Privacy Policy

We collect certain data directly from you, data about your use and interaction with the Services, and data from third parties you connect with MentoraJo. We also collect certain information automatically when you access or use the Services. All data described in this section may be subject to the following processing activities: collecting, recording, organizing, structuring, storing, adapting, altering, retrieving, consulting, encrypting, pseudonymizing, erasing, combining, and transmitting.

We collect different types of personal data depending on how you use the Services. Below are examples to help you understand what we collect. Account Data To access content on our platform (including courses and documents), you must create a user account. When creating an account, we collect: • Full name • Email address • Account credentials • Account settings You may also be asked to provide additional information, such as: • Date of birth • Phone number (for authentication or promotional messaging) If you apply to become an mentor, we may request additional information such as: • Government-issued identification • University student ID • Tax or payment verification information Each account is assigned a unique identifying number. Legal Basis for Processing: • Performance of contract • Legitimate interests (service provisioning, identity verification, fraud prevention, security, communication, marketing, and advertising) • Consent (for promotional communications) Profile Data You may voluntarily provide additional profile information such as: • Profile photo • Biography • Other optional profile details Your Profile Data may be publicly viewable by other users. Legal Basis for Processing: • Performance of contract • Legitimate interests (enhanced functionality and transparency of content sources) Academic Overview Data To personalize your experience and display relevant university or faculty content, you may provide: • University name • Faculty • Major or field of study Legal Basis for Processing: • Performance of contract • Legitimate interests (service provisioning, user experience improvement, fraud prevention, compliance, marketing) Shared Content The Services allow you to interact with other users and share content publicly, including: • Uploading courses and educational content • Posting reviews • Asking or answering questions • Sending messages • Uploading photos or other materials Shared content may be publicly viewable and processed in accordance with the Terms of Use. Legal Basis for Processing: • Performance of contract • Legitimate interests (platform functionality, marketing, service enhancement) Learning Data When you access and use content, we collect data such as: • Courses added to your Wishlist • Content accessed • Start and completion progress • Interactions with mentors • Assignment submissions and related activity Legal Basis for Processing: • Performance of contract • Legitimate interests (platform optimization, personalization, fraud prevention, marketing) Student Payment Data If you purchase content, we collect payment-related information necessary to process transactions. Payment data may include billing details and transaction identifiers. Sensitive payment information (such as full card numbers) may be processed by third-party payment providers. Legal Basis for Processing: • Performance of contract • Legal obligation • Legitimate interests (payment facilitation, fraud prevention, compliance) Mentor Payment Data If you are a mentor, you may link a bank account or payment service account to receive payouts. We may collect: • Payment account email address • Account ID • Physical address • Tax information (where required) • Other data necessary to process payouts Legal Basis for Processing: • Performance of contract • Legal obligation • Legitimate interests (payment processing, compliance, fraud prevention) Third-Party Account Data If you connect your MentoraJo account to third-party platforms (such as Google), we may receive certain information through their APIs. The information received depends on your privacy settings and the third party’s policies, and may include: • First and last name • User identification number • Email address If you access the Services through a third-party platform, your data is also subject to that third party’s privacy policies. MentoraJo’s use and transfer of information received from Google APIs will comply with the Google API Services User Data Policy, including Limited Use requirements. Legal Basis for Processing: • Legitimate interests (identity verification, improved user experience) Communication and Support Data If you contact us for support or to report a concern, we collect: • Name • Email address • Location • User ID • Transaction or refund IDs • Message content • Any other information you provide We use this data to respond to inquiries, investigate issues, and improve support services. Legal Basis for Processing: • Legitimate interests (customer support, technical support, fraud prevention, security)

When you access or use the Services, we collect certain data automatically. System Data Technical information about your device and system, including: • IP address • Device type • Screen resolution • Bandwidth • Time zone • Operating system • Browser type Legal Basis for Processing: • Performance of contract • Legitimate interests (service provisioning, security, product improvement, marketing) Usage Data Information about your interactions with the Services, including: • Content accessed • Time spent on pages • Features used • Search queries • Click activity • Date and time of access • Referrer URLs Legal Basis for Processing: • Legitimate interests (service improvement, fraud prevention, personalization, marketing) The data described above (“Cookie Data”) is collected using server logs and tracking technologies. It is stored by us and associated with your account where applicable. Depending on your browser and cookie settings, certain data may also be transmitted to third-party services (including Google) for analytics and advertising purposes, as described in the “Cookies and Data Collection Tools” section below.

We collect data about you through cookies, tracking technologies, third-party services, and your direct interactions with the Services.

We use cookies and similar tracking technologies to collect, store, and share information about your activities across websites, including MentoraJo. Cookies are small text files stored on your browser. They allow us to remember information about your visits, such as your preferred language, login session, and other settings, and help make the Services easier and more personalized to use. To learn more about cookies generally, you may visit: cookiepedia.co.uk/all-about-cookies We may also use tracking pixels (clear GIFs or web beacons) in emails to measure deliverability, open rates, and engagement. MentoraJo and third-party service providers acting on our behalf (such as analytics providers and advertising partners) use server log files and automated data collection tools, including: • Cookies • Tags • Scripts • Customized links • Device or browser fingerprinting technologies • Web beacons (collectively, “Data Collection Tools”). These Data Collection Tools automatically collect certain System Data and Usage Data (as described before in Section 1) when you access and use the Services. In some cases, we may combine information collected through Data Collection Tools with other personal data we collect about you, as described in this Privacy Policy.

MentoraJo uses the following categories of Data Collection Tools for the purposes described below: Strictly Necessary Cookies These Data Collection Tools are required for the Services to function properly. They enable core functionality such as: • Logging into your account • Accessing secure areas • Processing payments • Protecting against fraudulent logins • Detecting and preventing abuse or unauthorized access If you disable these cookies, certain parts of the Services may not function correctly or may become unavailable. Functional Cookies These Data Collection Tools: • Remember your preferences and browser settings • Customize content to make it more relevant to you • Store appearance-related settings (such as language preference) • Improve user experience They enhance functionality but are not strictly required for the Services to operate. Performance and Analytics Cookies These Data Collection Tools help us measure and improve the Services by collecting information such as: • Usage statistics • Traffic sources • Visit counts • Feature performance • Interaction data They also help us: • Test different versions of MentoraJo • Understand which features users prefer • Measure engagement with email communications

You can configure your browser settings to: • Receive alerts when cookies are placed • Limit the types of cookies you allow • Block or refuse cookies entirely Please note that if you disable certain cookies, some features of the Services may not function properly, and your overall experience may be limited or less personalized.

We use your personal data to operate, provide, maintain, secure, and improve the Services. This includes communicating with you, processing transactions, troubleshooting issues, preventing fraud and abuse, analyzing usage trends, delivering personalized content and advertising, and complying with legal obligations. We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, regulatory, or reporting requirements. If you close your MentoraJo account, we will deactivate your account and delete or anonymize your personal data within a reasonable period following termination, unless retention is required by law or necessary for safety, fraud prevention, dispute resolution, or enforcement of our agreements.

We use the personal data collected through your use of the Services for the following purposes: Service Delivery and Administration • Provide and administer the Services • Facilitate participation in courses and related content • Display personalized or customized content • Enable communication between users (Data categories used: Account Data; Shared Content; Learning Data; System Data; Usage Data; Academic Overview Data) Payment Processing • Process payments from students • Process mentor payouts • Detect fraudulent payment activity (Data categories used: Student Payment Data; Mentor Payment Data; Account Data) Order and Request Processing • Process content purchases and service requests • Confirm delivery of content or services • Detect fraud or abuse • Enforce MentoraJo policies (Data categories used: Account Data; Learning Data; Student Payment Data; System Data; Usage Data; Communications and Support Data) Communications We communicate with you regarding your account and the Services, including: • Responding to inquiries and support requests • Sending administrative messages (e.g., policy updates, security alerts) • Notifying you about changes to the Services or agreements • Sending progress updates regarding courses • Sending newsletters, promotions, surveys, and information about new features or services (subject to your communication preferences) (Data categories used: Account Data; Shared Content; Learning Data; Promotions and Survey Data; System Data; Communications and Support Data) Personalization and Account Management • Manage your account and preferences • Personalize your experience • Customize content and recommendations (Data categories used: Account Data; Learning Data; Student Payment Data; Mentor Payment Data; System Data; Usage Data; Cookie Data) Feedback and Quality Improvement • Request and analyze user feedback • Improve Services, features, and content quality (Data categories used: Account Data; Communications and Support Data; Usage Data) Identity Verification • Verify mentor identities • Prevent impersonation or fraud (Data categories used: Account Data; Mentor Payment Data) Security and Fraud Prevention • Maintain platform security • Detect and prevent fraud, abuse, or unauthorized access • Troubleshoot and resolve technical issues (Data categories used: Account Data; Student Payment Data; Mentor Payment Data; Communications and Support Data; System Data; Usage Data; Academic Overview Data) Marketing and Advertising • Market subscription plans • Promote products, services, surveys, and promotions • Display and tailor advertisements within the Services • Advertise MentoraJo on third-party websites and applications • Identify users across devices for advertising and analytics purposes (Data categories used: Account Data; Learning Data; System Data; Usage Data; Academic Overview Data; Cookie Data) Analytics and Research • Analyze trends and traffic • Track purchases and engagement • Measure feature performance • Combine data with third-party analytics providers where permitted (Data categories used: Account Data; Data from Third-Party Services; Usage Data; Cookie Data; Student Payment Data; Communications and Support Data) Legal and Safety Purposes • Comply with applicable laws and regulations • Respond to lawful requests from authorities • Protect the safety, rights, and integrity of users, employees, third parties, and the public • Enforce our agreements (All data categories may be used where necessary)

MentoraJo may process user inputs submitted to generative artificial intelligence (“GenAI”) features in order to generate responses or provide requested functionality. We do not use your personal data to train or fine-tune generative AI models, unless explicitly disclosed and permitted by applicable law. GenAI outputs are generated automatically and may not always be accurate. Users remain responsible for reviewing and verifying generated content.

We may share certain personal data about you with mentors, students, service providers, business partners, analytics providers, advertising partners, and other third parties as described below. We may also share your data when required for legal compliance, security purposes, corporate restructuring, or with your consent. We do not sell your personal data. We may share your data under the following circumstances:

We share certain data about you (excluding your email address, and one-time passwords (OTPs)) with mentors or teaching assistants for content you access or inquire about. This allows them to improve their content and better understand their audience. This data may include: • Country • University, faculty, and major • Browser language • Operating system • Device type • Referral source • Enrolled courses • Course reviews • General activity related to their content We do not share your email address, or OTPs with mentors. (Data categories shared: Account Data; System Data; Usage Data; Academic Overview Data)

Depending on your privacy settings: • Your profile information may be publicly visible • Your Shared Content (such as reviews, questions, uploaded materials, or comments) may be publicly viewable • If you ask a question, your name and associated information may be visible (Data categories shared: Account Data; Profile Data; Shared Content)

We share your data with third-party service providers that perform services on our behalf, such as: • Payment processing providers • Fraud detection and prevention services • Hosting and cloud storage providers • Analytics providers • Email and communication platforms • Marketing and advertising partners • Customer support providers These service providers are contractually obligated to: • Access data only as necessary to perform services for MentoraJo • Process data only under our instructions • Maintain appropriate security safeguards (Data categories shared: All data categories as necessary)

We may share certain data with trusted business partners that: • Distribute our Services • Refer users to MentoraJo • Help deliver joint offerings (Data categories shared: Account Data; Learning Data; Communications and Support Data; System Data)

We use third-party analytics tools (such as Google Analytics) to better understand usage patterns and improve our Services. In some cases, we may share: • De-identified data (data where identifying information such as name and email has been removed and replaced with a token ID) • Limited contact information for analytics or marketing measurement purposes These providers may match data with publicly available or legally obtained datasets to help us better understand and communicate with users. (Data categories shared: Account Data; System Data; Usage Data; Cookie Data)

We may disclose your personal data if we believe in good faith that disclosure is necessary to: • Respond to judicial, governmental, or regulatory requests • Comply with a subpoena, warrant, or other lawful request • Enforce our Terms of Use, Privacy Policy, or other agreements • Detect, prevent, or address fraud, abuse, misuse, legal violations, or security issues • Protect the rights, property, or safety of MentoraJo, our users, employees, or the public • Consult with auditors, legal advisors, or compliance professionals • Comply with applicable laws (All data categories may be shared where required)

If MentoraJo undergoes a business transaction such as: • Merger • Acquisition • Corporate restructuring • Sale of assets • Bankruptcy or dissolution Your personal data may be transferred to a successor entity as part of that transaction, including during due diligence. (All data categories may be shared)

We may use and share certain Cookie Data with third-party advertising partners to: • Deliver targeted advertisements • Measure campaign effectiveness • Provide behavioral advertising • Perform web analytics Advertisers may collect Cookie Data through Data Collection Tools described in Section 2. They may also share advertising performance data with us. If you opt out of personalized advertising, you may still receive non-personalized (generic) advertisements. (Data categories shared: Cookie Data) Google Advertising Google Ads may use cookies to serve advertisements based on: • Your visits to MentoraJo • Your visits to other websites Google may also measure advertising performance. You may manage or opt out of Google’s personalized advertising at: adssettings.google.com (Data categories shared: Cookie Data)

We may share your personal data with third parties outside the scope of this Privacy Policy where you have provided explicit consent. (All data categories may be shared with consent)

If you click on links to third-party websites or services, the collection, use, and disclosure of your personal data will be governed by that third party’s privacy policy. We are not responsible for the privacy practices of third-party websites.

Depending on your location, you may have certain rights regarding the collection, use, and processing of your personal data. These rights may include: • Opting out of promotional communications • Managing cookie preferences • Requesting access to your personal data • Requesting correction or deletion of your personal data • Objecting to or restricting certain types of processing You may update, manage, or terminate your account directly within the Services. You may also contact us to submit individual rights requests. Parents or guardians who believe we have unintentionally collected personal data from an underage child should contact us to request deletion via: support@mentorajo.com.

You may choose not to provide certain personal data to us. However, doing so may limit your ability to access certain features or functionality of the Services. You may: • Opt out of promotional emails by using the unsubscribe link included in those emails • Adjust cookie settings through your browser or applicable cookie controls • Manage account preferences within your profile settings Please note that even if you opt out of promotional communications, we may still send administrative or service-related communications (such as security alerts or policy updates).

Updating or Correcting Your Data You may update or correct personal data you have provided by logging into your account and modifying your profile settings at any time. Deleting Your Account To terminate your account: • If you are a student, follow the steps available in your profile settings • If you are a mentor, follow the mentor account termination process within your dashboard If you experience difficulties, contact our Support Team at: support@mentorajo.com Please note: Even after account termination, some data may remain visible to others, including data that has: • Been copied, stored, or shared by other users (such as comments or reviews) • Been shared or disseminated by you • Been posted to third-party platforms Additionally, we may retain certain personal data after account termination where we have a lawful basis to do so, including for: • Legal and regulatory compliance • Record-keeping obligations • Fraud prevention and security • Dispute resolution • Enforcement of our agreements Such retained data will be handled in accordance with this Privacy Policy and applicable law. Accessing Your Data To request access to your personal data, please submit a request through our designated request form or contact us at support@mentorajo.com. For your protection: • Requests may need to be submitted from the email address associated with your account • We may require identity verification before processing your request We will respond within the timeframe required by applicable law (typically within one month). Please note that we may retain certain information where we have a lawful basis to do so, including for transaction completion and mandatory record-keeping.

MentoraJo is intended for university-level students and adult users. We recognize the importance of protecting children’s privacy and encourage parents and guardians to actively supervise their children’s online activities. Individuals under the age of 18 may not create an account unless they meet the minimum legal age required to consent to online services in their jurisdiction (for example, 16 years of age in the Hashemite Kingdom of Jordan), and have appropriate parental or guardian involvement where required. Individuals below the applicable age of consent may not use the Services. If we become aware that we have collected personal data from a child below the applicable age without proper authorization, we will take reasonable steps to delete that information promptly. Parents or guardians who believe that MentoraJo has collected personal data from a child in violation of this policy may contact us at: support@mentorajo.com

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or Services. If we make a material change to this Privacy Policy, we will notify you by appropriate means, which may include: • Email notification • In-product notification • Prominent notice on the Services • Any other method required by applicable law Unless otherwise stated, changes will become effective on the date they are posted. By continuing to access or use the Services after the effective date of any updates, you acknowledge and agree to the revised Privacy Policy, to the extent permitted by applicable law. The updated Privacy Policy supersedes all previous versions.

Any capitalized terms not defined in this Privacy Policy have the meanings given to them in MentoraJo’s Terms of Use. If this Privacy Policy is made available in a language other than Arabic, such version is provided for convenience only. In the event of any inconsistency or conflict between the Arabic version and any translated version, the Arabic version shall prevail, to the extent permitted by applicable law.

If you have any questions, concerns, requests, or disputes regarding this Privacy Policy or our data practices, you may contact us at: Email: support@mentorajo.com We will make reasonable efforts to respond to your inquiry in a timely manner.