Leverage MentoringLeverage Mentoring

    Privacy Policy

    Leverage Mentoring

    Last updated: 3 May 2026

    Leverage Mentoring ("Leverage Mentoring", "we", "us", "our"), operated by Aiccomplish Mentoring and Coaching Platform Pty Ltd (ACN 693 164 939), is committed to protecting the privacy of individuals and handling personal information in a responsible and secure manner.

    This Privacy Policy explains how we collect, use, disclose, store and protect personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

    By accessing or using the Leverage Mentoring platform, website, or services, you acknowledge that you have read and understood this Privacy Policy and consent to the handling and use of your personal information as described below.

    1. About Leverage Mentoring

    Leverage Mentoring is a digital mentoring platform designed to support personal and professional development through structured mentoring partnerships, reflection tools, and AI-supported guidance.

    • Trading name: Leverage Mentoring
    • Legal name: Aiccomplish Mentoring and Coaching Platform Pty Ltd
    • ACN: 693 164 939
    • Jurisdiction: New South Wales, Australia
    • Contact email: hello@leveragementoring.com.au

    2. Types of personal information we collect

    We collect only the information necessary to operate and improve the Leverage Mentoring platform.

    2.1 Personal identification information

    • Full name
    • Email address
    • Optional demographic or background information you choose to provide

    2.2 Account and platform usage information

    • Login credentials (encrypted)
    • Device and browser information
    • IP address
    • Session timestamps and activity logs

    2.3 Mentoring and coaching content

    • Profile details
    • Goals, reflections, journal entries, and notes
    • Messages and shared content within mentoring workspaces

    Important: Mentoring content remains private between participants. We do not access mentoring content unless:

    • you request support,
    • it is required for system troubleshooting, or
    • we are legally required to do so.

    2.4 Payment information

    • Payment details are processed securely by Stripe.
    • Leverage Mentoring does not store credit card or banking details.

    2.5 Analytics and diagnostic data

    • Aggregated and anonymised usage statistics
    • System performance metrics
    • Error and audit logs

    2.6 Marketing and communications data

    • Your communication preferences
    • Your interaction with our marketing materials, such as email opens and clicks

    2.7 Cookies and tracking

    • Session cookies: used to keep you signed in.
    • First-party analytics: we record product usage events in our own database to understand how features are used and improve the platform.
    • No third-party advertising or tracking cookies: we do not use Google Analytics, Facebook Pixel, or similar third-party tracking technologies.
    • You can disable cookies in your browser. Some parts of the platform, including sign in, may not function correctly if cookies are disabled.

    3. How we collect personal information

    We collect personal information when you:

    • register an account
    • complete or update your profile
    • participate in mentoring or coaching activities
    • use reflection, journaling, or AI-supported features
    • communicate with us, including support requests
    • interact with the platform or website

    Personal information is also collected automatically through cookies, logs, and similar technologies.

    4. Purpose of collection

    We collect and use personal information for the following purposes:

    • providing, maintaining, and improving the Leverage Mentoring platform
    • enabling mentoring partnerships and shared workspaces
    • personalising user experiences and recommendations
    • supporting AI-assisted reflection and journaling features (see Section 12)
    • processing payments and subscriptions
    • communicating service updates and support information
    • maintaining platform security and integrity
    • complying with legal and regulatory obligations

    We may use your personal information to communicate with you about our services, where you have given consent. We do not sell your personal information to third parties.

    5. Direct marketing

    We only send marketing emails to users who have explicitly opted in. Marketing consent is given through tick boxes during signup or at any time in Settings, and is separate from your acceptance of this Privacy Policy and our Terms of Service.

    There are two consent categories:

    • Product updates: new features, important changes, and things you should know.
    • Mentoring tips and resources: practical guidance on getting more from your mentoring relationships.

    Each consent decision is logged with a timestamp and the version of the consent wording you agreed to. You can review, change, or revoke your marketing consent at any time in Settings, with immediate effect. Every marketing email we send includes a working unsubscribe link.

    These practices are designed to comply with the Spam Act 2003 (Cth). Transactional and account emails, such as sign in confirmations, invitations from your mentoring partner, billing notices, and security alerts, are not marketing and are sent regardless of your marketing consent.

    6. Overseas disclosure of personal information (APP 8)

    Your personal information is primarily stored and processed in Singapore, on Amazon Web Services infrastructure managed by our backend provider Supabase. Privacy laws in Singapore differ from those in Australia. We take steps to ensure that overseas service providers protect personal information in a manner consistent with Australian privacy standards.

    In addition, the following processors may handle limited personal information outside Australia:

    • Stripe (United States and Ireland): payment processing. Receives your name, email, and payment metadata. Does not return card numbers to us.
    • Lovable Email, which uses Mailgun (United States): transactional and authentication email delivery. Receives email address, name, and the content of the emails we send you.
    • Anthropic (United States): the Claude API, used for the optional focus help and invitation drafting features. See Section 12.
    • Lovable AI Gateway, which routes to Google (United States): Gemini API, used for the optional voice debrief, session summary, and "Need a prompt?" coach features. See Section 12.

    7. Acceptance and consent

    Before creating an account, you must tick the mandatory checkbox confirming you have read and agree to this Privacy Policy and our Terms of Service. Ticking that checkbox is your legal acceptance of the terms set out in this Privacy Policy, including:

    • The collection, use, and disclosure of your personal information as described in this Privacy Policy.
    • The transfer and storage of your personal information overseas, as detailed in Section 6.

    The marketing consent checkboxes shown alongside on the signup form are optional. You can decline both and still create and use a Leverage Mentoring account. You can change your marketing preferences at any time in Settings.

    If you do not agree to the Privacy Policy and Terms of Service, you will not be able to create an account or use the Leverage Mentoring platform.

    8. Security of personal information

    We implement industry-standard safeguards to protect personal information, including:

    • infrastructure providers that hold SOC 2 Type II certifications, including AWS, Supabase, and Stripe
    • encryption in transit (TLS 1.2 or higher)
    • encryption at rest (AES-256)
    • role-based access controls and Row Level Security at the database layer
    • secure authentication and audit logging
    • regular system monitoring and vulnerability assessments

    While we take security seriously, no system is completely secure. Users are responsible for maintaining the confidentiality of their login credentials.

    9. Your rights under the Privacy Act

    You have the right to:

    9.1 Access

    Request access to the personal information we hold about you.

    9.2 Correction

    Request correction of inaccurate, outdated, or incomplete information.

    9.3 Withdrawal of consent

    The way you withdraw consent depends on the type of consent involved.

    • Marketing consent: you can change or revoke your marketing preferences at any time in Settings, with immediate effect. Your account remains active.
    • Consent for overseas storage: the platform cannot operate without overseas storage and processing, as described in Section 6. Withdrawing this consent therefore requires closure of your account and deletion of your data.

    9.4 Deletion

    Request permanent deletion of your personal information, which will be actioned within a reasonable timeframe.

    9.5 Data portability

    Export your data from the platform in a readable format.

    Requests can be made by email:

    10. Disclosure to third parties

    We may disclose personal information to trusted third parties, including:

    • cloud hosting and database providers (AWS via Supabase, Singapore)
    • payment processors (Stripe)
    • email delivery providers (Lovable Email, which uses Mailgun)
    • AI service providers (see Section 12)
    • our professional advisors, including lawyers and accountants
    • technical and support service providers

    These providers are authorised to use personal information only as necessary to provide services to Leverage Mentoring.

    We may also disclose your personal information in the following circumstances:

    • To our existing or potential agents, business partners or parent/subsidiary companies (Bodies Corporate).
    • In the context of a business sale, merger, or acquisition, to a potential buyer and their advisors, subject to confidentiality obligations.

    11. Data retention

    We retain personal information only for as long as necessary to fulfil the purposes outlined in this policy or as required by law.

    • Active accounts: data retained while the account is active.
    • Inactive accounts: we may archive accounts after a period of inactivity. Marketing communications cease at the point of inactivity. We do not send re-engagement marketing to inactive accounts.
    • Account deletion request:
      • primary data deleted within 30 days of a request
      • backups fully purged within 90 days of a request
    • Audit and security logs retained as required for compliance.

    12. AI-supported features and data use

    Leverage Mentoring includes optional AI-supported features. These features are only triggered by explicit user action, such as clicking a "Need a prompt?" button, recording a voice debrief, asking for help shaping a focus area, or drafting an invitation. The platform never sends your content to an AI provider in the background.

    We use two AI providers, each for different features.

    12.1 Lovable AI Gateway (Google Gemini)

    Lovable Inc. (United States) operates an AI gateway that routes our requests to Google's Gemini API (United States). This is used for the voice debrief feature, the progress narrative, session summaries, and the "Need a prompt?" coach in sessions, reflections, and goals.

    When you use these features, the following content may be sent to Google via the Lovable AI Gateway:

    • your first name
    • your workspace type
    • your active goal titles and confidence ratings
    • recent reflection content
    • recent session focus topics
    • summary progress data, such as session and action counts
    • the draft form content currently in front of you, truncated

    Voice features additionally send the full transcript of what you record. Per Google Cloud's published terms, paid API content is not used to train Google's models.

    12.2 Anthropic Claude

    We use Anthropic's Claude API (United States) directly for the focus help feature ("Here's a starting point") and for AI-assisted invitation drafting.

    When you use these features, the following content may be sent to Anthropic:

    • your focus statement text, when you ask for help shaping it
    • your invitation draft input, when you ask for help drafting an invite

    Per Anthropic's commercial terms, customer inputs and outputs sent through the API are not used to train Anthropic's models. Anthropic retains API content for up to 30 days for abuse monitoring, after which it is deleted.

    12.3 Overseas processing

    Both AI providers process content in the United States. This processing is included in the overseas disclosures listed in Section 6.

    12.4 Opting out of AI features

    AI-supported features are optional. You can use Leverage Mentoring fully without invoking them. If you do not click an AI button, record a voice debrief, or otherwise trigger an AI feature, no mentoring content is sent to any AI provider.

    To delete data already sent to AI providers, contact us via the deletion request process in Section 9.4. We will work with the AI provider to action removal in line with their data retention policies.

    13. Children's privacy

    Leverage Mentoring is intended for users aged 18 and over. We do not knowingly collect personal information from anyone under 18.

    If we become aware that we have collected personal information from a person under 18, we will delete that information promptly.

    If you are a parent or guardian and believe your child has provided us with personal information, please contact us at hello@leveragementoring.com.au so we can take appropriate action.

    14. Complaints

    If you believe your privacy has been breached, please contact us at hello@leveragementoring.com.au. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

    15. Changes to this policy

    We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notification. The latest version will always be available on our website.

    Appendix: Data processing and security summary

    • Primary database and storage: AWS Asia Pacific (Singapore), via Supabase
    • Compliance: Australian Privacy Principles (APPs)
    • Encryption: AES-256 at rest, TLS 1.2+ in transit
    • Payments: Stripe (PCI-DSS compliant)
    • Email delivery: Lovable Email (Mailgun, United States)
    • AI providers: Lovable AI Gateway (Google Gemini, United States); Anthropic Claude (United States)
    • Data deletion: user-initiated, time-bound
    • Consent tracking: explicit, logged, revocable

    Disclaimer: This Privacy Policy is provided for transparency and does not constitute legal advice. We recommend you have this policy reviewed by a qualified legal professional in your jurisdiction to confirm full compliance with applicable laws.