Privacy Policy

Privacy Policy

Last updated: 07/09/2026

This Privacy Policy explains how MentionsFlow (“we”, “us”) collects, uses, and protects information when you use our website and platform.

Information we collect

We collect information you provide directly — such as your name, email address, and company details when you sign up or contact us — and information collected automatically, such as usage data and cookies, when you use our site or product.

How we use information

We use collected information to provide and improve our services, communicate with you, process payments, and comply with legal obligations. We do not sell your personal data.

Google Analytics integration (Google user data)

MentionsFlow offers an optional integration that connects to your Google Analytics 4 (GA4) property. If you choose to connect it:

  • What we access. We use Google OAuth 2.0 to request read‑only access to your Google Analytics data via the https://www.googleapis.com/auth/analytics.readonly scope, along with basic Google profile identifiers (openid, email) to identify the connected account.
  • How we use it. We read your GA4 traffic and engagement metrics solely to show you, inside MentionsFlow, which AI assistants and sources (such as ChatGPT, Gemini, Perplexity, and Claude) refer visitors to your website. We do not use this data for advertising, and we never modify your Google Analytics data.
  • Storage & sharing. Google access tokens are held only transiently, and refresh tokens are stored encrypted at rest. We do not sell your Google Analytics data or share it with third parties.
  • Revoking access. You can disconnect the integration at any time within MentionsFlow, which revokes our access, or via your Google Account at https://myaccount.google.com/permissions.

MentionsFlow’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Data shared with AI platforms

When you configure prompts to be tracked, we send only the prompt text you define — via our data provider, DataForSEO — to third‑party AI platforms (such as ChatGPT, Claude, Gemini, and Perplexity) to retrieve their responses. We do not send your internal business data to these platforms beyond what you explicitly configure.

Service providers

We share information with a limited set of vendors who process data on our behalf to operate the service, including:

  • Supabase — database, authentication, and file storage
  • Upstash (Redis) — caching and background job processing
  • Hostinger/Namecheap — application hosting
  • Resend — transactional and report email delivery
  • Lemon Squeezy — subscription billing and payments
  • DataForSEO — AI platform querying and citation data

These providers are bound by contractual obligations to protect your data and use it only to provide services to us.

Cookies

We use essential cookies for authentication and session management, and may use analytics cookies to understand product usage. You can control cookies through your browser settings; disabling essential cookies may affect core functionality.

Data retention & security

We retain data for as long as your account is active or as needed to provide our services, and apply industry‑standard safeguards including multi‑tenant data isolation, encryption of sensitive tokens at rest, and private, signed‑link report storage.

International data transfers

Your information may be processed and stored in countries other than your own. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for international transfers.

Your rights

Depending on your location, you may have rights to access, correct, export, or delete your personal data, or to object to or restrict certain processing. Contact us at hello@mentionsflow.com to make a request.

Children’s privacy

MentionsFlow is not directed to children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us data, contact us and we will delete it.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, where appropriate, notify you. Your continued use of the service after changes take effect constitutes acceptance of the updated policy.

Contact

Questions about this policy can be sent to hello@mentionsflow.com.