Privacy Policy

1. Who we are

Infinure (“we”, “our”, “Infinure Co-Pilots”) provides an executive mentoring platform for consulting firms and growth-stage leadership teams. For privacy questions, contact us at privacy@infinure.com.

2. Data we collect

• Account data: name, email address, role (admin/mentor/mentee/sponsor), organization.
• Program data: engagement information, sprint tasks, sessions, decisions, maturity evaluations, and metrics you enter into the platform.
• Usage data: login timestamps, pages visited, actions taken (for audit log and security).
• Optional integrations: if you connect Google Calendar, we store OAuth tokens to create calendar events on your behalf.

3. How we use your data

• Operate the mentoring platform and deliver the features you signed up for
• Generate AI-powered session prep using Anthropic Claude (your data is not used to train models)
• Send transactional emails (password reset, invites, notifications)
• Maintain an audit log of sensitive changes for security and compliance
• Improve the product based on aggregated, anonymized usage

4. Where your data lives

Data is stored in a PostgreSQL database managed by Supabase in the European Union. Row-level security policies ensure that tenants cannot access each other's data. We use Anthropic (US) for AI generation and Resend (US) for transactional emails.

5. Your rights (GDPR)

If you are located in the European Union, you have the right to access, correct, export, or delete your personal data. You can exercise these rights from Settings once signed in, or by emailing privacy@infinure.com. We will respond within 30 days.

6. Data retention

We retain your account and program data for as long as your subscription is active. When you delete your account, personal identifiers are anonymized within 30 days, while anonymous aggregate metrics may be retained for product analytics.

7. Cookies

We use a single first-party session cookie for authentication. We do not use tracking cookies or third-party advertising cookies.

8. Google API Services — Limited Use

When you connect your Google account to Infinure Co-Pilots, the app requests access to specific Google APIs to provide features inside the platform. This integration is optional and only activated when you click “Connect Google Calendar” in your settings.

Google APIs we use and why:

• Google Calendar API (calendar.events): create, read and update calendar events on your behalf so that scheduled mentoring sessions appear in your Google Calendar with the right attendees and Google Meet links.

Limited Use compliance. Infinure Co-Pilots' use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We only use Google user data to provide or improve user-facing features that are prominent in the Infinure Co-Pilots interface (calendar event creation for mentoring sessions).
• We do not transfer Google user data to third parties except as necessary to provide or improve those features, to comply with applicable law, or as part of a merger, acquisition or sale of assets — and only with your explicit consent.
• We do not use Google user data to serve advertisements, including retargeting, personalized or interest-based advertising.
• We do not use Google user data to determine credit-worthiness or for lending purposes.
• We do not allow humans to read Google user data unless we have your affirmative consent, it is necessary for security purposes (e.g. investigating abuse), to comply with applicable law, or for internal operations where the data has been aggregated and anonymized.

You can revoke Infinure's access to your Google data at any time from Settings (Disconnect Google Calendar) or from your Google Account permissions page. OAuth tokens are deleted from our systems within 24 hours of revocation.

9. Changes to this policy

We may update this policy as the product evolves. Material changes will be communicated via email to active users.