Privacy Policy

1. Information We Collect

When you use mentova, we collect information you provide directly:

• Account information: email address, name, and password when you create an account.
• Brand data: brand names, competitor names, topics, and domain URLs you configure for tracking.
• Payment information: billing details processed securely through Stripe. We never store credit card numbers directly.
• Usage data: pages viewed, features used, campaigns launched, and interaction patterns to improve our service.
• Technical connection data: IP address, browser (user-agent), and the approximate country/city derived from that IP, recorded when the account is created and at each new session. We use it to secure the service (abuse and fraudulent-account detection) and to understand where our users come from.
• Free check, without an account: the address of the site tested, the result of the analysis, and — only if you give it to us to receive the report — your email address. That address is used to send you that report and, once, to tell you what changed 30 days later. It is not used for any other communication without your explicit agreement, given by ticking a dedicated box; we then keep the date, the wording shown and the IP address of that consent. Every email carries a one-click unsubscribe link.

2. How We Use Your Information

• To provide and maintain the mentova service.
• To send prompts to AI models on your behalf and analyze responses for brand mentions.
• To send you service notifications, alerts, and campaign reports.
• To process payments and manage subscriptions.
• To send you our tips and product news, only if you explicitly consented, and until you unsubscribe.
• To improve our product based on aggregated, anonymized usage patterns.
• To respond to support requests and communicate about your account.

3. Data Storage & Security

Your data is stored in secure PostgreSQL databases hosted within the European Union (EU-North-1 region). We use industry-standard encryption for data in transit (TLS 1.3) and at rest. Access to production systems is restricted and audited.

4. Third-Party Services

We use the following third-party services:

• Supabase — Supabase: authentication and database hosting.
• Stripe — Stripe: payment processing.
• OpenAI, Anthropic, Google, Perplexity — OpenAI, Anthropic, Google, Perplexity: AI model APIs used to generate responses for analysis. Prompts sent do not contain your personal data.
• Resend — Resend: transactional email delivery.
• ip-api.com — ip-api.com: approximate geolocation (country, city, network operator) from the connecting IP address, for security and statistics.

5. Data Retention

We retain your account data for as long as your account is active. Campaign data (AI responses, mention extractions, visibility snapshots) is retained for the lifetime of your account. Free-check results and any email address attached to them are kept for 24 months and then deleted automatically; unsubscribing deletes them sooner. You can request deletion of specific brands or your entire account at any time.

6. Your Rights (GDPR)

If you are in the European Economic Area, you have the right to access, correct, delete, or export your personal data. You may also object to or restrict processing. To exercise these rights, contact us at hello@mentova.ai.

7. Cookies

We use essential cookies for authentication and session management. We do not use advertising or third-party tracking cookies. Analytics, when enabled, use privacy-friendly tools that do not track individual users.

8. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of material changes via email or an in-app notice. Continued use of the service after changes constitutes acceptance.

9. Contact

Questions about this policy? Contact us at hello@mentova.ai.