How Mentsight handles information.

Mentsight is a business based in the United Kingdom. We are the controller of personal information collected through this website and the Mentsight service. Contact us at hello@mentsight.com.

Information we handle

• Waitlist and account information: email address, authentication identifiers, and information you give us when you contact us.
• Website and report information: submitted website URLs, public pages collected from those sites, business profiles, markets, prompts, AI responses, citations, reports, and the choices you make in the product.
• Billing information: plan, subscription status, billing period, and transaction references. Payment-card details are handled by our billing providers rather than stored by Mentsight.
• Technical information: IP address, browser and device information, security and application logs, and privacy-preserving website analytics.

Please submit only public website content that you are authorised to use. Do not submit credentials, special-category personal information, private customer records, or other confidential material.

Why we use it

We use this information to:

• manage the waitlist, accounts, subscriptions, and customer support;
• crawl an authorised public website and create the profiles, prompts, AI analysis, evidence, and reports requested by the customer;
• secure, operate, troubleshoot, and improve the service;
• measure aggregate website and product usage; and
• meet legal, tax, accounting, and regulatory obligations.

Under UK data-protection law, we rely on performance of our contract where processing is needed to provide a paid service, legitimate interests in operating and improving a secure business service, consent where we specifically ask for it, and legal obligations where applicable. You may object to processing based on legitimate interests.

Providers and international processing

We use service providers only where needed to run Mentsight. Current material providers are:

• Vercel for application hosting, delivery, operational logs, and privacy-focused Web Analytics;
• Neon for managed PostgreSQL database hosting;
• Clerk for authentication, user management, and the subscription interface;
• Stripe, through the billing flow, for payment processing;
• Inngest for durable background-job orchestration;
• Resend for transactional account, reminder, and report outcome email; and
• OpenAI for profile, prompt, report, and recommendation processing.

Gemini from Google and Claude from Anthropic are planned assistant options. They will receive approved prompts and relevant public website context only when those options are enabled for a customer. Provider inputs and outputs may be processed outside the UK. We use the contractual and transfer safeguards made available by those providers where required.

We do not sell personal information or share it for third-party advertising. Providers may keep limited security or abuse-prevention logs under their own business-service terms. AI API data is not intentionally opted into model training.

Retention

We keep account and report information while an account is active so that reports remain available and comparable. If you ask us to delete an account, we delete or anonymise information that is no longer needed, subject to identity verification, active billing, security needs, disputes, and legal or accounting obligations. Data in encrypted backups and provider logs expires under the relevant provider's normal deletion cycle.

Waitlist details are kept while early access is being offered or until you ask us to remove them. Support correspondence and request records are kept only as long as needed to resolve the matter and show that we acted on it. Transaction and tax records may be retained for the period required by UK law.

Your rights

Depending on the circumstances, UK data-protection law may give you rights to access, correct, delete, restrict, or receive a copy of your personal information, and to object to certain uses. Where processing relies on consent, you may withdraw it.

Email hello@mentsight.com with the subject Data request. Tell us whether you want access, correction, or deletion and identify the account or waitlist address involved. We may ask for proportionate proof of identity. We aim to respond within one month, subject to the extensions allowed by law.

If you are unhappy with our response, contact us first so we can investigate. You may also complain to the UK Information Commissioner's Office at ico.org.uk/make-a-complaint.

Changes and related terms

We may update this notice when the service or its providers change. We will publish the revised date here and give additional notice where a material change requires it. Use of the service is also governed by our Terms of Service.