Privacy Policy

The controller of your personal data is: **MentrAI** Address: [Address] Email: info@mentrai.es

We collect the following types of information: **2.1 Information you provide:** - Full name - Corporate email address - Company and job title - Contact information **2.2 Usage information:** - Navigation and platform usage data - Practice session transcripts (roleplays) - Performance metrics and feedback - Technical information (IP address, browser type, device) **2.3 Cookies and similar technologies:** We use cookies to improve your experience. See our Cookie Policy for more information.

We use your personal data to: - Provide and improve our AI training services - Manage your user account - Process and analyze practice sessions - Generate feedback and performance metrics - Send service-related communications - Comply with legal obligations - Conduct statistical analysis and product improvements

Processing of your data is based on: - **Contract performance:** To provide contracted services - **Consent:** For marketing communications (you can withdraw it at any time) - **Legitimate interest:** To improve our services and prevent fraud - **Legal obligation:** To comply with legal and tax requirements

We will retain your personal data for as long as necessary to: - Account data: While you maintain an active account - Billing data: 10 years (legal obligation) - Transcripts and metrics: While your account is active or until you request deletion - Marketing data: Until you withdraw your consent

We do not sell your personal data. We may share information with: - **Service providers:** Companies that help us operate the platform (hosting, payment processing, AI services) - **Requisitos legales:** When necessary to comply with the law - **Your organization:** If you use MentrAI through a corporate account, your employer may access aggregated metrics All our providers are contractually obligated to protect your data.

Some of our service providers may be located outside the European Economic Area (EEA). In these cases, we ensure appropriate protection measures are implemented, such as: - Standard contractual clauses approved by the European Commission - Recognized privacy certifications - Other appropriate legal mechanisms

You have the right to: - **Access:** Request a copy of your personal data - **Rectification:** Correct inaccurate or incomplete data - **Deletion:** Request deletion of your data - **Object:** Object to certain processing of your data - **Portability:** Receive your data in a structured format - **Restriction:** Request restriction of processing - **Withdraw consent:** Withdraw your consent at any time To exercise these rights, contact: info@mentrai.es

We implement appropriate technical and organizational measures to protect your data: - Encryption of data in transit and at rest - Strict access controls - Regular security audits - Ongoing staff training - Incident response protocols However, no system is 100% secure. If you detect any vulnerability, please inform us immediately.

Our services are not directed at minors under 18. We do not intentionally collect data from minors without parental or legal guardian consent.

We may update this Privacy Policy occasionally. We will notify you of significant changes by email or through a prominent notice on the platform.

If you have questions about this Privacy Policy or about the processing of your data: **Email:** info@mentrai.es **Address:** [MentrAI Address] You also have the right to file a complaint with the Spanish Data Protection Agency (AEPD): www.aepd.es