Privacy policy
Effective October 18, 2026
Mentor Mailbox helps students organize coursework and personal projects, plan important dates, and work with authorized schools and mentors. This notice describes the information used by our website, student application, and mentor workspace.
Mentor Mailbox is operated by Morgan Intrator. For support, privacy questions, or requests about your information, email me@morganatwork.com.
1. Account and sign-in information
Clerk provides account registration, sign-in, and session management. It processes the account details you provide, such as your username, email address, password credentials, and account profile information. Mentor Mailbox uses your account identifier and an authentication token to check who you are and which workspaces you may access.
If you choose Google sign-in, Google and Clerk provide basic identity information, which may include your Google account identifier, email address, name, and profile image. We use that information to sign you in and manage your account. Clerk stores and processes your sign-in profile as part of providing authentication.
Google sign-in requests basic identity permissions only. It does not request Gmail, Google Drive, or Google Calendar content. Google sign-in is optional; you can also use the other sign-in methods offered by the service.
2. Information in workspaces
We store information that you or an authorized organization add to the service. This can include project and task names, planned dates, completion and starred states, and school, course, section, enrollment, and assignment information. Profile records can also contain names and contact details supplied during authorized provisioning.
Workspace records may also include free-form task, note, update, and message content, message timestamps, and sender identifiers. Stored records can include content that the current student or mentor interface does not yet display or allow you to create.
We use this information to display your work, synchronize changes between your browser and the service, and provide the academic and roster views available to your role. A feature shown in a preview or demonstration may not yet be available in the live application.
3. Who can see workspace information
Your student account accesses its own student workspaces. School administrator permissions may include the selected academic workspace and its projects, tasks, notes, updates, messages, and related records after enrollment and authority checks. Organization administrators manage school and assignment records.
The current mentor workspace shows roster information for eligible assignments, including school and course names and student enrollment identifiers. It does not currently expose students’ personal project content or message content to mentors. Access can change when authorized administrators change assignments or permissions.
These application permissions are separate from the operator’s and service providers’ access to the systems used to operate, support, and secure the service.
4. Cookies and information on your device
Authentication uses cookies and related session information. The student application and mentor workspace also keep local copies of application data and synchronization information in your browser’s database. This supports the application’s live connection and synchronization behavior. Local copies can remain after you close a tab.
Browser settings can restrict cookies or remove local website data, which may affect sign-in and application features. Removing browser data does not delete records held by the service. Signing out should not be treated as a promise that every local database has been erased.
5. Hosting, authentication, and other providers
We use the following providers to deliver the service. Your browser sends network and request information, such as its IP address and browser headers, to the providers it connects to.
- Vercel hosts the website, student application, and mentor frontend. See its privacy notice.
- Clerk handles authentication and account management. Its processing of customer account data is governed by its service arrangements with the operator. See Clerk’s privacy information.
- Cloudflare provides the backend that stores and synchronizes application records and also provides domain services. See its privacy policy.
- Google participates when you choose Google sign-in. See the Google Privacy Policy.
Provider notices describe those providers’ practices; they do not replace this notice or determine how the Mentor Mailbox operator may use your information.
6. Analytics and diagnostics
Authentication and hosting involve technical information needed to serve requests and maintain sessions. Application failures can also include technical identifiers used to investigate a problem.
7. Security
The deployed websites and backend use HTTPS. Authentication tokens and backend permission checks help restrict access to application records. Your own device, browser profile, and account credentials also affect the privacy of locally stored information.
8. Retention, account closure, and privacy requests
Application records and local browser copies persist beyond an individual page visit. Ending an assignment, revoking an enrollment, signing out, and deleting an account are different actions; a change in access does not by itself establish that stored records have been erased.
To request access, correction, account closure, or deletion, email me@morganatwork.com. There is currently no self-service feature for erasing stored workspace records. We may need to verify your identity and authority over the relevant records before handling a request. Requests involving school records may also require coordination with the school or organization responsible for those records.
9. Students, children, and school use
Users and organizations must have the authority and permissions required for their use of the service and for the student information they provide. If you are a student, parent, guardian, or school with a question about student information or authorization, contact me@morganatwork.com.
10. Changes and contact
We will update this notice and its effective date when our practices change, and provide any additional notice or consent required for those changes.
Privacy questions and requests: me@morganatwork.com. Operator: Morgan Intrator.
See also the terms of service.