Privacy Policy | Qualify You

1. Introduction

Qualify You ("Qualify You", "we", "our", or "us") respects privacy and is committed to protecting personal data.

This Privacy Policy explains how we collect, use, store, share, analyze, and protect personal data when people use the Qualify You website, Organization Platform, User Portal, Expert Portal, Venture Portal, Labs portal (Qualify You Labs / Launch Shell), mentorship services, Expert Cohorts, Organization-sponsored programs, Program Workspaces, Program Intelligence, and related services.

Qualify You may be used by:

Organizations operating mentorship, training, entrepreneurship, workforce-development, graduate, sponsored, or similar programs;
Organization Members such as owners, admins, program managers, and coordinators;
Ventures and Venture Team members;
Experts, mentors, and consultants;
individual Participants in Organization-sponsored programs; and
individual marketplace Users who find Experts, join mentorship programs, or participate in Expert Cohorts.

We process personal data in accordance with applicable data protection laws and regulations, which may include Jordan's Personal Data Protection Law No. 24 of 2023 and other applicable privacy laws depending on the context and the location of the people involved.

This Privacy Policy should be read together with our Terms of Service and any applicable Organization agreement, Order Form, Data Processing Agreement, consent notice, or program-specific privacy notice.

2. Scope of This Policy

This Privacy Policy applies to personal data processed through Qualify You's Platform and services.

It applies whether you:

create an account;
are invited to an Organization;
join an Organization-sponsored program;
participate as a Venture or Venture Team member;
act as an Expert or Consultant;
purchase or join an individual mentorship program;
join an Expert Cohort;
book a consultation;
communicate through a Program Workspace;
attend a session;
submit assignments or evaluations;
interact with Program Intelligence or related analytics;
access Qualify You Labs, launch or operate lab sessions, use the browser lab shell, or manage Labs wallet balance and retained workspace volumes; or
contact Qualify You through the website or support channels.

Separate agreements may apply to certain enterprise, government, recruitment, consulting, or professional-services engagements.

3. Our Role and Organization Responsibilities

Depending on the context, Qualify You may process personal data for its own Platform operations, on behalf of an Organization, or in a context where both Qualify You and the Organization have separate legal responsibilities.

For Organization-sponsored programs:

the Organization generally determines who is invited or enrolled;
the Organization determines the purpose of its program and which people participate;
Qualify You provides the Platform infrastructure, program-delivery tools, portals, supervision features, and Program Intelligence capabilities; and
the Organization may receive access to Organization-scoped program data according to its permissions and applicable law.

The exact allocation of data protection responsibilities may be addressed in a Data Processing Agreement, Order Form, enterprise agreement, government agreement, or other written contract.

Organizations are responsible for ensuring that they have an appropriate lawful basis to provide personal data to Qualify You, invite people to programs, access Organization-scoped program activity, and use information available through supervision or Program Intelligence features.

4. Personal Data We Collect

We collect personal data reasonably necessary to operate the Platform, deliver services, manage Organization-sponsored programs, support expert-led delivery, provide Program Intelligence, process payments, maintain security, and improve Platform performance.

The categories of personal data we collect depend on your role and the services you use.

5. Account and Identity Information

We may collect:

first and last name;
email address;
phone number;
country and city;
profile photo;
language and communication preferences;
account credentials and authentication information;
account role;
account status; and
verification or security-related information where required.

6. Professional and Profile Information

Depending on your role, we may collect:

job title;
employer or organization;
professional biography;
years of experience;
skills;
technical skills;
soft skills;
areas of expertise;
education;
certifications;
professional links;
portfolio links;
projects;
work history;
CV or resume information;
career or professional summary; and
other profile information you choose to provide.

Some of this information may be extracted from a CV or resume that you upload and then shown to you for review or correction.

7. Organization Information

When an Organization uses Qualify You, we may process:

Organization name;
logo;
website;
description;
branding preferences;
primary, secondary, and accent colors;
billing details;
Organization contact information;
Organization Member information;
Organization Member roles and permissions;
Subscription information;
usage limits;
program information; and
audit or activity records associated with Organization administration.

8. Organization Member Data

For Organization Owners, Admins, Program Managers, Coordinators, and other authorized Organization Members, we may process:

identity and contact information;
Organization role;
program responsibilities;
invitations sent or accepted;
access permissions;
program actions;
administrative activity;
account status; and
security and audit information.

We may maintain records of significant administrative actions for security, accountability, support, dispute resolution, and Platform operations.

9. Venture and Venture Team Data

For venture-centric programs, we may process:

Venture name;
Venture website;
Venture description;
program enrollment;
Venture Team members;
founder or team member names;
business titles or roles;
assigned Experts or Consultants;
Delivery Programs;
sessions;
assignments;
comments;
resources;
evaluations;
ratings;
progress;
program activity; and
derived Program Intelligence related to the Venture's Organization-sponsored activity.

Authorized Venture users may invite additional Venture Team members where that feature is enabled.

10. Participant Data

For individual Participants, we may process:

profile and contact information;
Organization association;
program enrollment;
assigned Experts;
mentorship or cohort participation;
sessions;
attendance or join information where available;
assignments;
submissions;
tasks;
comments;
resources;
evaluations;
ratings;
progress;
program status; and
Program Intelligence derived from eligible Organization-sponsored activity.

Participants may also have separate B2C or marketplace activity that is not automatically visible to the sponsoring Organization.

11. Expert, Mentor, and Consultant Data

For Experts, Mentors, and Consultants, we may process:

profile information;
professional title;
biography;
expertise;
skills;
experience;
certifications;
availability;
program assignments;
Organization associations;
Venture assignments;
Participant assignments;
Mentorship Programs;
Expert Cohorts;
sessions;
ratings;
evaluations;
communication history;
program activity; and
payment or payout information where applicable.

Organization-invited Experts are not automatically public marketplace Experts.

12. Mentorship and Delivery Program Data

For 1:1 mentorship, venture mentorship, Expert Cohorts, consultations, and other expert-led delivery, we may process:

program title and description;
expected outcomes;
start and end dates;
duration;
session cadence;
session count;
assigned Expert;
Participant or Venture association;
session status;
scheduling information;
attendance;
assignments;
tasks;
comments;
resources;
evaluations;
ratings;
feedback;
completion information; and
related program records.

13. Program Workspace Data

Program Workspaces may contain personal data and User Content such as:

messages;
comments;
files;
assignments;
submissions;
resources;
tasks;
feedback;
evaluations;
ratings;
discussion history;
session information; and
other content shared for the purpose of program delivery.

Workspace content may be visible to other authorized people within the same Organization Program according to role and permissions.

14. Session, Conference, Recording, and Transcript Data

Where enabled, we may process:

session title;
scheduled time;
start and end time;
join information;
attendance;
session lifecycle status;
participant and Expert identities;
audio;
recordings;
transcripts;
speaker attribution or diarization;
summaries;
action items;
topics;
outcomes;
follow-up items;
skills covered;
skills gaps; and
related session metadata.

Not every session is recorded or analyzed.

Where recording, transcription, or analysis is enabled, appropriate notices, permissions, or consent mechanisms may be used where required by law.

Raw recordings or transcripts are not necessarily made available to Organization staff merely because derived Program Intelligence is available.

15. Google Calendar Integration (Google User Data)

When you choose to connect Google Calendar to Qualify You for mentorship programs, we access limited Google user data through Google OAuth APIs solely to sync mentorship program call events to your calendar. This section describes our use of Google user data in accordance with Google API Services User Data Policy requirements.

Google user data we access: With your consent, we request access to your Google account email address (via openid and email scopes) and permission to create, update, and delete events on calendars you can access (via the Google Calendar events scope). We may process event fields such as title, description, start and end time, time zone, meeting or join link, and internal Qualify You identifiers stored in private extended properties for synced mentorship calls.

How we use Google user data: We use this data only to provide the optional Google Calendar integration—for example, to add or update a calendar event when a mentorship call is scheduled or rescheduled, and to remove the event when a call is cancelled or when you disconnect Google Calendar. We also use your connected Google email address to show connection status in the user or expert portal.

How we do not use Google user data: We do not use Google user data for advertising or marketing. We do not sell Google user data. We do not use Google user data obtained through Google APIs to develop, improve, or train generalized or public artificial intelligence or machine learning models. We do not use Google Calendar data to train Qualify You AI Instructors or other automated systems beyond what is necessary to operate the calendar sync feature itself.

Sharing and disclosure: Google user data is not shared with other Qualify You users except where the connected Google account belongs to you. We may process Google user data using trusted infrastructure providers (such as cloud hosting services) that help us operate the Platform under contractual confidentiality and data protection obligations. We do not disclose Google user data to third parties for their independent use.

Data protection: OAuth refresh tokens and related connection metadata are encrypted at rest. Google user data is transmitted over TLS. Access is limited to authorized backend services required to operate the calendar sync feature.

Retention and deletion: Google Calendar connection data is retained while the integration remains active. When you disconnect Google Calendar from Qualify You, we revoke the OAuth refresh token with Google, deactivate the connection, and remove Qualify You–created calendar events associated with your account. You may disconnect at any time from the mentorship program schedule page in the user or expert portal. Requests to delete your Qualify You account are handled in accordance with Section 34 (Account and Data Deletion), including removal or deactivation of Google Calendar connection data where applicable.

Google Workspace API Data and AI/ML Processing: Qualify You may process data received through Google Workspace APIs solely to provide user-requested features and functionality within the Qualify You platform.

Where AI/ML services are used in connection with Google Workspace API data, such processing is limited to application-specific purposes, including extracting relevant information from calls or sessions, generating summaries and discussion outlines, identifying key topics and action items, and supporting career development and mentorship-related functionality.

Qualify You does not use raw, aggregated, anonymized, or derived Google Workspace API user data to create, train, fine-tune, or improve foundational or generalized AI/ML models. Qualify You also does not permit third-party AI/ML service providers processing such data on its behalf to use the data for these purposes.

Qualify You does not use Google Photos data or candidates' images for AI/ML analysis as part of this functionality.

Google Workspace API user data is processed only as necessary to provide the requested application functionality and is handled in accordance with our data protection, security, and retention practices described in this Privacy Policy.

The use of raw or derived user data received from Google Workspace APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

For questions about Google Calendar integration, Google Workspace API data, or Google user data, contact support@qualify-you.com.

16. Program Intelligence and Derived Data

Qualify You may generate Program Intelligence from eligible Organization-sponsored program activity.

Program Intelligence may include:

completed-session counts;
analyzed-session counts;
analysis coverage;
recurring topics;
program outcomes;
skills covered;
skills gaps;
action items;
follow-up items;
delivery coverage;
items requiring attention;
engagement or participation indicators; and
other derived operational insights.

Program Intelligence may be generated using automated systems, machine-learning models, or third-party AI infrastructure.

Program Intelligence is designed to support human program management and supervision.

It should not be treated as a definitive assessment of a person's competence, employability, performance, investment potential, character, or future success.

17. Automated Processing

Qualify You may use automated systems to:

analyze eligible session content;
summarize completed delivery;
identify recurring topics;
identify action items;
classify or organize program information;
generate operational insights;
support search, filtering, or reporting; and
improve Platform workflows.

Automated outputs may be incomplete, inaccurate, or based on limited data.

Where applicable law gives a person rights relating to significant automated decisions, Qualify You and the relevant Organization will apply those rights according to their respective legal responsibilities.

Qualify You does not intend Program Intelligence to make final employment, admission, funding, investment, disciplinary, or similar high-impact decisions without appropriate human review.

18. Individual Marketplace Activity

For individuals who use Qualify You outside an Organization-sponsored program, we may process:

Expert searches;
Expert profile views;
mentorship program views;
package or program selections;
checkout records;
purchases;
payment status;
program enrollment;
Expert Cohort enrollment;
consultation bookings;
sessions;
assignments;
communications; and
program activity.

This personal marketplace activity is not automatically visible to an Organization merely because the same User also participates in an Organization-sponsored program.

19. Payment and Billing Information

Payments may be processed by third-party payment providers.

Qualify You does not store full payment card details where those details are processed directly by a payment provider.

We may process:

billing name;
billing address;
invoice information;
currency;
payment status;
transaction identifiers;
amount;
refund status;
payment method metadata;
Organization billing contact information; and
information necessary for Expert payouts where applicable.

For Organizations paying by invoice or bank transfer, we may also process:

invoice recipient information;
bank-transfer reference information;
payment confirmation;
Subscription term; and
activation or renewal status.

For Qualify You Labs, we may additionally process:

Labs wallet balances, reservations, ledger entry types, grant reasons, idempotency keys, and transaction metadata (not full payment card numbers where processed by a payment provider);
lab estimates, pricing request identifiers, template selections, and launch configuration you submit;
Organization bulk grant run metadata when an Organization sponsor funds cohort Labs stipends (recipient counts, amounts, audit reasons, and per-recipient grant status);
billing account identifiers and whether usage is billed to a personal user wallet or an explicitly selected Organization pooled context; and
refund or adjustment metadata when unused prepaid workspace volumes are released according to product rules.

20. Website, Contact, and Demo Request Data

When you visit our website, contact us, or request a demo, we may collect:

name;
email address;
phone number;
Organization name;
job title;
country;
program type;
Organization size;
message or inquiry;
preferred contact method;
demo-request information; and
communication history.

We use this information to respond to inquiries, qualify requests, schedule demonstrations, provide relevant commercial information, and manage sales or partnership conversations.

21. Technical, Device, and Usage Data

We may collect:

IP address;
browser;
device type;
operating system;
language;
timestamps;
referring page;
page views;
navigation behavior;
feature usage;
API and request metadata;
diagnostic data;
error logs;
security logs; and
performance information.

This information helps us operate, secure, troubleshoot, measure, and improve the Platform.

22. Cookies and Analytics

We use cookies and similar technologies to support core functionality, maintain sessions, remember preferences, understand Platform usage, and measure website performance.

Where required by law, non-essential cookies or analytics technologies will be used subject to applicable consent requirements.

We may use analytics and user-experience tools to understand how visitors and Users interact with the Platform and website.

Additional information may be provided through a Cookie Policy or cookie preference interface.

23. How We Use Personal Data

We may use personal data to:

create and manage accounts;
authenticate Users;
operate role-based portals;
create and manage Organization Programs;
manage Ventures and Venture Teams;
manage Participants and Experts;
deliver mentorship and Expert Cohorts;
schedule and operate sessions;
support assignments, tasks, comments, resources, and evaluations;
provide Program Supervision;
generate Program Intelligence;
process payments and billing;
manage Organization Subscriptions;
provide support;
respond to demo or contact requests;
send operational notifications;
maintain security;
prevent fraud and abuse;
investigate incidents;
enforce Terms and agreements;
comply with legal obligations;
measure Platform performance;
improve usability and reliability; and
protect Qualify You, Organizations, Users, and third parties.

We do not sell personal data.

24. Legal Bases for Processing

Depending on the jurisdiction and processing context, Qualify You may rely on:

performance of a contract;
steps taken at your request before entering a contract;
consent;
legitimate interests;
legal obligations;
protection of rights, security, or safety; or
another lawful basis recognized by applicable law.

Where processing is based on consent, consent may be withdrawn subject to applicable law and any consequences of disabling the relevant feature.

Where an Organization provides personal data to Qualify You, the Organization is responsible for its own lawful basis for doing so.

25. Organization Access to Participant and Venture Data

Authorized Organization staff may access personal data generated inside their Organization's programs where necessary for legitimate program management and subject to permissions and applicable law.

Depending on the program and permissions, Organization staff may see:

Participant or Venture association;
assigned Expert or Consultant;
Delivery Program information;
upcoming and completed sessions;
session status;
scheduled time;
attendance where available;
assignments;
submissions;
evaluations;
ratings;
comments;
resources;
progress indicators;
analysis availability; and
derived Program Intelligence.

An Organization does not automatically receive access to:

unrelated B2C mentorship purchases;
unrelated marketplace consultations;
activity under another Organization;
unrelated personal account activity;
unrelated private profile information; or
other data outside the applicable Organization context.

We may share personal data with:

the Organization sponsoring or operating the relevant program;
authorized Organization Members;
assigned Experts, Mentors, or Consultants;
authorized Venture Team members where required for the program;
Participants where collaboration requires it;
payment processors;
infrastructure providers;
communication and conferencing providers;
email providers;
analytics providers;
security providers;
AI or machine-learning infrastructure providers;
professional advisers;
government authorities or regulators where legally required; and
other service providers needed to operate the Platform.

We limit sharing to what is reasonably necessary for the relevant purpose and apply contractual, organizational, and technical safeguards appropriate to the provider's role.

We do not sell personal data.

27. Service Providers and Subprocessors

Qualify You uses third-party providers to operate the Platform.

These providers may process personal data on our behalf for purposes such as:

cloud hosting;
databases;
storage;
email delivery;
communication;
conferencing;
payment processing;
analytics;
monitoring;
cybersecurity;
customer support; and
automated or AI-assisted analysis.

Where required, providers are subject to contractual confidentiality and data-protection obligations.

For enterprise or regulated Organization customers, additional subprocessor information may be made available through a Data Processing Agreement or contractual documentation.

28. International Data Transfers

Personal data may be processed or stored outside the country in which a User or Organization is located.

When international transfers are subject to legal restrictions, Qualify You will use appropriate legal, contractual, technical, or organizational safeguards as required by applicable law.

Organizations operating regulated or government programs should address specific localization or transfer requirements with Qualify You before deployment where those requirements apply.

29. Data Retention

We retain personal data for as long as reasonably necessary for the purpose for which it was collected, including to:

provide active Platform services;
maintain Organization Programs;
preserve program records;
complete payments;
support Expert payouts;
maintain audit trails;
resolve disputes;
investigate security incidents;
comply with legal obligations;
enforce agreements; and
protect legitimate business and legal interests.

Retention periods may vary by data type, User role, program context, Subscription status, and applicable law.

When personal data is no longer required, we may delete, anonymize, aggregate, or securely archive it where legally permitted.

Organization program data is not necessarily deleted immediately when a Subscription expires. Access may instead become restricted or read-only before data reaches the end of its applicable retention period.

30. Security

We use reasonable technical and organizational safeguards designed to protect personal data.

Measures may include:

encryption in transit;
encryption at rest where appropriate;
role-based access controls;
authentication controls;
logging;
monitoring;
environment separation;
backup procedures;
security reviews;
restricted administrative access; and
incident-response practices.

No system can guarantee absolute security.

Users and Organizations are responsible for protecting their credentials and using appropriate access controls within their accounts.

31. Data Breaches and Security Incidents

Where Qualify You identifies a security incident involving personal data, we will investigate, contain, remediate, and document the incident as appropriate.

Where required by applicable law or contract, Qualify You will notify affected Organizations, Users, authorities, or other parties within the applicable legal or contractual timeframe.

Organizations must promptly notify Qualify You if they become aware of unauthorized access involving their Organization account or program data.

32. Communications

We may send operational communications relating to:

account creation;
invitations;
program enrollment;
sessions;
reminders;
assignments;
cancellations;
rescheduling;
Organization activity;
security;
billing;
Subscription status;
support;
service changes; and
legal notices.

Operational communications may be necessary for the Platform and may not be optional.

Marketing communications will be sent where permitted by law and can generally be opted out of through the method provided in the communication.

33. Privacy Rights

Depending on your location and applicable law, you may have rights to:

obtain information about how your personal data is processed;
access your personal data;
receive a copy of certain personal data;
correct inaccurate or incomplete information;
request deletion;
request restriction of processing;
object to certain processing;
withdraw consent where processing is based on consent;
request portability where applicable;
request review of certain automated decisions where applicable; and
lodge a complaint with a competent authority.

Rights may be subject to legal limitations, identity verification, Organization responsibilities, contractual obligations, or retention requirements.

To submit a privacy request, contact support@qualify-you.com.

If your request concerns data controlled primarily by an Organization-sponsored program, we may refer or coordinate the request with the applicable Organization where appropriate.

34. Account and Data Deletion

You may request closure of your Qualify You account or deletion of eligible personal data.

Deletion requests may be subject to:

legal retention obligations;
active Organization Program requirements;
contractual obligations;
payment records;
fraud-prevention records;
security records;
dispute-resolution requirements;
legal claims; and
other lawful exceptions.

Where an Organization is responsible for specific program records, deletion of those records may require coordination with that Organization.

We may retain anonymized or aggregated information that no longer identifies you.

35. Children's Privacy

The Platform is generally intended for adults and professional or higher-education contexts.

Qualify You does not knowingly permit a person below the applicable age of legal consent to independently enter into Platform contracts unless an Organization-sponsored program or another lawful arrangement expressly permits participation with the required authorization.

Where a program involves minors, the sponsoring Organization is responsible for ensuring that appropriate notices, permissions, parental or guardian authorizations, and other legal requirements are satisfied.

If we learn that personal data relating to a child has been collected without appropriate authorization where authorization is required, we will take reasonable steps to address the issue.

36. Confidentiality and Program Data

Program Workspaces may contain confidential business, educational, professional, or technical information.

Qualify You processes this information only for legitimate Platform, program-delivery, support, security, analytics, legal, and contractual purposes.

Users and Organizations are responsible for respecting confidentiality obligations and ensuring they do not upload information they are not authorized to disclose.

Separate confidentiality agreements may apply to specific programs or enterprise engagements.

37. Recruitment and Separately Contracted Services

Qualify You may provide recruitment, talent, consulting, implementation, or other services under separate agreements.

Those services may involve additional categories of personal data and different privacy roles.

Where applicable, the relevant contract, candidate notice, employer notice, or service-specific privacy disclosure will apply in addition to this Privacy Policy.

38. Business Transfers

If Qualify You is involved in a merger, acquisition, financing, reorganization, sale of assets, or similar transaction, personal data may be transferred as part of that transaction subject to applicable law and appropriate safeguards.

39. Changes to This Privacy Policy

We may update this Privacy Policy as the Platform, business model, legal requirements, or data practices evolve.

The "Last Updated" date will be revised when changes are published.

Material changes may be communicated by email, Platform notice, account notification, or another reasonable method where appropriate.

40. Qualify You Labs Data

This section describes additional data practices for Qualify You Labs (Launch Shell / Hands-On Labs).

40.1 Lab Session and Infrastructure Data

When you launch or use a lab, we may process:

lab session identifiers, template identifiers, status, timestamps, and lifecycle events (including pause, resume, extend, and terminate);
resource configuration such as CPU, memory, storage size, duration, persistence settings, and attached retained workspace identifiers;
cloud infrastructure metadata (for example, cluster, namespace, pod, volume, or claim names) needed to provision and operate labs;
browser shell connection metadata, WebSocket session identifiers, and technical logs for security and troubleshooting; and
factory or provisioning audit artifacts stored in secured object storage for reliability and abuse investigation.

We do not routinely monitor the full contents of your terminal keystrokes for product analytics. Operational logging may still capture errors, connection metadata, or security signals.

40.2 User Content in Lab Environments

Files you create or upload in a lab environment (including paths such as ephemeral session storage or retained workspace volumes) are User Content. You control this content subject to these Terms and applicable law. Lab volumes may be deleted when sessions end, retention timers expire, you release a workspace volume, or Qualify You enforces cleanup.

40.3 Labs Billing and Ledger Data

Labs commercial data may include estimates, reservations, usage intervals, settlement records, top-ups, admin grants, promotional credits, session minimum flags, and ledger entries associated with your billing account. This supports wallet display, fraud prevention, accounting, and support.

Organization administrators with appropriate platform roles may view aggregated or operational Labs commercial data for grants and sessions they manage. Organization staff do not receive routine access to the full contents of your private lab files merely because an Organization funded your wallet.

40.4 SSO and Access Tokens

Access to the Labs portal may use short-lived single sign-on tokens from other Qualify You portals. We process identifiers needed to validate those handoffs and bind lab activity to the correct user account.

40.5 Subprocessors and Locations

Labs infrastructure may rely on cloud providers and subprocessors (including Amazon Web Services services such as EKS, S3, and related operations regions configured for the product). Data may be processed in jurisdictions where those providers operate, subject to Section 28 (International Data Transfers) and applicable safeguards.

40.6 Retention

Lab session metadata, billing ledger entries, and security logs are retained according to operational, accounting, and legal requirements. Ephemeral lab filesystems and retained workspace volumes are deleted according to product lifecycle rules, which may be shorter than account retention for other Platform data.

41. Contact Information

For privacy questions, requests, or concerns:

Email: support@qualify-you.com
Website: https://qualify-you.com
Location: Amman, Hashemite Kingdom of Jordan

1. Introduction

Qualify You ("Qualify You", "we", "our", or "us") respects privacy and is committed to protecting personal data.

Qualify You may be used by:

Organizations operating mentorship, training, entrepreneurship, workforce-development, graduate, sponsored, or similar programs;
Organization Members such as owners, admins, program managers, and coordinators;
Ventures and Venture Team members;
Experts, mentors, and consultants;
individual Participants in Organization-sponsored programs; and
individual marketplace Users who find Experts, join mentorship programs, or participate in Expert Cohorts.

2. Scope of This Policy

This Privacy Policy applies to personal data processed through Qualify You's Platform and services.

It applies whether you:

create an account;
are invited to an Organization;
join an Organization-sponsored program;
participate as a Venture or Venture Team member;
act as an Expert or Consultant;
purchase or join an individual mentorship program;
join an Expert Cohort;
book a consultation;
communicate through a Program Workspace;
attend a session;
submit assignments or evaluations;
interact with Program Intelligence or related analytics;
access Qualify You Labs, launch or operate lab sessions, use the browser lab shell, or manage Labs wallet balance and retained workspace volumes; or
contact Qualify You through the website or support channels.

Separate agreements may apply to certain enterprise, government, recruitment, consulting, or professional-services engagements.

3. Our Role and Organization Responsibilities

For Organization-sponsored programs:

the Organization generally determines who is invited or enrolled;
the Organization determines the purpose of its program and which people participate;
Qualify You provides the Platform infrastructure, program-delivery tools, portals, supervision features, and Program Intelligence capabilities; and
the Organization may receive access to Organization-scoped program data according to its permissions and applicable law.

The exact allocation of data protection responsibilities may be addressed in a Data Processing Agreement, Order Form, enterprise agreement, government agreement, or other written contract.

4. Personal Data We Collect

The categories of personal data we collect depend on your role and the services you use.

5. Account and Identity Information

We may collect:

first and last name;
email address;
phone number;
country and city;
profile photo;
language and communication preferences;
account credentials and authentication information;
account role;
account status; and
verification or security-related information where required.

6. Professional and Profile Information

Depending on your role, we may collect:

job title;
employer or organization;
professional biography;
years of experience;
skills;
technical skills;
soft skills;
areas of expertise;
education;
certifications;
professional links;
portfolio links;
projects;
work history;
CV or resume information;
career or professional summary; and
other profile information you choose to provide.

Some of this information may be extracted from a CV or resume that you upload and then shown to you for review or correction.

7. Organization Information

When an Organization uses Qualify You, we may process:

Organization name;
logo;
website;
description;
branding preferences;
primary, secondary, and accent colors;
billing details;
Organization contact information;
Organization Member information;
Organization Member roles and permissions;
Subscription information;
usage limits;
program information; and
audit or activity records associated with Organization administration.

8. Organization Member Data

For Organization Owners, Admins, Program Managers, Coordinators, and other authorized Organization Members, we may process:

identity and contact information;
Organization role;
program responsibilities;
invitations sent or accepted;
access permissions;
program actions;
administrative activity;
account status; and
security and audit information.

We may maintain records of significant administrative actions for security, accountability, support, dispute resolution, and Platform operations.

9. Venture and Venture Team Data

For venture-centric programs, we may process:

Venture name;
Venture website;
Venture description;
program enrollment;
Venture Team members;
founder or team member names;
business titles or roles;
assigned Experts or Consultants;
Delivery Programs;
sessions;
assignments;
comments;
resources;
evaluations;
ratings;
progress;
program activity; and
derived Program Intelligence related to the Venture's Organization-sponsored activity.

Authorized Venture users may invite additional Venture Team members where that feature is enabled.

10. Participant Data

For individual Participants, we may process:

profile and contact information;
Organization association;
program enrollment;
assigned Experts;
mentorship or cohort participation;
sessions;
attendance or join information where available;
assignments;
submissions;
tasks;
comments;
resources;
evaluations;
ratings;
progress;
program status; and
Program Intelligence derived from eligible Organization-sponsored activity.

Participants may also have separate B2C or marketplace activity that is not automatically visible to the sponsoring Organization.

11. Expert, Mentor, and Consultant Data

For Experts, Mentors, and Consultants, we may process:

profile information;
professional title;
biography;
expertise;
skills;
experience;
certifications;
availability;
program assignments;
Organization associations;
Venture assignments;
Participant assignments;
Mentorship Programs;
Expert Cohorts;
sessions;
ratings;
evaluations;
communication history;
program activity; and
payment or payout information where applicable.

Organization-invited Experts are not automatically public marketplace Experts.

12. Mentorship and Delivery Program Data

For 1:1 mentorship, venture mentorship, Expert Cohorts, consultations, and other expert-led delivery, we may process:

program title and description;
expected outcomes;
start and end dates;
duration;
session cadence;
session count;
assigned Expert;
Participant or Venture association;
session status;
scheduling information;
attendance;
assignments;
tasks;
comments;
resources;
evaluations;
ratings;
feedback;
completion information; and
related program records.

13. Program Workspace Data

Program Workspaces may contain personal data and User Content such as:

messages;
comments;
files;
assignments;
submissions;
resources;
tasks;
feedback;
evaluations;
ratings;
discussion history;
session information; and
other content shared for the purpose of program delivery.

Workspace content may be visible to other authorized people within the same Organization Program according to role and permissions.

14. Session, Conference, Recording, and Transcript Data

Where enabled, we may process:

session title;
scheduled time;
start and end time;
join information;
attendance;
session lifecycle status;
participant and Expert identities;
audio;
recordings;
transcripts;
speaker attribution or diarization;
summaries;
action items;
topics;
outcomes;
follow-up items;
skills covered;
skills gaps; and
related session metadata.

Not every session is recorded or analyzed.

Where recording, transcription, or analysis is enabled, appropriate notices, permissions, or consent mechanisms may be used where required by law.

Raw recordings or transcripts are not necessarily made available to Organization staff merely because derived Program Intelligence is available.

15. Google Calendar Integration (Google User Data)

Qualify You does not use Google Photos data or candidates' images for AI/ML analysis as part of this functionality.

The use of raw or derived user data received from Google Workspace APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

For questions about Google Calendar integration, Google Workspace API data, or Google user data, contact support@qualify-you.com.

16. Program Intelligence and Derived Data

Qualify You may generate Program Intelligence from eligible Organization-sponsored program activity.

Program Intelligence may include:

completed-session counts;
analyzed-session counts;
analysis coverage;
recurring topics;
program outcomes;
skills covered;
skills gaps;
action items;
follow-up items;
delivery coverage;
items requiring attention;
engagement or participation indicators; and
other derived operational insights.

Program Intelligence may be generated using automated systems, machine-learning models, or third-party AI infrastructure.

Program Intelligence is designed to support human program management and supervision.

It should not be treated as a definitive assessment of a person's competence, employability, performance, investment potential, character, or future success.

17. Automated Processing

Qualify You may use automated systems to:

analyze eligible session content;
summarize completed delivery;
identify recurring topics;
identify action items;
classify or organize program information;
generate operational insights;
support search, filtering, or reporting; and
improve Platform workflows.

Automated outputs may be incomplete, inaccurate, or based on limited data.

Qualify You does not intend Program Intelligence to make final employment, admission, funding, investment, disciplinary, or similar high-impact decisions without appropriate human review.

18. Individual Marketplace Activity

For individuals who use Qualify You outside an Organization-sponsored program, we may process:

Expert searches;
Expert profile views;
mentorship program views;
package or program selections;
checkout records;
purchases;
payment status;
program enrollment;
Expert Cohort enrollment;
consultation bookings;
sessions;
assignments;
communications; and
program activity.

This personal marketplace activity is not automatically visible to an Organization merely because the same User also participates in an Organization-sponsored program.

19. Payment and Billing Information

Payments may be processed by third-party payment providers.

Qualify You does not store full payment card details where those details are processed directly by a payment provider.

We may process:

billing name;
billing address;
invoice information;
currency;
payment status;
transaction identifiers;
amount;
refund status;
payment method metadata;
Organization billing contact information; and
information necessary for Expert payouts where applicable.

For Organizations paying by invoice or bank transfer, we may also process:

invoice recipient information;
bank-transfer reference information;
payment confirmation;
Subscription term; and
activation or renewal status.

For Qualify You Labs, we may additionally process:

Labs wallet balances, reservations, ledger entry types, grant reasons, idempotency keys, and transaction metadata (not full payment card numbers where processed by a payment provider);
lab estimates, pricing request identifiers, template selections, and launch configuration you submit;
Organization bulk grant run metadata when an Organization sponsor funds cohort Labs stipends (recipient counts, amounts, audit reasons, and per-recipient grant status);
billing account identifiers and whether usage is billed to a personal user wallet or an explicitly selected Organization pooled context; and
refund or adjustment metadata when unused prepaid workspace volumes are released according to product rules.

20. Website, Contact, and Demo Request Data

When you visit our website, contact us, or request a demo, we may collect:

name;
email address;
phone number;
Organization name;
job title;
country;
program type;
Organization size;
message or inquiry;
preferred contact method;
demo-request information; and
communication history.

We use this information to respond to inquiries, qualify requests, schedule demonstrations, provide relevant commercial information, and manage sales or partnership conversations.

21. Technical, Device, and Usage Data

We may collect:

IP address;
browser;
device type;
operating system;
language;
timestamps;
referring page;
page views;
navigation behavior;
feature usage;
API and request metadata;
diagnostic data;
error logs;
security logs; and
performance information.

This information helps us operate, secure, troubleshoot, measure, and improve the Platform.

22. Cookies and Analytics

We use cookies and similar technologies to support core functionality, maintain sessions, remember preferences, understand Platform usage, and measure website performance.

Where required by law, non-essential cookies or analytics technologies will be used subject to applicable consent requirements.

We may use analytics and user-experience tools to understand how visitors and Users interact with the Platform and website.

Additional information may be provided through a Cookie Policy or cookie preference interface.

23. How We Use Personal Data

We may use personal data to:

create and manage accounts;
authenticate Users;
operate role-based portals;
create and manage Organization Programs;
manage Ventures and Venture Teams;
manage Participants and Experts;
deliver mentorship and Expert Cohorts;
schedule and operate sessions;
support assignments, tasks, comments, resources, and evaluations;
provide Program Supervision;
generate Program Intelligence;
process payments and billing;
manage Organization Subscriptions;
provide support;
respond to demo or contact requests;
send operational notifications;
maintain security;
prevent fraud and abuse;
investigate incidents;
enforce Terms and agreements;
comply with legal obligations;
measure Platform performance;
improve usability and reliability; and
protect Qualify You, Organizations, Users, and third parties.

We do not sell personal data.

24. Legal Bases for Processing

Depending on the jurisdiction and processing context, Qualify You may rely on:

performance of a contract;
steps taken at your request before entering a contract;
consent;
legitimate interests;
legal obligations;
protection of rights, security, or safety; or
another lawful basis recognized by applicable law.

Where processing is based on consent, consent may be withdrawn subject to applicable law and any consequences of disabling the relevant feature.

Where an Organization provides personal data to Qualify You, the Organization is responsible for its own lawful basis for doing so.

25. Organization Access to Participant and Venture Data

Authorized Organization staff may access personal data generated inside their Organization's programs where necessary for legitimate program management and subject to permissions and applicable law.

Depending on the program and permissions, Organization staff may see:

Participant or Venture association;
assigned Expert or Consultant;
Delivery Program information;
upcoming and completed sessions;
session status;
scheduled time;
attendance where available;
assignments;
submissions;
evaluations;
ratings;
comments;
resources;
progress indicators;
analysis availability; and
derived Program Intelligence.

An Organization does not automatically receive access to:

unrelated B2C mentorship purchases;
unrelated marketplace consultations;
activity under another Organization;
unrelated personal account activity;
unrelated private profile information; or
other data outside the applicable Organization context.

We may share personal data with:

the Organization sponsoring or operating the relevant program;
authorized Organization Members;
assigned Experts, Mentors, or Consultants;
authorized Venture Team members where required for the program;
Participants where collaboration requires it;
payment processors;
infrastructure providers;
communication and conferencing providers;
email providers;
analytics providers;
security providers;
AI or machine-learning infrastructure providers;
professional advisers;
government authorities or regulators where legally required; and
other service providers needed to operate the Platform.

We limit sharing to what is reasonably necessary for the relevant purpose and apply contractual, organizational, and technical safeguards appropriate to the provider's role.

We do not sell personal data.

27. Service Providers and Subprocessors

Qualify You uses third-party providers to operate the Platform.

These providers may process personal data on our behalf for purposes such as:

cloud hosting;
databases;
storage;
email delivery;
communication;
conferencing;
payment processing;
analytics;
monitoring;
cybersecurity;
customer support; and
automated or AI-assisted analysis.

Where required, providers are subject to contractual confidentiality and data-protection obligations.

For enterprise or regulated Organization customers, additional subprocessor information may be made available through a Data Processing Agreement or contractual documentation.

28. International Data Transfers

Personal data may be processed or stored outside the country in which a User or Organization is located.

When international transfers are subject to legal restrictions, Qualify You will use appropriate legal, contractual, technical, or organizational safeguards as required by applicable law.

Organizations operating regulated or government programs should address specific localization or transfer requirements with Qualify You before deployment where those requirements apply.

29. Data Retention

We retain personal data for as long as reasonably necessary for the purpose for which it was collected, including to:

provide active Platform services;
maintain Organization Programs;
preserve program records;
complete payments;
support Expert payouts;
maintain audit trails;
resolve disputes;
investigate security incidents;
comply with legal obligations;
enforce agreements; and
protect legitimate business and legal interests.

Retention periods may vary by data type, User role, program context, Subscription status, and applicable law.

When personal data is no longer required, we may delete, anonymize, aggregate, or securely archive it where legally permitted.

30. Security

We use reasonable technical and organizational safeguards designed to protect personal data.

Measures may include:

encryption in transit;
encryption at rest where appropriate;
role-based access controls;
authentication controls;
logging;
monitoring;
environment separation;
backup procedures;
security reviews;
restricted administrative access; and
incident-response practices.

No system can guarantee absolute security.

Users and Organizations are responsible for protecting their credentials and using appropriate access controls within their accounts.

31. Data Breaches and Security Incidents

Where Qualify You identifies a security incident involving personal data, we will investigate, contain, remediate, and document the incident as appropriate.

Where required by applicable law or contract, Qualify You will notify affected Organizations, Users, authorities, or other parties within the applicable legal or contractual timeframe.

Organizations must promptly notify Qualify You if they become aware of unauthorized access involving their Organization account or program data.

32. Communications

We may send operational communications relating to:

account creation;
invitations;
program enrollment;
sessions;
reminders;
assignments;
cancellations;
rescheduling;
Organization activity;
security;
billing;
Subscription status;
support;
service changes; and
legal notices.

Operational communications may be necessary for the Platform and may not be optional.

Marketing communications will be sent where permitted by law and can generally be opted out of through the method provided in the communication.

33. Privacy Rights

Depending on your location and applicable law, you may have rights to:

obtain information about how your personal data is processed;
access your personal data;
receive a copy of certain personal data;
correct inaccurate or incomplete information;
request deletion;
request restriction of processing;
object to certain processing;
withdraw consent where processing is based on consent;
request portability where applicable;
request review of certain automated decisions where applicable; and
lodge a complaint with a competent authority.

Rights may be subject to legal limitations, identity verification, Organization responsibilities, contractual obligations, or retention requirements.

To submit a privacy request, contact support@qualify-you.com.

If your request concerns data controlled primarily by an Organization-sponsored program, we may refer or coordinate the request with the applicable Organization where appropriate.

34. Account and Data Deletion

You may request closure of your Qualify You account or deletion of eligible personal data.

Deletion requests may be subject to:

legal retention obligations;
active Organization Program requirements;
contractual obligations;
payment records;
fraud-prevention records;
security records;
dispute-resolution requirements;
legal claims; and
other lawful exceptions.

Where an Organization is responsible for specific program records, deletion of those records may require coordination with that Organization.

We may retain anonymized or aggregated information that no longer identifies you.

35. Children's Privacy

The Platform is generally intended for adults and professional or higher-education contexts.

If we learn that personal data relating to a child has been collected without appropriate authorization where authorization is required, we will take reasonable steps to address the issue.

36. Confidentiality and Program Data

Program Workspaces may contain confidential business, educational, professional, or technical information.

Qualify You processes this information only for legitimate Platform, program-delivery, support, security, analytics, legal, and contractual purposes.

Users and Organizations are responsible for respecting confidentiality obligations and ensuring they do not upload information they are not authorized to disclose.

Separate confidentiality agreements may apply to specific programs or enterprise engagements.

37. Recruitment and Separately Contracted Services

Qualify You may provide recruitment, talent, consulting, implementation, or other services under separate agreements.

Those services may involve additional categories of personal data and different privacy roles.

Where applicable, the relevant contract, candidate notice, employer notice, or service-specific privacy disclosure will apply in addition to this Privacy Policy.

38. Business Transfers

39. Changes to This Privacy Policy

We may update this Privacy Policy as the Platform, business model, legal requirements, or data practices evolve.

The "Last Updated" date will be revised when changes are published.

Material changes may be communicated by email, Platform notice, account notification, or another reasonable method where appropriate.

40. Qualify You Labs Data

This section describes additional data practices for Qualify You Labs (Launch Shell / Hands-On Labs).

40.1 Lab Session and Infrastructure Data

When you launch or use a lab, we may process:

lab session identifiers, template identifiers, status, timestamps, and lifecycle events (including pause, resume, extend, and terminate);
resource configuration such as CPU, memory, storage size, duration, persistence settings, and attached retained workspace identifiers;
cloud infrastructure metadata (for example, cluster, namespace, pod, volume, or claim names) needed to provision and operate labs;
browser shell connection metadata, WebSocket session identifiers, and technical logs for security and troubleshooting; and
factory or provisioning audit artifacts stored in secured object storage for reliability and abuse investigation.

We do not routinely monitor the full contents of your terminal keystrokes for product analytics. Operational logging may still capture errors, connection metadata, or security signals.