Privacy Policy
Last updated 14 October 2026
This Privacy Policy explains how MentorsPro LLC collects, uses and protects personal data when you use Mirrorwell, and the rights you have, including under the EU and UK General Data Protection Regulation (GDPR) and US state privacy laws.
1. Who is responsible for your data
The data controller is MentorsPro LLC, a New Jersey limited liability company, United States. Contact: info@mentorspro.co. Enquiries from Europe: info@danielaaneva.com.
Where the GDPR requires it, we will appoint a representative in the EU and the UK and list their details here. [EU/UK representative: to be confirmed before launch in Europe.]
2. The data we collect
- Account data: email address, password (stored securely by our login provider; we never see it in plain text), display name, your role (for example coach or client), language preference.
- Reflection content: your messages to Mirrorwell and its replies, drawings, colour and shape exercises, writing, journal entries, practice sessions, monthly reports and the patterns and themes derived from them.
- Portfolio and wellbeing data: hours you log (for example coaching, mentor coaching, supervision or continuing education hours) and wellbeing pulse scores you choose to record.
- Cases and session material: written cases, session transcripts and other files you choose to send (up to 4 MB each), and any session recording link you include. Only you and the person you send them to can open them. If the recipient asks Mirrorwell to draft feedback or a case reflection, the file is processed by our AI provider for that purpose only.
- Sharing data: reflection summaries you choose to share (one by one, or automatically if you switch that on), the email address and name of the professional you share them with, and notes added to shared items. Your full conversations are never shared.
- Payment data: if you subscribe, Stripe processes your payment. We receive your Stripe customer identifier, plan and subscription status, but not your full card details.
- Consent records: the date and version of the Terms you accepted, and your marketing preferences.
- Technical data: essential cookies used to keep you signed in, and basic server logs (such as time of request and error information) needed to run and secure the Service.
3. Sensitive information
Reflections can include information about your health, mental wellbeing or other special categories of personal data. We process this information only with your explicit consent, which you give when you create your account, and only to provide Mirrorwell to you. You can withdraw this consent at any time by deleting your reflections or your account. Please do not enter information that identifies other people.
4. How and why we use your data
| Purpose | Legal basis (GDPR) |
|---|---|
| Create and manage your account; provide the reflection, studio, journal, portfolio, patterns, practice and sharing features | Performance of our contract with you (Art. 6(1)(b)); explicit consent for sensitive information (Art. 9(2)(a)) |
| Generate AI responses and summaries | Performance of contract; explicit consent for sensitive information |
| Screen messages for signs of risk and show safety information | Our legitimate interest in user safety (Art. 6(1)(f)); vital interests where life may be at risk (Art. 6(1)(d), 9(2)(c)) |
| Process payments, prevent fraud and keep tax records | Performance of contract; legal obligation (Art. 6(1)(c)) |
| Send marketing emails about Mirrorwell, Daniela Aneva's books, programmes and services | Your consent (Art. 6(1)(a)), only if you opt in; you can withdraw at any time |
| Secure, maintain and improve the Service using aggregated, non-identifying statistics | Our legitimate interests (Art. 6(1)(f)) |
| Comply with law and respond to lawful requests | Legal obligation |
5. Artificial intelligence
- Mirrorwell uses AI models from Anthropic (Claude), accessed through Netlify's AI Gateway, to generate replies, summaries, reports and safety screening.
- Your content is sent to the AI provider only to generate a response for you. It is not used to train AI models. The gateway does not store prompts or outputs.
- Before content is sent, Mirrorwell automatically removes email addresses, phone numbers and links.
- Mirrorwell does not make decisions about you that have legal or similarly significant effects.
6. Who we share data with
We do not sell your personal data, and we do not share it for cross-context behavioural advertising. We share it only with:
- Service providers (processors) who act on our instructions: Netlify (hosting, login and data storage), Anthropic (AI processing, via Netlify), Stripe (payments), and, if you opt in to marketing, our email marketing provider.
- People you choose: a supervisor, mentor, coach, therapist or other professional you share a reflection summary with. If you connect to a professional through their invitation, you decide whether your summaries are sent to them automatically, and you can switch this off or disconnect at any time in Account. A professional can use Mirrorwell's AI to prepare a session brief from the summaries you have shared with them; that brief is generated only from what you shared.
- Your inviting professional or organisation: a professional who invited you can see that your account is linked to theirs, and an organisation administrator sees only anonymised, aggregated statistics for groups of at least five people. Neither can see your reflections unless you share them.
- Legal and safety reasons: where required by law, or to protect the rights, safety or property of users, the public or us.
- Business transfers: a successor in a merger, acquisition or reorganisation, under this policy.
7. International transfers
MentorsPro and our main service providers are based in the United States. When we transfer personal data from the EU, EEA, UK or Switzerland, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (and the UK addendum) or the EU-US Data Privacy Framework where a provider is certified.
8. How long we keep data
- Reflections, journal entries, portfolio and wellbeing data: until you delete them or your account.
- Cases, transcripts and other files you send: until you delete them, withdraw what you shared, or delete your account.
- Account data: while your account is open. When you delete your account, we delete your data from active systems promptly and from backups within 30 days.
- Payment and tax records: as long as required by law (usually up to 7 years).
- Marketing preferences: until you withdraw consent, plus a record of the withdrawal.
9. Your rights
Depending on where you live, you have the right to access, correct, delete, restrict or object to the processing of your personal data, to receive it in a portable format, and to withdraw consent at any time without affecting processing already carried out. You can delete reflections and your whole account in the app, download journal entries, and change your marketing preference in Account. For other requests, email info@mentorspro.co. We will respond within one month (GDPR) or the time required by your local law.
If you are in the EU, EEA or UK, you can complain to your local data protection authority. Residents of California and other US states with privacy laws have similar rights to know, delete and correct personal data, and we will not discriminate against you for exercising them.
10. Security
We use encryption in transit, secure login, access controls that keep each user's data separate, and reputable infrastructure providers. No system is completely secure, so please use a strong password and keep identifying details about others out of your reflections.
11. Age limit
Mirrorwell is only for people aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe a minor has created an account, contact us and we will delete it.
12. Cookies and local storage
We use only essential cookies, to keep you signed in, and your browser's session storage, to keep your current conversation if you refresh the page. We do not use advertising or tracking cookies.
13. Changes to this policy
We may update this policy. If changes are material, we will tell you in the app or by email before they take effect.
14. Contact
MentorsPro LLC · info@mentorspro.co · Europe: info@danielaaneva.com
See also our Terms of Use.