Privacy Policy
Effective 16 September 2026. The short version: we keep an email address and the domains you track, we never sell personal data, and you can have your account deleted by emailing us.
1. What we collect
Account data. Your email address (used for magic-link sign-in), the time you signed in, and the projects you create: the domain, its name, and settings. We do not store passwords because there are none.
Usage data. Standard server logs (IP address, user agent, the pages and API endpoints requested, timestamps) kept for security and rate limiting. The free Domain Check is rate-limited per IP; those counters are short-lived.
Billing data. None today. If you choose a paid plan in future, Stripe will collect and hold your payment details; we will only see the last four digits, the plan, and the invoice status.
2. What the index contains
The index is built from aggregate public answers that ChatGPT gives to questions we ask it, and the domains and URLs those answers cite. It contains websites, not people. If you enter your own domain, it may already be in the index because a model cited it; that is public information about a website, not personal data about you.
3. How we use it
To sign you in, run your projects, send you the emails you asked for (magic links, project notices, and the end-of-year plan email), keep the Service secure, and understand which features are used. We do not run advertising, we do not build profiles, and we do not sell or rent personal data to anyone.
4. Who else sees it
Mailgun sends our emails and therefore receives your email address and the message content. YepAPI and ScrapingBee are the vendors we use to query models and collect answers; they receive the questions we ask, which never include your personal data. Stripe will handle payments if you choose a paid plan. Our servers are hosted with a European VPS provider. We share data with authorities only when the law requires it.
5. Cookies
We set a session cookie so you stay signed in, and nothing else. There are no third-party analytics or advertising cookies on mentn.ai.
6. How long we keep it
Account data is kept while your account exists. Server logs are rotated within 30 days. The aggregate index, including the saved model answers, is kept indefinitely because it is the historical record the product is built on; it contains no personal data.
7. Your rights and deletion
You can ask for a copy of the personal data we hold about you, ask us to correct it, or ask us to delete your account. Email hello@mentn.ai from the address on the account and we will do it within 30 days. Deleting an account removes your email, sessions, and project settings; the aggregate index is not affected.
8. Security
Traffic is encrypted in transit, sign-in is by single-use magic link, and the internal services talk to each other over a shared secret. No system is perfect; if we learn of a breach affecting your data we will tell you promptly.
9. Changes and contact
We will post changes here and, for material changes, email account holders. This policy sits alongside our Terms of Service. Questions: hello@mentn.ai.