Privacy notice

Iman Meskini ENK, organisation number 920 852 432, is the data controller. The registered address is Jens Bjelkes gate 60, 0652 Oslo, Norway.

For privacy questions or requests, email hello@imanmeskini.com.

A mentoring application includes your name, email address, time zone, current role or business, preferred language, your answers about your direction and goals, investment readiness, and the consent choices you make. An organisation enquiry can include your name, work email, organisation, role, country or time zone, enquiry type, audience, preferred timing and format, desired outcome, budget range, accessibility needs, additional context, and your consent choices. Please do not submit sensitive or unnecessary personal information.

If you contact us directly by email, we handle the details you choose to provide, such as your contact details, organisation and the contents of your enquiry.

When you start a purchase, we process your account and workspace, selected offer and price, currency, checkout attempt and a dated, versioned record that you accepted the purchase terms and requested any early start or access. We do not receive full card details.

The website and its infrastructure may also process technical data needed to deliver and protect the service, such as IP address, request time, requested page, browser or device information, and security or error events. These records are used for reliable delivery, troubleshooting and protection against misuse.

When public booking is enabled, you can book a free 15-minute intro call through the website's Calendly link. An applicant who has already been reviewed may instead receive a private, one-use invitation for the same type of call. The private link is shared only with the invited person. The call normally takes place in Google Meet or through a comparable video-call provider. Any further meeting is arranged manually during the call.

Before Calendly opens, you must explicitly acknowledge that the intro call will be recorded and transcribed with Fathom. Recording and transcription are a condition of this call. If you do not want the recording and transcription, do not book the call; you may contact us with questions. The acknowledgement documents that you have read this information. It is not consent to marketing.

The recording and transcription are used for private note-taking, thoughtful and safe follow-up, and to assess what kind of support may be appropriate going forward. Do not share special-category personal data or other highly sensitive information during the call unless this is necessary and expressly agreed in advance.

The Fathom recording, audio, transcript, summary and link, private call notes, and video-meeting link are not stored in Iman Content Studio. In the public booking path, the website also does not store the checkbox acknowledgement or Calendly booking; Calendly handles the information you provide there. For a private invitation, the website stores only minimised information such as invitation status, the time and version of the acknowledgement, an encrypted one-use link until booking, pseudonymised provider identifiers, start and end time, time zone, appointment status, and whether a further meeting was arranged manually.

We use application and enquiry information to review your request, respond to you and, where relevant, take steps you request before entering into an agreement. The legal basis is normally Article 6(1)(b) GDPR. The required acknowledgement confirms that you have reviewed this notice; it is not used to make optional marketing a condition of the service enquiry.

Optional marketing is unchecked by default and relies on your consent under Article 6(1)(a) GDPR. You can withdraw that consent at any time. We use necessary technical and security data for our legitimate interests in operating, securing and improving the website under Article 6(1)(f) GDPR.

Account, payment, terms and delivery information is handled to enter into and perform the agreement, provide access, manage cancellation or withdrawal and reconcile payments, normally under Article 6(1)(b) GDPR. Information that must be retained for bookkeeping or other legal duties is handled under Article 6(1)(c).

For the required recording and transcription of the intro call, we rely on our legitimate interests under Article 6(1)(f) GDPR in keeping accurate private notes, providing thoughtful and safe follow-up, and assessing what support may be appropriate. We balance this interest against your rights and limit the data and access. You may object to the processing, but because recording and transcription are a condition, we cannot conduct the intro call in this format without them.

We may also retain information when necessary to comply with a legal obligation, such as bookkeeping requirements, under Article 6(1)(c) GDPR, or to establish, exercise or defend legal claims. We do not sell personal data or use website activity for behavioural advertising.

Submitted forms are stored in the site's private Cloudflare D1 database. We also use service providers where needed for website hosting and infrastructure, security, email and telecommunications, and professional advice. They receive only the information necessary for their role and must protect it under applicable agreements and law.

When inbound email is enabled for the domain, Resend receives mail sent to the domain and forwards messages addressed to hello@imanmeskini.com to a private inbox. Other addresses at the domain are ignored by the site's forwarding code, but may still be received by Resend because inbound routing applies to the whole domain. Message contents and attachments are not stored in the site's database or logs. The active provider setting retains received email for 30 days; separate service-termination and backup rules are governed by the provider agreement.

Stripe processes customer, offer, price and checkout-session identifiers together with the information you provide in its secure payment surface. Stripe returns payment and subscription status to us through signed provider events. Card details are handled by Stripe and are not stored in the website database.

For a booked intro call, Calendly handles contact details, time zone and the selected appointment time. Google Meet or a comparable video-call provider handles the information needed to conduct the call. Fathom handles the audio, recording, transcript and any summary. Access is limited to Iman and authorised providers or people who need the information for the stated purpose. The material is not public and is not stored in Iman Content Studio.

Some providers may process data outside the European Economic Area. Where data protection law requires it, transfers rely on an adequacy decision or appropriate safeguards such as the European Commission's standard contractual clauses, together with supplementary measures where appropriate.

When a signed-in Studio user deliberately starts an AI text job, the source text, content goal, tone, audience and approved brand terms are sent to OpenAI. Responses API storage is disabled for the request, but standard abuse-monitoring logs may retain request and response content for up to 30 days. Do not submit sensitive personal data to the AI text tool.

Each mentoring application and organisation enquiry receives a retention review date 365 days after submission unless a separately approved private retention setting applies. That review date is not an automatic-deletion promise. At review, the record must be deleted or anonymised when it is no longer needed, or retained only where a continuing client relationship, legal obligation, dispute or legal claim requires it.

Minimised booking information and related call material held by Calendly, the video-call provider and Fathom are reviewed no later than 365 days after the booking or the related application, depending on which path was used. Active copies are deleted earlier when they are no longer needed. They may be kept longer only where a continuing client relationship, legal obligation, dispute or legal claim requires it. Limited backup copies may remain for a period after deletion under the provider agreements before they are overwritten.

A published Brand Clarity report remains available in the client's private account for 12 months from publication. We send notice at least 30 days before scheduled deletion. The client can download and keep a copy, or request deletion earlier. Automated deletion is blocked unless the required notice was delivered.

For a completed, non-retryable AI text job, the local job copy of the prompt, generated response and safety data is irreversibly scrubbed after 30 complete days. A successful draft that was never handled is then marked discarded. Explicitly saved project versions are preserved. Provider, model, usage, cost and integrity-hash metadata remain where needed for security and billing reconciliation.

Other personal data is kept only for as long as it is needed for its purpose. Technical logs are kept according to operational and security needs and the applicable provider settings, then deleted or anonymised when they are no longer needed.

Depending on the circumstances, you may have the right to access your personal data, correct inaccurate data, request deletion or restriction, object to processing, and receive data you provided in a portable format. Where processing relies on consent, you may withdraw that consent at any time without affecting earlier lawful processing.

Contact us using the details above to exercise a right. You may also complain to the Norwegian Data Protection Authority, Datatilsynet, at datatilsynet.no.

Public form records are not automatically linked to a private website account by email address alone and are not automatically included in the account ZIP export. Ask us directly so identity and the relevant application or enquiry can be verified before access, portability or deletion is handled.

A request for access, correction or deletion can also cover relevant information processed on our behalf by Calendly, the video-call provider or Fathom. Contact us at the privacy address above. We must be able to verify your identity and will follow up with the provider where needed to complete the request.