Privacy Policy

Onclave ("we," "us," or "our") operates a marketplace connecting people seeking mentorship with experienced mentors. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

We collect information you provide directly, including:

• Account details: name, email address, and password
• Profile information: bio, expertise, photo, and portfolio links (for mentors)
• Booking details: session topics, notes, and scheduling preferences
• Payment information, processed securely through our payment provider (Stripe)

We also collect information automatically, including:

• Usage data such as pages visited and actions taken on our platform
• Device and browser information

If you choose to connect your Google account to Onclave, we request access to limited Google Calendar data so we can support booking and scheduling features for your mentorship sessions.

Google user data we access includes:

• Your Google Calendar primary calendar email address
• OAuth access and refresh tokens needed to maintain your calendar connection
• Busy and free time information from your primary Google Calendar
• Calendar events created by Onclave for approved mentorship sessions

We use Google user data only to:

• Check whether a mentor's connected Google Calendar has scheduling conflicts
• Create a Google Calendar event for the mentor when a booking is approved
• Create a Google Calendar event for the user when the user has also connected Google Calendar
• Add or preserve the video meeting link associated with the booked session
• Update or delete Google Calendar events if a booked session is cancelled
• Show whether a Google Calendar connection is active inside account settings

We do not use Google user data for advertising, profiling, resale, or any purpose unrelated to providing Onclave scheduling and booking features.

We use the information we collect to:

• Create and manage your account
• Facilitate bookings between mentors and mentees
• Process payments and payouts
• Send booking confirmations, reminders, and account notifications
• Improve and maintain the platform
• Respond to support requests

We do not sell your personal information. We share information only in the following circumstances:

• With mentors or mentees as needed to facilitate a booking
• With service providers who help us operate the platform (e.g. payment processing, hosting, email delivery)
• When required by law or to protect the rights and safety of our users

If you connect Google Calendar, Google user data is shared only in the limited ways necessary to provide the requested scheduling functionality:

• With Google, to read availability and create, update, or delete calendar events on your behalf
• With the other participant in a booked session only through the event details or invite needed to schedule that session
• With infrastructure and service providers acting on our behalf only when necessary to host, secure, or support the product, subject to confidentiality and data protection obligations

We do not sell Google user data or share Google user data with data brokers, advertisers, or other third parties for independent marketing purposes.

We retain your information for as long as your account is active or as needed to provide our services. You may request deletion of your account and associated data at any time by contacting us.

For Google user data specifically, we retain OAuth tokens and Google Calendar connection details only while your Google Calendar connection remains active or as long as needed to support your active Onclave bookings and account support requests.

You can stop our access to Google user data at any time by:

• Disconnecting Google Calendar from your Onclave account settings
• Revoking Onclave access from your Google account permissions
• Requesting account or data deletion through our contact page

When your Google Calendar connection is removed, Onclave will no longer use your Google account to read availability or create new calendar events. Stored connection data and related Google tokens are deleted or overwritten in the ordinary course of account removal and support operations, except where retention is required for legal, security, fraud prevention, or dispute resolution purposes.

Depending on your location, you may have the right to access, correct, or delete your personal information, or to object to certain processing. Contact us to exercise these rights.

We use industry-standard measures to protect your information, including encryption in transit and secure payment processing through Stripe. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

For Google user data and other sensitive account data, we apply administrative, technical, and organizational safeguards designed to protect against unauthorized access, use, alteration, or disclosure. These measures include authenticated access controls, encrypted transport, limited internal access, and secure infrastructure used to operate Onclave.

We only request Google OAuth scopes that are reasonably necessary for the calendar features described in this policy, and we do not use Google user data for any prohibited secondary purpose.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a new effective date.

If you have questions about this Privacy Policy, contact us at our contact page.