Privacy policy

We collect as little as we can and only what the service needs.

• Account and contact details: your name (if you give it), your email address, and the phone number you give when booking, which we use only to call you for that session.
• Booking details: the time you chose, the PC you want help with, and the problem you described when booking.
• Session notes: a short written summary of what our expert did, which we also email to you. We do not record sessions.
• Payment details: handled entirely by our payment processor. We receive a confirmation, the last four digits of your card and the billing name, never the full card number.
• Site analytics: pages viewed, rough location (country or region), device type and how you arrived, tied to a random visitor id rather than to your identity.
• Support emails: anything you send to hello@getmendaro.com, so we can reply and keep a record of what was agreed.

• To deliver the service: schedule sessions, call you at the time you booked, run the session, and email your summary.
• To bill you: take payment, send receipts, remind you 30 days before a renewal, and process refunds.
• To support you: answer questions and look up your history when you write to us.
• To keep the website working and improve it, using aggregate analytics.
• To meet legal obligations, such as keeping order records for tax purposes.

We send service emails (confirmations, summaries, renewal reminders, receipts) because the service needs them. When you buy, you also agree to occasional Mendaro news by email; every such email has a one-click unsubscribe, and opting out never stops the service emails.

We use a small number of providers to run Mendaro. Each one processes data only on our instructions and under its own security commitments.

• Payments: card payments, receipts and renewals.
• Email delivery: sends your receipts, booking emails and our occasional news (one click to unsubscribe).
• Scheduling: session booking and rescheduling.
• Workspace email: our own mailboxes, where your replies arrive.
• Phone: the line we call you from for your session. Calls are not recorded.
• Remote support: the one-time tool you approve for screen control during the session.
• Analytics: counts visits and which pages work, unless you opt out.
• Website hosting.
• Application hosting and our database.

Some of these providers are outside the country where you live. Where that happens, transfers are covered by the provider's standard contractual protections.

We do not sell personal data. We do not share it with anyone for advertising or for their own purposes. There are no ad pixels or cross-site tracking on getmendaro.com.

The only times we pass data on are to the providers listed above, to comply with a lawful request from a public authority, or to protect our rights or someone's safety.

We set a small number of cookies to keep the site working, remember where you came from, and run analytics. There is no cookie banner because there is no ad tracking to consent to; instead, there is an opt-out toggle. Details are in our cookie notice.

• Unpaid checkouts: 30 days, then deleted.
• Bookings and session notes: 2 years after the session, so we can help if the same problem returns.
• Analytics data: 14 months.
• Order and payment records: 7 years, as tax law requires.
• Support emails: as long as your account is active, plus 2 years.

If you ask us to delete your data, we remove everything except the order records we are legally required to keep.

• Analytics opt-out: use the opt-out on the cookie notice page, or email us and we will set it for you. Your choice is stored in a cookie so it sticks.
• See or delete your data: email privacy@getmendaro.com with the subject "Delete my data" from the address on your account. We reply within 10 business days.
• Correct something: email us and we will fix it.
• Global Privacy Control: if your browser sends a GPC signal, we treat it as an opt-out from analytics without you having to do anything else.

If you live in California, you have the right to know what personal information we collect, to have it deleted, to correct it, and to not be discriminated against for exercising those rights. Because we do not sell or share personal information, there is nothing to opt out of on that front, but the Do Not Sell or Share link in our footer brings you here so you can check. You can also authorize someone to make a request on your behalf.

If you live in another state or country with privacy rights, the same email address works for any request, and we will honor the rights that apply to you.

Our service is for adults. You must be 18 or over to buy from us, and we do not knowingly collect personal data from anyone under 18. If you believe a child has given us data, email privacy@getmendaro.com and we will delete it.

• All traffic to getmendaro.com and our back end uses TLS encryption.
• Card details never touch our servers; our payment processor handles them.
• Access to customer data is limited to the people who need it to help you, and protected by two-factor authentication.
• Remote sessions require your approval before control starts, and the tool removes itself afterwards.

No system is perfectly secure. If we ever learn of a breach that affects your data, we will tell you promptly and explain what happened.

When we change this policy we update the version number and date at the top. For changes that affect how we use your data, we email you before they take effect.

Privacy requests: privacy@getmendaro.com. Everything else: hello@getmendaro.com. Mendaro is a brand of Practicals Technologies Inc. · 131 Continental Dr, Suite 305, Newark, DE 19713.