1. Who We Are
Mentoroid Pte. Ltd. ("Mentoroid", "we", "us", "our") is a company established in Singapore (UEN: 202417636G). We operate the mentoroid.ai website, the Matchup Guide, and the Mentoroid desktop application and related services (collectively, the "Service"). This Privacy Policy explains how we collect, use, store, and protect your information.
2. Information We Collect
2.1 Information you provide
- Contact information and messages: your email address and the information you provide when you contact us or sign up for communications.
- Steam account: when you log in via Steam OpenID, we receive your Steam 64-bit ID, public display name, and avatar URL. We do not receive or store your Steam password.
- Account and preferences: your service account identifier, authentication credentials for Mentoroid, consent choices, preferred roles, goals and any custom coaching reminders you create.
2.2 Dota 2 match data
When you use the Mentoroid desktop application, we collect match data to provide coaching. This includes:
- Match history and detailed match statistics (kills, deaths, assists, GPM, XPM, net worth, last hits, denies, ward placements, hero damage, tower damage, death participation).
- Hero selections, facets, roles, game mode, and match outcomes.
- Match replay files (DEM format) retrieved from Valve's servers for detailed analysis.
- Real-time game state data received via Dota 2's official Game State Integration (GSI) API during matches.
Features that retrieve your public match history require "Expose Public Match Data" to be enabled in Dota 2. Publicly available game data can still identify you through your Steam ID.
2.3 Data generated by the Service
- Mentoroid Score, displayed in the app out of 10.
- AI-generated coaching insights, performance trends, and hero/role profiles.
- Pre-game goal-setting recommendations.
2.4 Technical and diagnostic data
- Operating system and version, application version, and IP address.
- Crash reports, error details, diagnostic logs and device information used to investigate failures and improve reliability. Crash logs are sent to our privately hosted crash-reporting system. Reports may include a service account identifier and game or application context.
- Optional product analytics, including feature usage, session duration, interface interactions and performance measurements. These are sent to our analytics provider when you opt in to telemetry. In the current app, analytics can be linked to your Steam ID after sign-in; they are not anonymous.
2.5 Screen capture, local processing and beta uploads
The app uses game-screen capture to recognise heroes and other visible game information. Detection and text-to-speech processing run locally, but this does not mean that all related data stays on your device.
- During the beta, sampled Dota 2 screenshots and detection metadata are collected and uploaded automatically to our backend to improve game recognition. Captures may include player names, chat and other information visible in the game window. Uploads are associated with your account and match.
- The app checks whether Dota 2 is running so that it can start or stop the coaching session.
- Coaching speech is generated on your computer. Generating speech locally is separate from sending match data for cloud-based coaching analysis.
Planned public-release change: we plan to stop collecting screenshots when Mentoroid launches publicly. The current beta still collects them. Crash reporting will continue through our privately hosted crash-reporting system.
2.6 Local storage on your device
The desktop application stores the following files locally:
- Account configuration, including your Steam ID, Mentoroid API key, settings and cached authentication state. Some configuration is stored in plaintext. Credentials are used in authenticated requests to our services.
- Application logs, diagnostic bundles and game-state logs.
- Sampled gameplay images and metadata collected during the beta, pending upload or local cleanup.
- Cached match results and game data, such as hero matchups and item information.
- AI model weights for hero detection and text-to-speech.
2.7 Website and service requests
With your permission, we use Google Analytics to understand page visits, referral sources, campaigns, device information and selected interactions, such as download clicks, use of the Matchup Guide links, video engagement and FAQ opens. It uses analytics cookies to distinguish browsers and sessions. We do not send Steam IDs, email addresses or account credentials to website analytics. This is separate from optional in-app analytics.
We load the analytics tag only after you accept website analytics. Rejecting analytics leaves the website usable. You can change your choice through Cookie preferences in the footer. We do not enable Google Signals or advertising personalisation in this integration.
Fonts are self-hosted. Our hosting and delivery infrastructure receives request information such as IP addresses, requested URLs and browser information when it serves pages, images, videos, downloads or API responses. This is separate from optional analytics consent, because those requests are needed to serve the website and downloads.
2.8 Limits on collection
- We do not receive your Steam password.
- We do not use the Service to scan your personal documents or browsing history.
- The current coaching implementation is for Dota 2. Game-screen captures can include information displayed inside that game, as described above.
3. How We Use Your Information
- Contact information: to reply to requests and send relevant service communications or updates you signed up for. We do not sell your email address or share it with third parties for marketing.
- Account and match data: to sign you in, retrieve match history, generate coaching, compute your Mentoroid Score and track your progress.
- AI-generated insights: match data is processed by large language models (see Section 5) to generate personalized coaching recommendations, performance analysis, and goal-setting suggestions.
- Error reports: to diagnose and fix application issues.
- Beta screenshots and detection metadata: to investigate recognition errors and improve the models and templates that identify game information.
- Telemetry (if opted in): to understand feature usage and improve the product.
- Website analytics (if accepted): to understand how visitors find the site and which pages and actions help them explore the guide or reach the download page. A download click is not proof of installation.
4. Data Storage and Security
- We use cloud providers to host the Service, store account and match data, and manage authentication. Our primary backend is configured for Singapore; other processing locations depend on the service provider. See Section 6 and our Service providers page.
- Our cloud services use encrypted connections and storage protections. These protections do not mean that all files saved on your own device are encrypted.
- Consent and deletion records are stored separately from ordinary coaching data. Their treatment is described in Section 7.
- Authentication, API-key validation and access controls restrict access to account-specific services and data.
- Local configuration can contain your account identifiers and API key in plaintext. Anyone with access to those files may be able to use those credentials, so protect access to your device.
5. Services and Providers
We use service providers for the following purposes. The data they process depends on the service they provide:
- Cloud hosting, storage and authentication: account details, match records, uploads, logs and requests needed to run the Service.
- AI coaching: match statistics, hero and role information, performance metrics and coaching context used to generate analysis and recommendations.
- Game account and match-data services: account and match identifiers used for sign-in and to retrieve game information.
- Optional product analytics: usage events, device/performance information and account-linked identifiers when you opt in to telemetry.
- Optional website analytics: page views, referral and campaign information, browser/device information, cookie identifiers and selected interactions when you accept website analytics.
We operate our own privately hosted crash-reporting system on cloud infrastructure. It processes crash details, diagnostic logs and related application or account context to help us investigate errors.
Our Service providers page lists the providers by name, what they process and information about processing locations.
We do not sell your personal data to any third party.
6. International Data Transfers
Mentoroid is based in Singapore, but some providers may process data outside Singapore or your country of residence, including in the United States. See our Service providers page for provider-specific information.
International transfers are subject to applicable data-protection requirements, including Singapore's PDPA transfer-limitation requirements. Contact us for information about the processing locations and safeguards relevant to your data.
7. Data Retention and Deletion
Account and coaching history are kept to provide the Service and show your progress. You can request account deletion through the app's account controls or by emailing privacy@mentoroid.ai. We may need to verify your identity before acting on a request.
- Account deletion disables access and starts removal of your profile, account-specific analyses, coaching records, credentials and uploaded data. Removal is not guaranteed to finish immediately: a failure or timeout may require follow-up cleanup.
- Deletion audit records are kept separately to document the request and processing outcome. These can contain hashed account identifiers. Hashing does not, by itself, make a record anonymous.
- Consent records are also retained separately and are not automatically removed with your account. Contact us if your request includes these records; any continued retention must have an applicable legal or business purpose.
- Shared match records: replays and parsed reports include all players in a match. They are not automatically deleted when one account is removed, and can still contain player identifiers. Account deletion does not erase publicly available records held by Valve or other providers.
Analytics and crash records are held separately from your coaching profile. Removing an account mapping does not necessarily erase those records, particularly where an event contains an account identifier. Tell us if your request includes analytics or diagnostic records so that these can be addressed as part of the request.
Deletion is subject to records we need to retain for applicable legal, security or dispute-handling purposes. This policy does not promise a fixed deletion period for every log, backup or provider-held record.
8. Children's Privacy
Mentoroid is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. Users under 18 must have a parent or guardian's consent in accordance with our Terms of Service and applicable law. If you believe we have collected information from a child under 13, contact us and we will promptly delete it.
9. Your Rights and Choices
Singapore's Personal Data Protection Act (PDPA) is relevant to our handling of personal data. Other privacy laws may also apply depending on your location and use of the Service. Subject to applicable conditions and exceptions, you can contact us to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your data.
- Object to or restrict processing of your data.
- Request a portable copy of your data.
- Withdraw consent for processing that relies on consent. Use Cookie preferences in the website footer to reject website analytics. Optional desktop telemetry is controlled separately in the app's settings.
- Raise a privacy concern with us or, where applicable, your data protection authority. In Singapore, this is the Personal Data Protection Commission (PDPC).
We aim to respond to requests within 30 days, or within the time required by applicable law. If we need more information or time, we will explain what is needed. Withdrawing consent may affect features that need the relevant data; we will explain those consequences.
California residents (CCPA/CPRA)
Where the CCPA/CPRA applies, rights may include knowing what personal information is collected, requesting correction or deletion, and exercising applicable opt-out rights without discrimination. We do not sell personal information.
11. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date and, where appropriate, notify you through the email address you provided.
12. Contact
If you have questions about this Privacy Policy or want to exercise your data rights, contact us at:
Mentoroid Pte. Ltd.
Singapore
UEN: 202417636G
Include the account identifier relevant to your request and tell us whether it concerns account data, beta screenshots, analytics or crash logs. Do not send your password or API key.