Privacy Policy

1. What we collect

• Your account: your email address (or the name and email of your Google account) and your sign-in sessions.
• The wallet address you link. It is public on the blockchain. If you change your address, the previous one is archived and hidden, not shown anymore.
• The public trades of that address, read from the blockchain, and the price history and public details (name, symbol, image) of the tokens involved. We keep them so that we do not read them again. They are not tied to your account in that cache.
• What you write in the Service: your journal notes, the explanations you give for a case, the limits of your trading plan, the mood and the note you add when you end a session, your conversation with the AI coach, and the note and result text of your trade reviews. The screenshot you send for a trade review is read and not kept.
• Your alerts, if you connect Telegram: the identifier of your Telegram chat (and your Telegram username if you have one), your alert settings, and a log of the alerts sent to you (their text, which states a pattern seen in your trades). Telegram only lets us write to you after you press Start in our bot; you can send /stop or disconnect from the Alerts page at any time.
• Your trading sessions: when you start and end a session, and what our code observed in your trades during it (counts of behaviors seen, buys, sales and their result). They are computed from your public wallet and kept so that you can reread your reports and so that the AI coach can remember how you traded. We keep what is observable in the trades, never a guess about your feelings: the mood is only the one you pick yourself.
• Your plan: which plan you have, how it is billed, whether it is active, its end date, and the reference of your subscription at our payment provider. We never receive your card number.
• An anonymous identifier stored in a cookie of your browser, and the link between this identifier and the address you analyzed (with dates).
• Daily usage counters: a hashed form of your connection address (we do not store the raw address), the number of requests that day and the addresses analyzed from that connection, and your own counters (coach messages, trade reviews). They protect the Service and its costs from abuse and apply your plan limits.
• If you write to us: your message and your email address.

2. How we use it

We do not sell your data, we show no advertising, and we do not build a profile of you beyond what the Service shows you.

• To compute and show you the report, the score, the calendar and the journal you asked for.
• To answer you through the AI coach and the trade review.
• To remember which address is yours, to apply the one-address rule and your plan, and to manage your subscription.
• To limit abuse, keep the Service available and control its costs, and to keep it secure.
• To answer your messages and requests.

3. Wallets and other people

A wallet address and its transactions are public, but a trading history says a lot about a person. That is why we ask you to analyze only your own wallet, or one whose owner agreed. A report is shown only to the account that requested it; we do not publish or share reports.

If an address that belongs to you was analyzed by someone else and you want the data we hold about it deleted, write to support@gomentor.io.

4. AI processing

No AI is used to compute the report, the score or any figure: every number is computed by code. The AI coach and the trade review use artificial intelligence only to explain figures that were already computed. They never receive raw blockchain data.

To answer you, our AI provider (Anthropic) receives: a summary of figures computed from your wallet (counts, amounts, dates, token symbols, scores, recent positions), the notes and explanations you wrote, your trading plan, a summary of your recent sessions (counts and results, and the mood and note you added) and, when you end a session, the figures of that session so that it can write a short debrief, your recent messages to the coach, and, for a trade review, the screenshot and the note you sent. The screenshot is not kept by us after it is read. The AI provider processes this content to produce the answer, under its own terms for business customers.

Answers go through automatic checks before you see them. Please do not write private keys, seed phrases, passwords or other people's personal information in the chat or in a screenshot.

5. Who processes your data

• Supabase: our database and accounts.
• Helius: reads the Solana transactions and token details. It receives the wallet address you analyze and, while your alerts are on, tells us when that wallet has a new transaction.
• Telegram: delivers your alerts, if you connect it. It receives the text of each alert and sees your chat with our bot.
• CoinGecko (GeckoTerminal): token price history. It receives token addresses, not yours.
• Anthropic: the AI of the coach and the trade review (see AI processing above).
• Whop: payments and subscriptions. It receives what you give on its payment page and tells us your plan; we never see your card number.
• Vercel: hosting of the website. It also sees connection data needed to deliver pages.
• Google: only if you choose to sign in with Google.
• Resend: sending the sign-in code by email, if you use that way to sign in.
• Namecheap: our domain name, and the forwarding of the emails you send to our support address.

6. Where your data goes

Our database is in [region of the Supabase project]. Some providers are in the United States or elsewhere, so your data may be processed outside your country, under the safeguards that apply to each provider.

7. Why we may process it (legal bases)

To provide the Service and the plan you subscribed to; our legitimate interest in security, preventing abuse and controlling costs; your consent where the law requires it; and compliance with legal obligations (for example accounting, kept by our payment provider).

8. How long we keep it

We keep your account data while your account exists. When you delete your account (from your account page), we delete the account and what is tied to it: your linked wallet, journal notes and explanations, trading plan and sessions, trade reviews, conversation with the coach, Telegram link and alert history, and usage counters. Payment records stay with our payment provider as the law requires.

The public cache of an address (transactions and prices) is not tied to your account and is not deleted with it. We have not set automatic deletion periods yet, and this section will state them before the public launch. Until then, you can ask us to delete the cache of an address or any other data: write to support@gomentor.io.

9. Your rights

Depending on where you live, you can ask for access to your data, its correction, its deletion, to limit or object to its processing, or to receive it. Write to support@gomentor.io; we answer within the time the law requires. You can also complain to your data protection authority.

10. Children

Mentor is for people aged 18 or older. We do not knowingly collect data from children.

11. Security

Secrets such as access keys stay on our servers and never reach your browser. Connections are encrypted. The tables that hold your data are closed to the public: only our server can read them. No system is perfectly secure, and we cannot guarantee it.

12. Cookies, changes and contact

See our Cookie Policy. We may update this policy; the date at the top shows the latest version. Questions: support@gomentor.io.