Privacy Policy

Effective date: June 15, 2026

This Privacy Policy explains how Mentioned, operated by Mentioned LLC, a New Mexico limited liability company ("we", "us", "our"), collects, uses, and shares information when you use Mentioned (the "Service").

1. Information We Collect

Account info: the email address you sign in with and a securely hashed version of your password (we never store your password in plain text).
Scan inputs: the brand name, description, and competitor names/domains you enter to run a scan.
Scan results: AI-generated answers, visibility scores, and Action Plan recommendations, stored so we can show your history and period-over-period trends.
Billing info: if you subscribe, Paddle (our payment processor) handles your payment details directly. We receive only your subscription status, not your card details.
Usage data: basic technical data (e.g. timestamps of scans) needed to enforce free-trial and weekly usage limits.

2. How We Use Information

We use this information to operate the Service: running scans, generating your Action Plan, showing your visibility history, enforcing trial/subscription limits, sending login links, and providing customer support.

3. Third-Party Processors

To provide the Service, the information above is shared with:

Google (Gemini API), OpenAI, and Perplexity: to generate buyer questions, run your scan, and produce the Action Plan. Your brand, description, and competitor inputs (and the resulting questions) are sent to these providers' APIs.
Paddle.com: to process subscription payments and sales tax/VAT as the merchant of record.
Upstash: our database provider, used to store your account, scan history, and usage counters.
Resend (if configured): to deliver login emails.

We do not sell your personal information.

4. Cookies

We use a single, signed, HTTP-only session cookie to keep you logged in. We do not use third-party advertising or tracking cookies.

5. Data Retention

We retain your account and scan history for as long as your account is active, so you can see visibility trends over time. You may request deletion of your account and associated data at any time (see Contact below).

6. Your Rights

Depending on your location, you may have the right to access, correct, export, or delete your personal data. To exercise these rights, contact us using the details below.

7. Security

Session tokens are signed and stored as HTTP-only, Secure cookies. API keys and billing credentials are kept server-side and are never exposed to the browser.

8. Children's Privacy

The Service is not directed to children under 16, and we do not knowingly collect personal information from them.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We'll update the effective date above when we do.

10. Contact

Questions about this Privacy Policy or your data? Contact us at support@usementioned.com.