01Who is responsible for your data
The controller of personal data processed through mentionalert.com is the administrator of the mentionalert.com service. For any question about this policy or your data, write to [email protected]. We answer privacy requests by email and do not need you to use any particular form.
02Data we collect
We collect only what the service needs to work, to bill you and to keep it secure.
- Account data. Your email address, a hashed version of your password (we never store the password itself) and the one-time confirmation code we send to verify your email.
- Demo queries. The brand name or phrase you type into the demo on the homepage, used to show a few recent public mentions.
- Workspace data. Brands (projects), tracked keywords, boolean filters, alert settings, Slack or webhook destinations you configure, reports, teammates you invite and their roles.
- Collected mentions. Public posts and articles that match your keywords, stored in your workspace as described in the section on public mentions below.
- Usage and technical data. IP address, browser and device type, pages visited, actions in the app, error logs and timestamps.
- Billing data. Plan, billing period, invoices and payment status. Card details are entered on and handled by our payment processor; we see only the card brand, the last four digits and the expiry date.
- Messages. What you send to [email protected] and our replies.
03Why we use it and on what legal basis
| Purpose | Data | Legal basis |
|---|---|---|
| Creating and running your account, collecting mentions and sending alerts | account, workspace, collected mentions | performance of the contract |
| Showing demo results | demo query, technical data | our legitimate interest in letting you evaluate the product |
| Billing, invoices and tax records | billing data, account email | performance of the contract and legal obligation |
| Security, fraud prevention and abuse detection | technical and usage data | legitimate interest in protecting the service and its users |
| Service emails such as confirmation codes, alerts, digests and billing notices | account email | performance of the contract |
| Improving the product from aggregated usage | usage data | legitimate interest |
| Answering support requests | messages, account data | performance of the contract or legitimate interest |
We do not sell personal data and do not share it for cross-context behavioral advertising. We do not use your workspace content to build profiles of you for third parties.
04Public mentions we process
MentionAlert finds publicly available posts, articles, comments and videos that mention the keywords our customers track. These items can contain names, usernames or opinions of the people who wrote them. We collect them only from public sources, through official APIs and public feeds and under each platform's terms. We do not access private groups, direct messages or content that requires logging in.
The legal basis is the legitimate interest of our customers in knowing what is publicly said about their brands and of us in providing that service. Each mention keeps a link to its original source, and the content belongs to its author.
If a mention in our index refers to you as a private person and you want it removed, email [email protected] with the link. We remove it from our index and from customer workspaces where it appears. If the original post is deleted at the source, we stop showing new copies of it.
05Who receives data
We share personal data only with service providers that process it on our behalf and under written agreements.
- Hosting and infrastructure provider, which stores the service and its data.
- Payment processor, which handles card payments and fraud checks.
- Email delivery provider, which sends confirmation codes, alerts, digests and receipts.
- Analytics, if used, run without cookies and without identifying you across other sites.
Destinations you connect yourself, such as a Slack workspace or your own webhook URL, receive the alerts you route there. We may also disclose data where the law requires it, for example to answer a valid order from a public authority.
06How long we keep data
- Account and workspace data for as long as your account exists, then deleted within 30 days of account closure, except backups that rotate out within a further 30 days.
- Collected mentions for the mention history of your plan, then removed from your workspace.
- Demo queries and their results for up to 7 days.
- Technical and security logs for up to 90 days.
- Invoices and billing records for the period required by tax and accounting law.
- Support messages for up to 24 months after the conversation ends.
07Transfers outside your country
Our providers may process data in countries other than yours, including outside the European Economic Area. When that happens we rely on appropriate safeguards recognized by the law, such as adequacy decisions or standard contractual clauses, and we choose providers that apply comparable protection.
08Your privacy rights
Depending on where you live, including under the GDPR and US state privacy laws, you can ask us to:
- confirm whether we process your data and give you a copy,
- correct data that is inaccurate,
- delete your data,
- restrict or object to processing based on legitimate interest,
- export the data you gave us in a portable format,
- withdraw consent where processing relies on consent.
Send your request to [email protected] from the email address on your account, or describe how the data relates to you if you have no account. We reply within one month, and we never treat you differently for using these rights. You may also complain to your local data protection authority. You can export your mentions to CSV and delete your workspace yourself in the account at any time.
10How we protect data
Connections to the service are encrypted, passwords are stored only as hashes, access to production data is limited to people who need it, and workspaces are separated from each other. More detail is on our media intelligence platform security page.
11Children
The service is meant for businesses and professionals. It is not directed at children, and we do not knowingly collect data from anyone under 16. If you believe a child has given us data, write to us and we delete it.
12Changes to this policy
When we change this policy we update the date at the top. For significant changes we also tell account holders by email before the change takes effect.
13Privacy questions
Write to [email protected] with any question about this policy. You can also read our terms of service and our refund policy.