Privacy Policy

This Privacy Policy explains how MentionedOn ("MentionedOn", "we", "us", or "our") collects, uses, shares, and protects information when you visit mentioned-on.com, run a free scan, or use our AI visibility monitoring service (the "Service"). By using the Service you agree to this policy.

1. Information we collect

Information you provide

• Account information, your name, email address, and a password (stored only as a salted hash; we never see your plaintext password).
• Business details, the business or brand name, website, category, and location you add for monitoring, plus any competitors or questions you choose to track.
• Free-scan inputs, the brand name, optional website, category, and location you submit to run a scan. If you choose to share a scan result, we create a public scorecard at an unguessable URL (it is marked "no-index" so search engines do not list it, but anyone with the link can view it).
• Communications, the email address you give us to receive a report, and the content of any messages you send us.
• Payment information, when you subscribe, payment is processed by Stripe. We do not receive or store your full card number; we store only a Stripe customer/subscription identifier and your plan status.

Information collected automatically

• Server logs & device data, IP address, browser/user-agent, and request metadata, used to operate the Service, secure it, and prevent abuse (including rate limiting).
• Approximate location, a coarse city/region derived from your IP address by our hosting provider, used to show you locally relevant content. We do not collect precise GPS location.
• Cookies & analytics, a first-party cookie to keep you signed in, and privacy-friendly product analytics to understand aggregate usage (e.g. which pages and actions are used). We do not use third-party advertising cookies or cross-site ad tracking.

2. How we use information

• Provide, operate, and maintain the Service, including running scans and generating reports.
• Create and manage your account and process subscriptions and billing.
• Send transactional and product communications (e.g. scan reports, visibility alerts, weekly summaries, and account notices). You can opt out of non-essential email.
• Secure the Service, prevent fraud and abuse, and enforce our terms.
• Analyze aggregate usage to maintain and improve the Service.
• Comply with legal obligations.

Where required by law (for example, under the EU/UK GDPR), we rely on the following legal bases: performance of our contract with you, our legitimate interests in operating and securing the Service, your consent (where applicable), and compliance with legal obligations.

3. How AI providers process your inputs

To generate results, we send the questions and your business details (such as name, website, and location) to large language model providers, OpenAI, Anthropic, Google, and Perplexity, through our model gateway (OpenRouter). These prompts contain business information, not sensitive personal data, and you should not submit confidential or sensitive personal information in scan fields. We instruct our providers to process this data only to return results to us.

4. How we share information

We do not sell your personal information and we do not share it for cross-context behavioral advertising. We share information only with service providers ("subprocessors") who process it on our behalf to run the Service:

• Vercel, hosting, content delivery, and product analytics.
• Neon, managed database hosting.
• Stripe, payment processing and subscription billing.
• OpenRouter, OpenAI, Anthropic, Google, Perplexity, AI model inference.
• Resend, transactional and report email delivery.
• Cloudflare, DNS and email routing.

We may also disclose information if required by law, to protect our rights or the safety of others, or in connection with a merger, acquisition, or sale of assets (with notice where required).

5. Data retention

We keep account and monitoring data for as long as your account is active and as needed to provide the Service. Scan history is retained to show your trend over time. When you delete a business or close your account, we delete or de-identify the associated data within a reasonable period, except where we must retain it to meet legal, accounting, or security obligations. Server logs are kept for a limited period for security and operational purposes.

6. Security

We use industry-standard measures to protect your information, including encryption in transit, hashed passwords, access controls, and reputable infrastructure providers. No method of transmission or storage is perfectly secure, so we cannot guarantee absolute security.

7. Your rights & choices

Depending on where you live, you may have the right to access, correct, delete, or export your personal information, to object to or restrict certain processing, and to withdraw consent. California residents have rights under the CCPA/CPRA, including the right to know, delete, correct, and opt out of "sale" or "sharing" (we do neither). To exercise any of these rights, email us at hello@mentioned-on.com. You can also delete individual businesses and their scan history from your dashboard at any time, and request full account deletion by contacting us. We will not discriminate against you for exercising your rights.

8. International users

We operate in the United States, and our subprocessors may process data in the United States and other countries. If you access the Service from outside the U.S., you understand your information will be transferred to and processed in the U.S., where data protection laws may differ from those in your country.

9. Children's privacy

The Service is intended for businesses and is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us information, contact us and we will delete it.

10. Changes to this policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date above and, for material changes, provide additional notice where appropriate. Your continued use of the Service after an update means you accept the revised policy.

11. Contact

Questions or requests about this policy or your data? Email hello@mentioned-on.com.