Overview
Ascentor ("we", "our", or "us") is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, store, and share your information when you use our platform - including our website, mobile Progressive Web App (PWA), and all related services.
By creating an account or using Ascentor, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use our services.
We do not sell your personal data. We do not show you third-party advertisements. Ascentor's business model is subscription-based - your data is never our product.
Information We Collect
Information You Provide Directly
- Account registration data - name, email address, password (hashed, never stored in plain text)
- Profile information - current role, goal role, industry, career summary, biggest challenge
- Onboarding responses - experience level, life stage (Explorer / Builder / Climber), mentorship goals
- Mentor application data - if you apply to become a mentor: LinkedIn URL, professional background, availability
- Community content - posts, replies, and upvotes you create in Accountability Circles
- Payment information - billing cycle and plan selected; card details are processed by Paystack and never stored on Ascentor servers
- Referral codes - if you share or use a referral link
- Support communications - messages you send to our team
Information Collected Automatically
- Usage data - pages visited, features used, session duration, button clicks
- Device information - browser type, operating system, screen size, PWA install status
- Sage AI session data - your conversation inputs with our AI mentor and the responses generated
- Learning progress - video completion percentage, last playback position, completed courses
- Goal and commitment activity - 90-day goals created, milestones updated, commitments checked
- Expert session registrations - which sessions you register for and attend
- Push notification subscription data - device endpoint for delivering notifications (no personally identifiable data in the subscription itself)
Information from Third Parties
- Google OAuth - if you sign in with Google, we receive your name and email address from Google. We do not receive your Google password or access to your Google account beyond authentication.
- Paystack - payment status and transaction reference for verifying subscription payments. We receive confirmation of payment, not your card details.
How We Use Your Information
We use the information we collect for the following purposes, all of which are necessary to provide you with a meaningful mentorship experience:
| Purpose / Category | Details |
|---|---|
| Provide & personalise the platform | Your profile, goals, and career stage directly shape how Sage AI responds to you and which content and experts are surfaced. |
| AI coaching (Sage) | Your conversation history with Sage is processed through Anthropic's Claude API to generate contextual, relevant responses. Your data is not used to train Anthropic's models. |
| Chat review for safety and improvement | Messages on the platform (Circle chats, group rooms, direct messages and your conversations with Sage) can be read by authorised members of the Ascentor team, to keep members safe, to investigate reports, and to improve Ascentor and Sage. Other members cannot read chats they are not part of. Every time the team opens or downloads a chat, it is recorded. You agree to this when you join, and you can ask us to export or delete your data at any time from Settings. |
| Match you with peer cohorts | Onboarding data (industry, experience level, goals) drives the algorithm that places you in the right Accountability Circle. |
| Process subscriptions & payments | Plan selection, billing cycle, and payment confirmations are handled via Paystack. We never store card numbers. |
| Send relevant communications | Service emails (billing receipts, session reminders, platform updates) and, with consent, occasional marketing emails. |
| Improve the product | Anonymised usage analytics help us refine features, fix bugs, and prioritise the roadmap. |
| Security & fraud prevention | Login anomalies, suspicious payment activity, and abuse detection protect both you and the community. |
| Comply with legal obligations | We retain certain data to meet tax, financial reporting, and data protection requirements. |
When We Share Your Data
We never sell your data. We share it only in the specific, limited circumstances below:
| Purpose / Category | Details |
|---|---|
| Service providers | Supabase (database & auth), Anthropic (AI coaching), Paystack/Selar (payments), Vercel (hosting), Google Analytics (anonymised). All processors sign DPAs. |
| Legal requests | When compelled by court order, subpoena, or regulatory authority. We will notify you unless legally prohibited. |
| Business transfers | In a merger, acquisition, or asset sale, your data may transfer as part of the business. You will be notified and your rights preserved. |
| Safety emergencies | If we believe disclosure is necessary to prevent imminent harm to a person. |
How Long We Keep Your Data
| Purpose / Category | Details |
|---|---|
| Account & profile | Until you delete your account. Deleted within 30 days of request. |
| Sage AI conversations | Retained for the life of your account unless you delete individual sessions. |
| Community posts | Retained while account is active; anonymised upon account deletion. |
| Payment & billing | 7 years (tax & financial regulation). |
| Analytics (anonymised) | Indefinitely - aggregated, no personal identifiers. |
| Security logs | 12 months. |
Your Rights
Under NDPR, NDPA, and (where applicable) GDPR, you have the following rights:
- Access - request a copy of all personal data we hold about you.
- Rectification - correct inaccurate or incomplete data.
- Erasure - delete your account and all associated data (except what we must retain legally).
- Restriction - limit processing of your data in certain circumstances.
- Portability - receive your data in a structured, machine-readable format.
- Objection - object to processing based on legitimate interests or direct marketing.
- Withdraw consent - at any time, for any consent-based processing (e.g., marketing emails).
To exercise any right, email a.samuel@joinascentor.com. We respond within 30 days.
How We Protect Your Data
- Encryption in transit (TLS 1.2+) and at rest (AES-256) on Supabase/AWS infrastructure.
- Row-Level Security (RLS) on every database table - users can only ever access their own rows.
- Supabase Auth handles authentication with OAuth 2.0 (Google, LinkedIn) and encrypted session cookies.
- Service-role keys are server-side only - never exposed to the client.
- Regular security audits, dependency scanning, and access logging.
- Incident response plan with 72-hour breach notification to affected users and regulators.
International Data Transfers
Ascentor is operated from Nigeria. Your data may be processed in the United States (Supabase on AWS, Anthropic) and Europe (Vercel). We rely on Standard Contractual Clauses (SCCs) and the EU-US Data Privacy Framework where applicable to ensure adequate protection.
Children's Privacy
Ascentor is not directed at individuals under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with data, contact us and we will delete it.
Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notification at least 14 days before they take effect. Continued use after changes constitutes acceptance. The 'Last updated' date at the top reflects the most recent revision.
Contact Us
General & Data Rights
Data Protection Officer
Postal Address
Lekki, Lagos, Nigeria