analytics
We use cookies and similar technologies to keep you signed in, remember your preferences, keep the service secure, and understand how the site is used.
- Strictly necessary: sign in, security, fraud prevention, load balancing. These cannot be turned off.
- Functional: language, timezone, saved preferences.
- Analytics: aggregate usage measurement so we can improve the product.
We do not use advertising or cross site tracking cookies. Where required, we ask for your choice through a banner before setting anything beyond strictly necessary cookies, and you can change it at any time at [nurvimo.com/cookies]. You can also block cookies in your browser, though parts of the site will stop working.
We honour the Global Privacy Control and similar universal opt out signals where your browser sends one.
11Your choices and rights
Everyone, wherever you live, can:
- see and download your profile, bookings, messages and reviews;
- correct your information in settings;
- delete your account, subject to the retention periods in section 6;
- withdraw marketing consent at any time;
- ask us a question or complain, at privacy@nurvimo.com.
If you are in Canada. You have the right to access the personal information we hold about you and to ask for corrections. You may withdraw consent, subject to legal or contractual restrictions and reasonable notice; withdrawing consent to processing that is necessary to run your account means we cannot continue to provide it. You may direct a complaint to us first, and then to the Office of the Privacy Commissioner of Canada, or to your provincial commissioner in Quebec, British Columbia or Alberta. We will respond to an access request within 30 days.
If you are in the United States. State privacy laws give residents of some states rights to know, access, correct, delete and port their personal information, to opt out of sale, targeted advertising and certain profiling, and not to be discriminated against for exercising them. Nurvimo does not sell personal information, does not share it for cross context behavioural advertising, and does not use it for targeted advertising.
We honour access, correction, deletion and portability requests from residents of any United States state, whether or not that state's law currently applies to a company of our size, because it is simpler and better. Submit a request at privacy@nurvimo.com. We will verify your identity through your account. You may use an authorised agent with written permission. We respond within 45 days and may extend once where necessary. If we decline, we will tell you why and how to appeal; if we deny an appeal you may contact your state attorney general.
Nurvimo does not currently meet the applicability thresholds of most state comprehensive privacy laws, which generally require processing the personal data of tens of thousands of residents of a single state. Some obligations apply regardless of size, including consent for the processing or sale of sensitive data in certain states. We will update this policy as our scale changes.
Sensitive data. We do not collect sensitive personal data as defined by those laws, and we do not sell or share it.
12Do Not Track
Browsers send Do Not Track signals inconsistently and there is no agreed standard, so we do not respond to them. We do honour the Global Privacy Control.
13Changes
We will post any change here with a new version number and effective date, and keep prior versions at nurvimo.com/legal/privacy/archive. For a material change we will notify you by email and in product at least 30 days before it takes effect, and where the change requires your consent we will ask for it.
14Contact and complaints
Privacy questions and requests: privacy@nurvimo.com
Postal: MentorMeGlobal, Inc., 391 Las Colinas Blvd E, Ste 130-2084, Irving, TX, 75039-6291 United States, attention Privacy
If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada at priv.gc.ca, your provincial privacy commissioner, or your state attorney general.