Skip to main content

Respecting your data.Guarding your privacy.

Last Updated: March 2026

Data Collection

DataKern collects the following personal information to provide admissions, mentoring, and platform operations:

  • Name and contact details (email, phone)
  • Professional background and experience details
  • Mentoring preferences and availability
  • Technical metadata (IP address, user agent)
  • Explicit consent confirmation timestamps

Data Storage & Retention

Production submissions are stored in PostgreSQL-backed infrastructure used for admissions, mentoring, and contact operations. Development and test environments may use non-production storage and are not used for live submissions.

  • Applications: up to 12 months for admissions review, batch operations, and reasonable follow-up
  • Mentoring and contact requests: up to 12 months for scheduling, delivery, and support
  • Technical metadata: only for abuse prevention, troubleshooting, and security review

Data Rights & Deletion

You may request access, correction, or deletion of your personal data through the contact page. Requests are handled manually after identity verification and subject to legal, security, and operational retention requirements.

Security Measures

The live service uses a defined set of application-level controls to reduce misuse and protect submitted data:

  • Server-side validation, honeypot checks, and request size limits on submitted forms
  • Rate limiting and duplicate-submission guards on public form endpoints
  • Security headers including content type, frame, referrer, permissions, and content security policy controls
  • Prepared SQL statements for database writes
  • Restricted admin routes using signed JWT validation and explicit admin allowlists

Operational Notes

No system is claimed to be perfect or invulnerable. The service is designed to minimize exposure, collect only what is needed for operations, and keep the public site aligned with what is actually implemented.

  • Production origin and host allowlists are enforced by configuration
  • Email notifications are optional and only enabled when explicitly configured
  • Manual review is used for submitted requests that require follow-up

Third-Party Services

Infrastructure providers may vary by environment. Where third-party hosting or database services are used, access is limited to platform delivery and operations. No submitted data is sold or shared with third parties for marketing purposes.

Contact

For privacy-related inquiries, please use our contact form. Requests are reviewed manually by the operator of the service.

Chat with us