← Our Policies
📅 Effective Date: 31 July 2026
About This Policy
Stellar Mentoring UG ("we", "us", or "our") operates the Stellar Mentoring Platform (the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you use the Service.
Your data is processed in accordance with the EU General Data Protection Regulation (GDPR) and other applicable laws. Our infrastructure is hosted in the United States; international transfers are protected by the safeguards described in Section 4. We never sell personal data.
Section 1
Collection and Use of Personal Data
We collect only the data necessary to support the operation of mentorship programs hosted on our platform. This may include:
- Name
- Portrait photo
- Email address
- Employer name
- Phone number
- Work biography
Section 2
Purposes of Collection
We collect personal data for the following purposes:
- To verify the identity of invited mentorship participants
- To create and manage user accounts
- To enable continuous access to mentorship features as a mentor, mentee, or administrator
- To deliver high-quality service
- To meet regulatory or contractual obligations
- For other legitimate legal purposes related to the delivery of mentoring services
Section 3
Consent and Legal Basis
By registering for a mentorship program on our platform and accepting our Terms and Conditions, you give informed consent for the collection, processing, and transfer of your personal data.
Consent may be:
- Explicit — when you actively agree during registration
- Implied — when your participation in a mentoring match makes data sharing reasonably necessary
You may withdraw consent at any time, though this will require account deletion and removal from the mentorship program.
Section 4
Data Sharing and Transfers
Personal data may be shared only under the following conditions:
- With selected mentoring partners (mentor/mentee) as part of the match process
- With authorized administrators of the mentorship program
- With third-party service providers who support the Service (under strict data processing agreements)
- If legally required or to enforce legal rights
We do not sell personal data. The Service is operated using cloud infrastructure hosted in the United States (Amazon Web Services, N. Virginia / us-east-1 region). Regardless of where you are located, your personal data is transferred to and stored in the United States.
Where personal data is transferred out of the European Economic Area (EEA), the United Kingdom, or Switzerland, we rely on appropriate safeguards under GDPR Chapter V — the EU–U.S. Data Privacy Framework (including the UK Extension and the Swiss–U.S. framework), under which our infrastructure provider is certified, and, where required, the European Commission's Standard Contractual Clauses — so that your data receives an essentially equivalent level of protection. A copy of the applicable safeguards is available on request at privacy@stellarmentoring.com.
Our Service Providers (Sub-processors)
We use the following processors to operate the Service. Each acts on our documented instructions under a data processing agreement. This list may change as our providers evolve; the current list is available on request at privacy@stellarmentoring.com.
| Provider |
Purpose |
Data categories |
Location |
| Amazon Web Services (AWS) |
Cloud hosting, database, authentication, file storage, transactional email (Amazon SES), and content delivery / security (CloudFront & WAF) |
All account, profile, and program data processed by the platform |
United States (us-east-1) |
| Cloudflare (Turnstile) |
Bot / abuse detection on sign-up and public forms |
Technical request signals; no profile data |
United States / European Union |
| Sentry (Functional Software, Inc.) |
Application error monitoring — loaded only with your analytics consent |
Technical error/diagnostic data; personal identifiers are stripped before transmission |
United States |
| Atlassian (Jira Service Management) |
In-app help/support widget — loaded only with your support consent |
Contact details and message content you provide in a support request |
United States / European Union |
| Wild Apricot (Personify, Inc.) |
Membership-management synchronisation, where your organization uses it |
Name, email, and membership record data |
United States / Canada |
| Google Analytics (Google Ireland Ltd) |
Aggregate usage analytics, where enabled — loaded only with your analytics consent |
Pseudonymous usage data and truncated IP address |
United States |
Section 5
Data Retention
We retain personal data only as long as needed to fulfill the purposes outlined in this policy, or as legally required. Once data is no longer required, it is securely deleted or anonymised.
Section 6
Your Data Rights
As a data subject under GDPR, you have the right to:
- Access your personal data
- Request corrections or updates
- Object to certain processing activities
- Withdraw consent at any time
- Request data deletion (which includes account removal)
To exercise your rights, contact the mentorship program organizer. For full deletion, email privacy@stellarmentoring.com with the subject line "Account Deletion Request" and include the email address tied to your account.
Section 7
Data Hosting and Security
Our Service is hosted on secure cloud servers operated by Amazon Web Services in the United States (us-east-1 region), with encrypted backups stored in separate secure data centers. We use appropriate security safeguards including encrypted storage, access control, and regular audits. No online system is fully immune to risk — we act responsibly but cannot guarantee absolute security.
Section 8
Log Data and Analytics
We may collect log data such as IP address, browser details, and pages accessed. This data is used only for platform performance monitoring — not for cross-site tracking or advertising. We may use tools like Google Analytics, governed by their own privacy terms.
Section 9
Cookies
Cookies are used strictly for managing login sessions and storing user preferences. We do not use cookies to track user behaviour across sites. You can disable cookies in your browser, but this may impact access to the platform.
Section 10
Children's Privacy
Our platform is intended for users 18 years and older. We do not knowingly collect data from minors. If you believe a minor has submitted data, please contact us immediately.
Section 11
Policy Updates
We may revise this Privacy Policy from time to time. Material changes will be communicated — continued use of the Service after changes implies acceptance.
Section 12
Data Controller & Contact
Stellar Mentoring UG
Neumarkter Strasse 6, 81673 Munich, Germany
For any questions about this Privacy Policy: contact@stellarmentoring.com