GDPR Compliance
How we collect, process, and protect personal data while upholding the rights of our customers and their users.
Last updated: April 27, 2025
Data Controller
Mentionary acts as the data controller for information collected directly through our website and marketing channels. For platform usage, customers remain the data controllers and Mentionary operates as the data processor.
Data Collection & Purpose
We collect only the data required to deliver our services: account details, authentication data, product telemetry, billing information, and support communications. Optional analytics cookies are only activated with user consent.
Lawful Basis
Processing is based on contract performance, legitimate interest in improving platform reliability, and consent where required (e.g., marketing communications and non-essential cookies).
Data Subject Rights
Users can exercise access, rectification, deletion, restriction, objection, and portability rights by contacting privacy@mentionary.ai. We respond to requests within statutory timelines and provide clear audit logs on request.
Data Transfers
When data leaves the EEA or UK, we rely on appropriate safeguards such as Standard Contractual Clauses and data processing addenda with our subprocessors.
Security
Data is encrypted in transit and at rest. Access is restricted via SSO and least-privilege policies. Backups follow a defined retention schedule and are tested regularly.
Data Retention
We retain data only as long as necessary to provide the service, comply with legal obligations, and resolve disputes. Customer data is deleted promptly upon contract termination or verified deletion requests.
Incident Response
We maintain an incident response plan with rapid detection, containment, and customer notification steps. Significant incidents are communicated with actionable remediation guidance.
Contact
For privacy questions or data requests, contact privacy@mentionary.ai. If you are unsatisfied with our response, you may lodge a complaint with your local supervisory authority.