Mentor18 LLC Privacy Policy

Mentor18 LLC, a Texas limited liability company ("Mentor18", "we", "us", or "our"), builds zero-retention Full-Spectrum L1–Ln security, privacy, financial solvency, and cyber-physical trust infrastructure across two Master Gateways: Personal Gateway by Mentor18 (including our Microsoft Store app 9PJDCZ435J0P, Apple App Store app, Google Play Store app, and web portal) and Enterprise Gateway by Mentor18 (governing 163 controls across AI + APIs + Data + Digital Value + Devices + Critical Infrastructure and 15 Domain Packs).

1. Core Zero-Retention Commitment (#P1.12 — Zero DNS Query, Raw Telemetry & Payload Logging)

• Zero DNS Query Logs (#P1.12 Non-Disableable Invariant): Personal Gateway by Mentor18 processes DNS-over-HTTPS (RFC 8484), DNS-over-TLS (RFC 7858), and Oblivious DNS (RFC 9230) strictly in volatile RAM. We never log, store, or retain your DNS queries, browsing history, visited domain names, or source IP-to-query correlations on disk or in any database.
• Zero AI, API & Software-Aware Asset Telemetry Retention: Enterprise Gateway by Mentor18 and Personal Gateway's AI Cloak inspect requests ephemerally in volatile RAM (< 1.5 ms) to block threats and scrub sensitive secrets/PII. We never store raw request/response payloads, raw GPS/VIN/device serial numbers, raw physical telemetry streams, or raw interbank settlement amounts, and we never train AI models on customer data.
• Zero Sale or Sharing of Personal Information: Mentor18 does not sell, rent, broker, or share personal information with third-party advertisers or data brokers under any circumstances.

2. Information We Collect and Purpose of Processing

We collect only the minimum account information required to authenticate your account and manage your subscription:

• Account Identity (Email Address): When you sign in via OpenID Connect (Google, Microsoft Entra ID, Apple, Okta, or Passkey), we store your verified email address and account identifier solely to authenticate your session, bind your enrolled device token(s), and enforce subscription entitlements.
• Billing & Subscription Metadata: Payments are processed directly by Stripe (PCI-DSS Level 1 certified) or your chosen Cloud Marketplace (Microsoft Azure Marketplace, Google Cloud Marketplace, or AWS Marketplace). Mentor18 never receives or stores your raw credit card number or bank credentials.
• Enrolled Device Configuration: On Personal Gateway ($9.99/user/month or $99.00/user/year, up to 5 devices per user seat), we store your chosen protection settings across all 98 Personal Controls (Owner and User role policy bitmasks, bedtime/focus schedule windows, and anonymous aggregate counters of blocked trackers/scams that you can reset to zero at any time).

3. Windows, Apple & Android Native OS Encrypted DNS Permissions (Zero VPN Tunneling)

• Windows 11 & 10 App (Mentor18LLC.PersonalGateway): Uses native Windows Encrypted DNS-over-HTTPS (DoH) settings (iphlpapi.dll / ms-settings:network-dns) strictly when you click "Turn On Protection". The app does not install a packet-capturing VPN tunnel and does not read personal files, contacts, microphone, camera, keystrokes, or GPS location.
• iOS, iPadOS, macOS & Android Apps: Provision native OS Encrypted DNS profiles (signed Apple DNSSettings .mobileconfig / Android 9+ native Private DNS hostname) without using Android VpnService or iOS packet-tunnel extensions, and without harvesting device contacts, photos, or location data.

4. Children's Online Privacy Protection Act Notice (COPPA — 16 C.F.R. § 312.4)

• Operator Identity & Parental Control Purpose: Mentor18 LLC (2217 Bunnels Fork Rd, Frisco, TX 75036 · privacy@mentor18.com) operates Personal Gateway's Family & Kids protection presets solely under direct verifiable parental authorization. Only an authenticated adult parent or legal guardian creates an account, completes paid Stripe subscription verification, and assigns a non-identifying device label or age-bracket preset (e.g., "Child Tablet") to a child's device.
• Zero Direct Collection from Children & Zero DNS Logs: Children do not register accounts or submit personal information to Mentor18. Under invariant #P1.12, Mentor18 retains zero DNS query logs, zero browsing history, zero location telemetry, and zero behavioral advertising profiles for any child or family device.
• Zero Third-Party Disclosure or Behavioral Advertising: Mentor18 never discloses, sells, or shares any family or child device metadata to third-party advertisers, data brokers, or AI model trainers.
• Parental Rights to Review, Delete & Revoke Consent (16 C.F.R. § 312.6): Parents and legal guardians have the absolute right at any time to review their configured device labels/schedules, refuse further processing, revoke consent, and immediately delete any child device profile directly inside personal.gateway.mentor18.com (1-click profile shred) or by contacting privacy@mentor18.com.

5. Data Retention, Deletion & Your Privacy Rights (GDPR, CCPA/CPRA, TDPSA, HIPAA)

• Right to Access, Export, Appeal & Delete: You may view, export, reset, or permanently delete your account and device configurations at any time from your portal or by emailing privacy@mentor18.com (with a 45-day appeal process under Tex. Bus. & Com. Code § 541.102).
• Universal 30-Day Post-Expiration Cryptographic Purge: Upon subscription expiration (term_expires_at, or unpaid_terminated_at for unpaid termination), account configuration and exportable audit receipts remain available for a 30-calendar-day read-only export grace window and are permanently and cryptographically purged on Day 31 via per-tenant KMS key destruction.

6. Contact & Data Protection Officer

If you have any questions about this Privacy Policy or wish to exercise your privacy or COPPA parental rights, please contact:

Mentor18 LLC
Attn: Privacy & Security Office · 2217 Bunnels Fork Rd, Frisco, Collin County, TX 75036-4745
Email: privacy@mentor18.com · legal@mentor18.com
Web: https://www.mentor18.com