Legal
Privacy Policy
Last updated: August 2026
1. Who We Are
MentionX.ai provides AI visibility analysis for companies.
The controller responsible for personal data processed through MentionX is:
2. What We Process
MentionX processes only the information necessary to provide and operate the service.
Company URL
You may submit a publicly accessible company website for analysis. MentionX analyses publicly available information about the company, its products, competitors and market.
Email address
We request your email address to provide access to your MentionX dashboard and send service-related communications.
AI analysis data
MentionX generates prompts and processes responses from AI services such as OpenAI/ChatGPT, Google Gemini and other supported AI providers. These responses are used to generate AI visibility metrics, brand mentions, citations, competitor insights and recommendations.
Technical data
When you use MentionX, limited technical information may be processed automatically, such as your IP address, browser or device information, session information and security or error logs.
We do not ask users to provide sensitive personal information, customer databases, CRM data, financial records or similar business-confidential datasets as part of the standard MentionX analysis.
3. Why We Process Data
We process personal data where necessary to:
- provide the requested MentionX analysis
- create and provide access to your dashboard
- operate and secure the service
- troubleshoot technical issues
- manage subscriptions and payments
- respond to support requests
- comply with applicable legal obligations
Where processing is necessary to provide the requested service, we rely on Art. 6(1)(b) GDPR.
For security, fraud prevention and reliable operation of MentionX, we may rely on our legitimate interests under Art. 6(1)(f) GDPR.
Where processing is required by law, we rely on Art. 6(1)(c) GDPR.
4. AI, Service Providers and Payments
MentionX uses selected third-party providers to operate the service, including providers for hosting, databases, authentication, website analysis, AI processing, email delivery and payments.
To generate MentionX analyses, prompts and relevant publicly available company information may be processed by AI providers such as OpenAI and Google.
Payments and subscriptions are processed by Stripe.
Payment information such as full credit or debit card numbers is provided directly to Stripe and is not stored by MentionX. We may receive limited information required to manage your subscription, such as your name, billing information, subscription status, payment status and transaction identifiers.
Where personal data is processed outside the European Economic Area, applicable safeguards are used where required under the GDPR.
5. Cookies and website analytics
The MentionX marketing website uses essential cookies required to operate the site securely (including remembering your cookie choice). These are necessary under German TTDSG §25 for providing the service you request.
Optional analytics and performance cookies (for example Google Analytics, with IP anonymization where supported) are used only after you give consent via our cookie banner. You can reject non-essential cookies with equal ease, and change or withdraw consent anytime using Cookie settings in the footer or the floating control on the site.
Legal basis for optional analytics: consent (Art. 6(1)(a) GDPR / TTDSG §25). Essential processing relies on necessity to provide the website and, where applicable, legitimate interests for security (Art. 6(1)(f) GDPR).
6. How Long We Keep Data
We retain personal data only for as long as necessary to provide MentionX, maintain your account and dashboard, protect the security of the service and comply with applicable legal obligations.
Account information may be deleted when an account is closed and the information is no longer required.
Billing and transaction information may be retained where required by tax, accounting or other legal obligations.
Technical and security logs are retained only for as long as reasonably necessary for security, troubleshooting and service operation.
7. Your Rights
Under the GDPR, depending on the circumstances, you may have the right to:
- access your personal data
- correct inaccurate personal data
- request deletion of your personal data
- restrict certain processing
- object to certain processing
- receive your personal data where applicable
- withdraw consent where processing is based on consent
To exercise your rights or ask a privacy-related question, contact: dj@mentionx.ai
You also have the right to lodge a complaint with a data protection supervisory authority.
The competent supervisory authority for our Berlin-based operation is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit).
We may update this Privacy Policy if MentionX, our service providers or applicable legal requirements change. The latest version will always be available on this page.