Privacy Policy

1. Introduction

Mentiond ("we", "us", or "our") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and services ("Service").

By using the Service, you consent to the data practices described in this policy. If you do not agree, please do not use the Service.

2. Information We Collect

3. How We Use Your Information

We use the information we collect to: (a) provide, operate, and maintain the Service; (b) process your subscription and payments; (c) send transactional emails such as receipts, subscription confirmations, and account alerts; (d) respond to your support requests and enquiries; (e) monitor and analyse usage to improve the Service; (f) detect and prevent fraudulent or unauthorised activity; (g) comply with legal obligations.

We do not use your data to train AI models, and we do not sell your personal information to third parties for marketing purposes.

4. Who We Disclose Your Information To

We share your information only as necessary to provide the Service or as required by law:

• Service providers — third-party vendors who help us operate the Service, including Stripe (payment processing), Vercel (hosting and infrastructure), Resend (transactional email), Supabase (database), and OpenAI / Anthropic / Google / Perplexity (AI query processing). These providers access your data only as necessary to perform services on our behalf and are contractually obligated to protect it.
• Legal requirements — we may disclose your information if required to do so by law, court order, or governmental authority, or if we believe disclosure is necessary to protect the rights, property, or safety of Mentiond, our users, or the public.
• Business transfers — if Mentiond is acquired, merged, or sells substantially all of its assets, your information may be transferred to the acquiring entity. We will notify you by email before such a transfer occurs.

We do not sell, rent, or trade your personal information to any third party for their own marketing or commercial purposes.

5. Method of Disclosure and Data Transfers

Your data is processed and stored on servers located in the United States and may be transferred to other countries where our service providers operate. By using the Service, you consent to such transfers.

Where we transfer personal data outside your home jurisdiction, we take steps to ensure that appropriate safeguards are in place, consistent with applicable data protection law.

6. Security Practices

We implement industry-standard technical and organisational measures to protect your personal information against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Encryption in transit using TLS/HTTPS for all data communications
• Encryption at rest for database storage
• Access controls limiting employee access to personal data on a need-to-know basis
• Regular security reviews of our infrastructure and dependencies

No method of electronic transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee its absolute security. If you believe your account has been compromised, please contact us immediately at taylor@mentiond.net.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. If you close your account, we will delete or anonymise your personal data within 90 days, except where we are required by law to retain it for a longer period.

Aggregated, anonymised usage data that cannot be linked back to you may be retained indefinitely for analytics purposes.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access — request a copy of the personal data we hold about you
• Correction — request that we correct inaccurate or incomplete data
• Deletion — request that we delete your personal data ("right to be forgotten")
• Portability — request that we provide your data in a structured, machine-readable format
• Objection — object to or restrict our processing of your personal data

To exercise any of these rights, please contact us at taylor@mentiond.net. We will respond to your request within 30 days. We may ask you to verify your identity before processing your request.

9. Children's Privacy

The Service is not directed at children under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected such information, we will take steps to delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by displaying a prominent notice within the Service before the changes take effect.

Your continued use of the Service after the effective date of the updated policy constitutes your acceptance of the changes.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Email: taylor@mentiond.net