Privacy Policy

Welcome to Ship ("we," "our," or "us"). This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you use our mentorship platform application ("Service").

1. Information We Collect

Personal Information

We collect information that you provide directly to us, including:

• Account information (name, email address, password)
• Profile information (professional background, skills, expertise areas)
• Organization details (company name, domain verification)
• Communication data (messages, session notes, feedback)
• Session information (scheduling data, meeting records)

Usage Information

We automatically collect certain information when you use our Service:

• Device information (IP address, browser type, operating system)
• Usage patterns (pages visited, features used, session duration)
• Performance data (error logs, response times)

Third-Party Integration Data

When you integrate with third-party services like Zoom:

• Meeting metadata (schedule, duration, participants)
• Integration tokens (for authorized access only)
• Sync information between platforms

2. How We Use Your Information

We use your information to:

• Provide our Service: Match mentors with mentees, facilitate sessions, manage profiles
• Communicate: Send service updates, session reminders, platform notifications
• Improve our Service: Analyze usage patterns, develop new features, fix issues
• Ensure Security: Protect against fraud, unauthorized access, and abuse
• Legal Compliance: Meet legal obligations and respond to legal requests

3. Information Sharing and Disclosure

Within Your Organization

Information may be shared with other users within your verified organization for mentorship matching and program administration.

Service Providers

We share information with trusted third-party service providers who assist us in operating our Service, including:

• Cloud hosting providers (database and application hosting)
• Email service providers (for authentication and notifications)
• Video conferencing platforms (for session integration)
• Analytics providers (for service improvement)

Legal Requirements

We may disclose your information when required by law or to protect our rights, your safety, or the safety of others.

4. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

• Encryption in transit and at rest
• Access controls and authentication
• Regular security assessments
• Secure development practices

5. Data Retention

We retain your information for as long as necessary to provide our Service and fulfill the purposes outlined in this policy. Specifically:

• Account information: Retained while your account is active
• Session data: Retained for program evaluation and improvement
• Communication records: Retained according to organizational policies

6. Your Rights and Choices

You have the right to:

• Access: Request a copy of your personal information
• Correct: Update or correct inaccurate information
• Delete: Request deletion of your personal information
• Opt-out: Unsubscribe from marketing communications
• Data Portability: Request your data in a portable format

7. Cookies and Tracking

We use cookies and similar technologies to enhance your experience. You can manage cookie preferences through your browser settings.

8. Children's Privacy

Our Service is not intended for children under 18. We do not knowingly collect personal information from children under 18.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers.

10. Google API and Zoom Data Usage Compliance

We affirm our strict compliance with Google's Limited Use requirements and similar restrictions for Zoom's APIs:

Google APIs Limited Use Compliance

Our application's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We DO NOT use Google user data to develop, improve, or train generalized AI/ML models
• We only use Google Calendar and Google Meet data for the express purpose of facilitating mentorship sessions within our platform
• Google user data is only accessed with explicit user consent and is used exclusively for scheduling and managing mentorship sessions
• We do not share Google user data with third parties except as necessary to provide our core mentorship services
• All Google API data is processed in accordance with our stated privacy practices and Google's user data policies

Google Limited Use Restrictions Compliance

Our use of data obtained from Google Workspace APIs and/or Google Photos APIs strictly adheres to the Limited Use of User Data Requirement as part of Google's Workspace API User Data and Developer Policy. This means, among other things, that we do not use this data to train AI/ML models, nor do we transfer or sell this data to third parties, or use it for advertising.

This statement explicitly confirms that our use of data obtained from Workspace APIs and/or Photos APIs adheres to the Limited Use restrictions, specifically regarding:

• No Training of AI/ML Models: We do not use this data to train our AI/ML models.
• No Transfer or Sale of Data: We do not transfer or sell this data to third parties.
• No Advertising: We do not use this data for advertising purposes.
• No Human Review: We do not allow human review of this data unless it's necessary for security purposes, to comply with applicable law, or as part of a deeply integrated and user-facing feature where users have explicitly consented to such review.

We affirm that we do not engage in any of the above activities with user data obtained through Google APIs, as required by Google's Limited Use policy.

Zoom API Data Usage

Our integration with Zoom's APIs is governed by similar principles:

• Zoom meeting data is used solely for creating and managing video conference sessions between mentors and mentees
• We DO NOT use Zoom user data for training AI/ML models or for purposes unrelated to our mentorship platform
• Zoom integration data includes only meeting metadata necessary for session scheduling and management
• All Zoom data is handled with the same security and privacy standards as outlined in this policy

Data Minimization

We practice data minimization by:

• Only requesting the minimum necessary permissions from Google and Zoom APIs
• Limiting data collection to what is essential for mentorship session functionality
• Regularly reviewing and purging unnecessary data
• Implementing automated data retention policies

11. Contact Information

If you have any questions about this Privacy Policy or our data practices, please contact us:

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date.

Last Updated: October 7, 2025