Privacy Policy

Last updated: March 2026

Onbada ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our education and mentoring platform.

1. Information We Collect

We collect information you provide directly to us, including:

  • Account Information: Name, email address, password, and profile photo when you create an account.
  • Profile Information: Bio, specialties, and other information you choose to add to your profile.
  • Communication Data: Messages sent through our platform, Q&A posts, and feedback.
  • Payment Information: Billing details and transaction history for credit purchases (processed securely by our payment provider).
  • Phone Number: If you opt in to receive SMS notifications.
  • Usage Data: Course progress, seminar attendance, session bookings, and learning activity.

We also automatically collect certain information when you use our platform, including IP address, browser type, device information, and pages visited.

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our platform and services.
  • Facilitate mentor-student connections and communication.
  • Process transactions and manage your account.
  • Send notifications about courses, seminars, sessions, and account activity.
  • Send SMS reminders if you have opted in.
  • Respond to your inquiries and provide customer support.
  • Monitor and analyze usage trends to improve user experience.
  • Detect, prevent, and address fraud, abuse, or technical issues.

3. Data Sharing

We do not sell your personal information. We may share your information in the following circumstances:

  • With Other Users: Your profile name, photo, and bio are visible to other users. Messages are shared with the intended recipients.
  • Service Providers: We share data with third-party providers who assist with payment processing, email delivery, SMS notifications, and hosting.
  • Legal Requirements: We may disclose information if required by law, court order, or governmental authority.
  • Business Transfers: In connection with a merger, acquisition, or sale of assets.

4. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. When you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal or compliance purposes. Course completion records and certificates may be retained for verification purposes.

5. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request correction of inaccurate or incomplete data.
  • Deletion: Request deletion of your personal data (available in Account Settings).
  • Data Portability: Request a machine-readable export of your data (available in Account Settings).
  • Opt-Out: Opt out of marketing communications and SMS notifications at any time.
  • Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.

GDPR (EU/EEA users): You have the right to lodge a complaint with your local data protection authority. Our legal basis for processing includes contract performance, legitimate interest, and consent.

CCPA (California residents): You have the right to know what personal information we collect, request deletion, and opt out of the sale of personal information. We do not sell personal information.

6. Cookies & Local Storage

We use cookies and browser local storage to maintain your session, remember your preferences (such as language settings), and improve your experience. We do not use third-party advertising cookies. You can manage cookie preferences through your browser settings, though disabling cookies may affect platform functionality.

7. Security

We implement appropriate technical and organizational measures to protect your personal data, including encryption in transit (HTTPS), secure password hashing, and access controls. However, no method of electronic transmission or storage is 100% secure.

8. Children's Privacy

Our platform is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn that we have collected data from a child under 13, we will take steps to delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our platform and updating the "Last updated" date. Your continued use of the platform after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at privacy@onbada.com.