This Privacy Policy describes how ONEG Engineering Services Ltd ("Company", "we", "us") collects, uses, stores, and protects your personal data when you use the MentForge platform ("Platform").
Financial Data: Income and expense transactions, product listings, customer records, sales records, payment methods, amounts, descriptions, and references
Communications: Messages sent through the Platform, session booking details, project applications, mentor requests
1.2 Information Generated by the Platform
Profit & Loss statements calculated from your financial entries
Growth Capital Readiness scores derived from your activity and financial data
Work Profile CVs generated from session attendance and project completions
SROI metrics aggregated from all users' financial data
Session attendance records marked by mentors
1.3 Technical Data
Device type, browser type, operating system
IP address and approximate location
Pages visited, features used, and interaction timestamps
2. How We Use Your Data
Platform Operation: To provide, maintain, and improve Platform features
Mentor Matching: To recommend suitable mentors based on your track, center, and skills
Financial Reporting: To generate P&L statements, readiness scores, and SROI calculations
Program Management: To enable Administrators and authorized Stakeholders to monitor program performance
Communications: To send notifications via email, in-app messages, and WhatsApp
Disbursement Tracking: To record and verify stipend disbursements through the approval workflow
Analytics: To understand usage patterns and improve the service (using aggregated, anonymized data)
Legal Compliance: To comply with applicable laws and regulations
3. Who Can See Your Data
Your Organization's Administrators: Hub Directors and Hub Admins can view your profile, financial data, session attendance, and readiness scores for program management.
Approved Stakeholders: Funders and senior management with approved stakeholder access can view aggregated and individual business performance data.
Your Mentor(s): Accepted mentors can see your name, business name, contact information, session attendance, and project submissions.
Other Users: Your name, skills, and track are visible in the directory. Financial data is NOT visible to other interns.
Service Providers: Supabase (database), Vercel (hosting), WhatsApp Cloud API (notifications). These providers process data under their respective privacy policies.
Legal Requirements: We may disclose data if required by law, court order, or governmental authority.
We do not sell your personal data to third parties.
4. Data Retention
Account data is retained for 24 months after account deletion or program completion.
Financial transaction data is retained for 7 years for accounting and audit requirements.
Aggregated, anonymized data may be retained indefinitely for research and product improvement.
You may request deletion by contacting info@mentforge.com. Requests processed within 30 days.
5. Data Security
Row-level security (RLS) ensuring users can only access their own data unless authorized
Encrypted database connections (SSL/TLS)
Password hashing — we never store plaintext passwords
While we take reasonable measures to protect your data, no system is completely secure. You are responsible for maintaining the security of your account credentials.
6. Your Rights
Access: Request a copy of the personal data we hold about you
Correction: Request correction of inaccurate personal data
Deletion: Request deletion of your personal data, subject to legal retention requirements
Data Portability: Request export of your data in a machine-readable format (CSV)
Withdraw Consent: Withdraw consent for specific data processing activities
To exercise any of these rights, contact info@mentforge.com. We will respond within 30 days.
7. WhatsApp Notifications
By providing your phone number, you consent to receiving WhatsApp messages related to your Platform activity. You may opt out by updating your profile settings or contacting info@mentforge.com.
8. Children's Privacy
The Platform is not intended for children under 16. We do not knowingly collect data from children under 16.
9. International Data Transfers
Your data may be stored on servers outside the Republic of Ghana (Supabase, Vercel). By using the Platform, you consent to such transfers.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notification.