--- title: "Privacy Policy | Mentio" description: "How Mentio collects, uses, and protects your data." canonical: https://mentio.dev/privacy/ markdown: https://mentio.dev/privacy/index.md last-updated: 2026-09-23T16:19:37.703Z --- # Privacy Policy | Mentio > How Mentio collects, uses, and protects your data. Source: https://mentio.dev/privacy/ Legal # Privacy Policy Last updated: September 5, 2026 Mentio ("we", "us") is a social listening service for developer platforms, available at[mentio.dev](https://mentio.dev). This policy explains what data we collect, why we collect it, and the choices you have. Questions or requests: write to[support@mentio.dev](mailto:support@mentio.dev). ## Data you give us - **Account data.** Your name, email address, and a password (stored only as a salted hash) when you sign up, or your Google account identity if you sign in with Google. - **Workspace data.** The keywords you track, your company profile and context, feed and notification settings, and anything else you configure in the product. - **Integration credentials.** If you connect Slack, we store the workspace name, ids, and the bot token Slack issues so we can post notifications to the channel you pick. Disconnecting removes the token and we ask Slack to revoke it. API keys you mint are stored only as hashes and are shown to you once. ## Data we collect automatically - **Usage and billing counters.** Keyword-days and matched mention counts, which determine the daily deductions from your prepaid balance, and the ledger of top-ups and deductions behind it. - **Service logs.** Standard operational logs (timestamps, request metadata, errors) kept for reliability and abuse prevention. - **How you found us.** When you create an account we record where your first visit came from: the referring page, the page you landed on, and, if you arrived from one of our ads, the campaign, the keyword and the ad platform's click identifier. It travels in the page address, not in a cookie, and is stored once with your account. We use it to measure which ads lead to customers, and we may report a signup or a purchase back to the ad platform with that click identifier. No ad pixel runs on our pages. We use **essential cookies only**: a session cookie to keep you signed in. No advertising or cross-site tracking cookies. ## Public content we process The product works by monitoring publicly available posts on platforms such as Bluesky, Hacker News, Reddit, X, GitHub, Stack Overflow, DEV, YouTube, and news sources. For matched posts we store the public text, link, and author handle, and classify them with AI (relevance, sentiment, intent) so you can filter your feed. This is public data, processed to provide the service. If a post is deleted at its source it may persist in our index; authors can request removal at [support@mentio.dev](mailto:support@mentio.dev). ## YouTube API Services Mentio uses YouTube API Services to find public videos whose title or description mentions a keyword you track. We read public data only, with an API key: no YouTube account is connected to Mentio, and we never upload, edit, rate or comment on videos. For a matched video we store the public title, description, channel name, link and publish date, refresh or delete that data within 30 days of retrieving it, and share it only with the delivery channels you configure (your dashboard, Slack, email, Telegram or webhooks). We do not sell YouTube data or use it for advertising. By using YouTube results in Mentio you also agree to the[YouTube Terms of Service](https://www.youtube.com/t/terms), and Google's handling of data is described in the[Google Privacy Policy](https://policies.google.com/privacy). To have a video removed from our index, email [support@mentio.dev](mailto:support@mentio.dev). ## How we use data To provide and improve the service, deliver the notifications you configure, bill usage, secure the platform, and communicate with you about your account. We do not sell personal data and we do not run ads. AI classification runs on Cloudflare Workers AI; we do not use your data or monitored content to train our own models. ## Who we share data with - **Cloudflare**: hosting, storage, and AI inference for the entire service. - **Polar**: our merchant of record. Payments, invoices, and card details are handled by Polar; we never see or store your payment card data. - **Slack**: only if you connect it, to post notifications you configure. - **Google**: only if you choose Google sign-in. ## Retention and deletion Account and workspace data is kept while your account is active and deleted when you ask us to close it. Billing records are kept as long as law requires. Monitored public posts live in a shared index; deleting your account removes your organization's associations with them. Data obtained from YouTube API Services is refreshed or deleted within 30 days of retrieval. ## Your rights If you are in the EU/EEA (GDPR) or a similar jurisdiction, you can request access, correction, deletion, portability, or restriction of your personal data, and object to processing, by emailing [support@mentio.dev](mailto:support@mentio.dev). You can also lodge a complaint with your local supervisory authority. ## Security All traffic is encrypted in transit. Passwords and API keys are stored hashed, integration tokens are scoped to the minimum permissions the feature needs, and access to production data is restricted. ## Changes We will update this policy as the service evolves and change the date above. Material changes will be announced in the product or by email.