Mentic Privacy Policy

Introduction

Mentic Inc. (“Mentic”, “we”, “us”) provides an autonomous advertising platform that connects to your advertising accounts, builds a strategy for your business, and launches and optimizes campaigns on your behalf. This Privacy Policy explains how we handle your data across our web app and related services.

Mentic is built for businesses. It is not intended for personal use or for anyone under 18.

Information We Collect

Account information. Your name, business name, email address, role, and workspace preferences.

Business context. Information you enter about your business, files you upload, publicly available content we gather about your business from the web, and material from your connected advertising accounts, including your existing creatives.

Connected account data. When you connect an advertising, email, or file-storage account, we access the specific assets you authorize through that provider’s official OAuth dialog (for example ad accounts, catalogs, and Pages on Meta, or files you select from Google Drive, OneDrive, or Dropbox). Authorization tokens are stored encrypted.

Chat and generated content. Your conversations with Mentic’s AI assistants, the strategies we generate, and the creatives produced through the platform.

Billing information. Payments are processed by Stripe, which collects the details needed to bill you. We store a Stripe customer identifier; payment details are held by Stripe under its own terms.

Usage information. Device and browser information, feature interactions, IP address, and error and performance logs.

How We Use Your Information

We use your information to:

• Generate advertising strategies and creatives for your business
• Launch, monitor, and optimize campaigns on your connected accounts
• Draft and send lead follow-up emails from accounts you connect
• Operate, secure, and improve the platform
• Communicate with you about your account
• Bill you and meet our tax obligations
• Comply with legal obligations and enforce our Terms

Where the GDPR applies, we process your data to perform our contract with you, to meet legal obligations, and for our legitimate interests in operating, securing, and improving a commercial service. We may use aggregated and anonymized data, including anonymized metrics and chat history, to improve our services.

AI Processing

Mentic uses third-party AI providers to generate strategies, creatives, and chatbot responses. To do this, we send relevant business context, prompts, and creative material to those providers, where it is processed under their respective terms. Content you submit to the platform’s AI features should be material you are comfortable having processed by third-party AI providers.

AI-generated output may be inaccurate or unsuitable, and you are responsible for reviewing it before use. See the AI-Generated Content Disclaimer in our Terms of Service.

Connected Platforms

Meta. We access and use Meta Platform Data (such as ad account, Page, catalog, and performance data) solely to provide the platform to you, in accordance with your authorization and Meta’s Platform Terms and Developer Policies. We delete this data and revoke our access when you disconnect Meta or delete your account.

Google. Mentic’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We request Google sign-in to authenticate you, and (only if you choose to connect them) permission to compose and send email on your behalf for lead follow-up, and read access so you can select files from Google Drive. We use this data only to provide those features. It is never used to serve advertising, sold or transferred to data brokers, used to train generalized AI models, or read by our staff, except with your consent, for security investigations, to comply with law, or where aggregated and anonymized. Mentic does not read your existing email correspondence. You can revoke access at any time in the platform or at myaccount.google.com/permissions.

Microsoft and Dropbox. We access your Outlook mailbox and OneDrive or Dropbox files only as you authorize, to send lead follow-up email and to let you select files to import. We do not read your existing email correspondence.

Third-Party Services

We work with trusted third-party providers for:

• Payment processing
• Cloud hosting, databases, and file storage
• AI model and creative generation
• Web search for business context
• Transactional email delivery

These providers access only the data necessary to perform their functions and are contractually obligated to protect it. A current list naming each provider is available on request at support@mentic.io.

We may also disclose data to comply with law, to protect our rights or our users, or in connection with a merger or acquisition. Mentic does not sell personal data or share it for cross-context behavioral advertising, as those terms are defined under US state privacy laws.

When We Act on Your Behalf

When you use Mentic to contact your own leads, you are the controller of those individuals’ personal data and Mentic acts as your processor, under our Data Processing Agreement. You are responsible for having a lawful basis to contact them. If you were contacted by a business using Mentic and want to exercise your rights, please contact that business directly.

Data Storage and International Transfers

We store data in the United States, in the AWS us-west-1 region, and several of our providers are US-based. If you are in the European Economic Area or Switzerland, this means your data is transferred internationally. Where required, we rely on the European Commission’s standard contractual clauses, which are incorporated into our Data Processing Agreement.

Data Retention

We retain your information for as long as your account is active. When you delete your account, we delete your data from our production systems and revoke our access to your connected accounts; residual copies in encrypted backups are purged within 30 days. We retain billing and tax records for 7 years, and may retain data where required by law or to establish or defend legal claims.

Deleting your account stops all further activity by Mentic on your advertising accounts. You are responsible for pausing any campaigns created through the platform before you delete your account, as set out in our Terms.

Security

We implement appropriate technical and organizational measures to protect your information, including encryption in transit, encryption of connected-account authorization tokens, access controls, multi-factor authentication for administrative access, and separation of our development, staging, and production environments. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Object to or restrict certain processing
• Withdraw consent where processing is based on consent

To exercise these rights, contact us at support@mentic.io. If you are in the EEA or Switzerland, you may also lodge a complaint with your national supervisory authority.

Cookies

We use only first-party cookies that are strictly necessary to sign you in and keep you signed in. We do not use advertising, marketing, or third-party analytics cookies.

Updates to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the “Last updated” date. Your continued use of the service after changes constitutes acceptance.

Contact Us

Questions about this Privacy Policy or how we handle your data: support@mentic.io