Privacy Policy

Effective date: July 1, 2026  ·  Last updated: July 1, 2026

This Privacy Policy explains how MORTAR (“MORTAR,” “we,” “us,” or “our”) collects, uses, shares, and protects your information when you use the MORTARverse (Mortar Alumni Network) mobile app, the MORTAR learning platform and websites, and related services (together, the “Services”).

By creating an account or using the Services, you agree to this Privacy Policy. If you do not agree, please do not use the Services. This Policy is incorporated into and part of our Terms of Use.

1. Who we are

The Services are operated by MORTAR, located at 2453 Gilbert Avenue, Cincinnati, OH 45206, United States. For any privacy question or request, contact us at mortarmasters@wearemortar.com.

For most information you provide, MORTAR is the “controller” (the party that decides how and why your data is processed). Some processing is carried out by our service providers (“processors”) on our behalf — see Section 6.

2. Information we collect

a. Information you provide

• Account & access: email address and password (managed by our authentication provider), and, for invite-based access, your invitation eligibility (email on an approved roster) and cohort.
• Profile: first and last name, display name, city and state, cohort, biography, profile photo, business/logo image, professional goals, skills you’re confident in, skills you want to develop, industry, and links you choose to add (e.g. LinkedIn, portfolio, and other social profiles).
• Content you create: posts, community/group threads and comments, replies, votes/likes, direct messages, event submissions and RSVPs, job and skill listings, survey responses, and graduation/alumni applications.
• Communications & preferences: messages you send us, and your email notification preferences (e.g. events, course nudges, admin messages).
• Support & reports: information you submit when you contact us or report content or another user.

b. Payment information

When you make a purchase (e.g. paid course modules, event tickets, or shop orders), payment card details are collected and processed directly by our payment processor, Stripe — we do not receive or store your full card number. We retain order records such as items purchased, amounts, tax, shipping address (for shop orders), and payment status.

c. Information collected automatically

• Usage & analytics: in-app events and interactions (e.g. screens viewed, features used, checkout steps), timestamps, and a session identifier, used to understand and improve the Services.
• Device & technical data: device and app version information, and a push-notification token if you enable notifications, so we can deliver alerts.
• We do not collect precise GPS location. Any location shown (e.g. your city/state) is text you provide.

d. Information from third parties

• Authentication and infrastructure providers (see Section 6) supply account and technical data needed to operate the Services.
• If your organization or a cohort administrator adds you to an approved access roster, we receive the email address used to invite you.

3. How we use your information

We use your information to:

• Create and manage your account and verify eligibility/access;
• Provide the Services — profiles, communities, events, direct messaging, the jobs & skills marketplace, and matching (suggesting relevant members based on your skills, goals, and industry);
• Process payments and fulfill orders;
• Send transactional and, where permitted, informational or promotional emails and push notifications (you can opt out — see Section 8);
• Personalize content and recommendations;
• Maintain safety and integrity — moderate content, review reports, prevent fraud and abuse, and enforce our Terms;
• Analyze and improve the Services and develop new features;
• Comply with legal obligations and enforce our agreements.

Legal bases (EEA/UK users): we process your information to perform our contract with you (providing the Services), based on your consent (e.g. marketing emails, push notifications), for our legitimate interests (securing and improving the Services), and to comply with legal obligations.

4. How your information is shared / visible

• With other users: your profile (name, photo, skills, goals, industry, links) and the content you post (community threads, comments, listings, event participation) are visible to other members of the network. Direct messages are visible to the participants of that conversation. Please don’t share anything you consider private in public areas of the Services.
• With administrators: MORTAR staff/administrators can view member profiles, content, reports, and order/payment records to operate and moderate the Services.
• With service providers (processors): see Section 6.
• For legal reasons: to comply with law, respond to lawful requests, or protect the rights, safety, and property of MORTAR, our users, or others.
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction.

5. Community content and messaging

Content you post to communities, events, listings, and discussions may be seen by other members and by administrators, and may remain visible to others even after you delete your account (for example, in others’ conversations or where a copy has been re-shared). Direct messages are accessible to the people in the conversation and to administrators for safety and moderation.

6. Service providers we use (sub-processors)

We rely on trusted providers to run the Services. They process data only as needed to provide their services to us:

Each provider maintains its own privacy practices. We encourage you to review the policies of Stripe, Google, Brevo, Apple, and Google Play.

7. Data retention

We keep your information for as long as your account is active or as needed to provide the Services, and thereafter as required to comply with legal obligations, resolve disputes, prevent abuse, and enforce our agreements. Payment and order records are retained as needed for tax, accounting, and legal purposes. Aggregated or de-identified analytics may be retained indefinitely.

8. Your choices

• Profile: you can view and edit your profile information in the app at any time.
• Notifications: manage push notifications in your device settings; manage email preferences in the app (or via the unsubscribe link in our emails). We may still send essential transactional messages (e.g. account, security, and payment notices).
• Marketing consent: where you opted in, you may withdraw consent at any time.

9. How to access or delete your account and data

You can request to access, correct, or delete your personal information, or delete your account, by:

• Using in-app account controls where available, or the account deletion request form, or
• Emailing mortarmasters@wearemortar.com with the subject “Privacy Request.”

We will verify your request and respond within the time required by applicable law. Some information may be retained where we have a legal obligation or legitimate business need (see Section 7), and content shared in community areas may persist as described in Section 5.

10. Your privacy rights

Depending on where you live, you may have rights to:

• Access the personal information we hold about you;
• Correct inaccurate information;
• Delete your information;
• Port your information to another service;
• Object to or restrict certain processing;
• Withdraw consent where processing is based on consent.

To exercise any right, contact mortarmasters@wearemortar.com. We will not discriminate against you for exercising these rights. You may also have the right to appeal a decision or to lodge a complaint with your local data protection authority.

California residents (CCPA/CPRA): you have the rights described above, including the right to know, delete, and correct. We do not sell or “share” (for cross-context behavioral advertising) your personal information.

EEA/UK residents (GDPR): the legal bases for our processing are described in Section 3. You may contact your supervisory authority if you have concerns.

11. Children’s privacy

The Services are intended for users 18 and older. We do not knowingly collect personal information from children under 13 (or the minimum age required in your jurisdiction). If you believe a child has provided us information, contact mortarmasters@wearemortar.com and we will delete it.

Our standards against child sexual abuse and exploitation are published separately at /child-safety.

12. Security

We use administrative, technical, and organizational safeguards — including access controls and encryption in transit — to protect your information. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. Please protect your account credentials.

13. International data transfers

We are based in the United States, and our providers may process and store information in the U.S. and other countries. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for international transfers. By using the Services, you understand your information may be transferred to and processed in the United States.

14. Changes to this Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, where appropriate, provide additional notice (for example, in the app or by email). Your continued use of the Services after changes take effect constitutes acceptance of the updated Policy.

15. Contact us

MORTAR

This Policy is governed by the laws of the State of Ohio, United States, without regard to its conflict-of-laws principles.