1. Who we are
Synetra operates Synetra, a mentorship management platform for students, mentors and the administrators of the programmes they belong to. For anything in this policy, write to support@synetra.com.
2. What we collect
All users
- Account details: full name, email address, password (stored only as a hash by our authentication provider), phone number if you give it.
- Role and account status, sign-in timestamps, notification preferences.
- Content you create: messages, meeting details, session notes, progress reports, task submissions, quiz answers, reviews and ratings.
- Files you upload: résumés, documents, materials and submissions.
- Technical records: IP address and user-agent on audited actions, document download logs.
Students
- Profile: preferred domain, skills, interests, education level, location, bio.
- Assessment data: quiz attempts, scores, grades, and attempt telemetry (see section 4).
Mentors
- Professional profile: organisation, designation, years of experience, expertise, domains, LinkedIn URL, bio.
- Identity verification: the type of government ID you present, the last four characters only of its number, and the image or PDF of the document you upload for review. The full ID number is never stored.
- Qualification, certification and experience documents.
- Availability, capacity, verification decisions and reviewer notes.
3. Why we use it
- To run the service: create accounts, verify mentors, match students to mentors, deliver messages and notifications, store and serve files.
- To assess learning: grade quizzes and tasks, show grades to the student and their mentor.
- To keep the platform safe and accountable: audit consequential actions, log downloads, watermark shared materials, detect abuse and rate-limit sign-ups.
- To meet legal obligations and respond to lawful requests.
The legal bases, where applicable, are performance of our agreement with you, our legitimate interest in a safe and trustworthy platform, consent where we ask for it, and legal obligation.
4. Quiz integrity telemetry
While you take a quiz, the platform records how long you spend on each question, how many times you change an answer, whether the quiz tab lost focus and for how long, paste, copy and right-click attempts, developer-tool shortcuts, and page reloads. The server also records the total time from start to submission and compares your answer pattern with other students’ attempts on the same quiz.
These signals produce an advisory integrity score and a list of flags that your mentor and programme administrators can see. They are not used to fail an attempt automatically. We do not use your camera, microphone, screen or keystroke content.
5. Watermarked downloads
When you download a material a mentor shared with you, the copy you receive is stamped with the platform name, your name, your email address and the date, and the download is recorded. This lets a mentor trace a copy that is redistributed without permission.
6. Who can see what
- Your mentor or student sees your name, the profile fields relevant to the pairing, and everything exchanged within the engagement.
- Programme administrators can see all accounts, profiles, engagements, documents, verification material, assessment results and audit logs for their platform.
- Other users cannot see your data. Access is enforced by database row-level security, not just by the interface.
7. Processors and hosting
Data is stored with Supabase (PostgreSQL database, authentication and private file storage) and the application is served by Vercel, with Cloudflare in front for DNS and edge protection. Transactional email, when enabled, is sent through Resend. Each processor handles data under its own security and data-processing terms. We do not sell personal data and we do not use advertising trackers.
8. Cookies
We set only the cookies required to keep you signed in (session tokens issued by our authentication provider) and a browser-local preference for light or dark theme. There are no analytics or advertising cookies.
9. Retention
- Account and profile data: for as long as your account exists, then deleted within 30 days of deactivation unless we must keep it.
- Engagement content (messages, notes, submissions, results): for the life of the programme record, so certificates and grades stay verifiable.
- Mentor identity documents: until verification is complete and for 12 months after, then deleted; the ID type and last four characters remain on the profile.
- Audit and download logs: 24 months.
10. Your rights
Subject to applicable law in India and elsewhere, you can ask us to access, correct, export or delete your personal data, to restrict or object to certain processing, and to withdraw consent where processing is based on it. Write to support@synetra.com; we respond within 30 days. You may also complain to your local data-protection authority.
11. Security
Traffic is encrypted in transit (TLS with HSTS). Files sit in private storage buckets and are served only through short-lived signed URLs or authenticated server routes. Roles are enforced in the database with row-level security; secrets are held server-side only. Read the Terms for your responsibilities around your own credentials.
12. Children
Synetra is intended for users aged 16 and over, or younger students enrolled by an institution that has obtained the necessary consent. We do not knowingly collect data from children outside that arrangement.
13. Changes
We will post any material change here with a new effective date and, for significant changes, notify you in the platform.