Privacy Policy

MentionHero("we", "us", "our") collects and uses personal information to operate the platform, generate AI marketing services, enhance user experience, and fulfil service requests. We comply with applicable privacy laws, including the Australian Privacy Principles and GDPR where relevant.

Data We Collect

• Identity & Contact Information: Name, email address, organisation (when provided).
• Content Inputs: Configuration parameters, prompt inputs, business profile info, email addresses, and other content required to configure Reddit monitoring projects.
• Usage Data: IP address, device/browser details, session logs, activity data, and interaction history within the product.
• Cookies & Tracking Technologies: Used for analytics, authentication, and improving performance. See our Cookie Policy for details.

Purpose of Processing

We use personal data to:

• Provide, operate, and improve the MentionHero lead generation service
• Authenticate and manage user accounts
• Process keyword configuration and AI-reply requests
• Respond to support enquiries
• Personalise content, recommendations, and communication
• Monitor security, detect fraud, and prevent misuse
• Analyse usage to enhance product performance

Legal Basis (GDPR – where applicable)

For users in the EU/UK/EEA, our processing is based on:

• Consent: analytics, marketing, optional cookies
• Performance of a Contract: providing project configurations and account services
• Legitimate Interests: service improvement, security, troubleshooting—balanced with user rights

Sharing & Disclosure

We do not sell personal data.

We may share data with:

• Service Providers: database hosting (Supabase), cloud hosting, analytics, billing integrations (Stripe), email dispatchers (Resend) — strictly under contractual obligations
• Legal Authorities: where required by law
• Business Transfers: if MentionHero undergoes a merger, acquisition, or similar event (with prior notice where required)

Data Retention

We retain personal data only as long as necessary to:

• Provide services
• Meet legal obligations
• Resolve disputes
• Maintain secure backups

Users may request deletion at any time.

Your Rights

Depending on your jurisdiction, you may:

• Access, correct, or delete your information
• Restrict or object to certain processing
• Withdraw consent for optional processing (e.g., marketing)
• Request a portable copy of your data
• Lodge a complaint with a data protection authority (for GDPR regions)

International Transfers

Your data may be stored or processed in countries outside your own.

Where GDPR applies, we use appropriate safeguards such as:

• Standard Contractual Clauses (SCCs)
• Equivalent protective measures

Changes to This Policy

We may update this Privacy Policy occasionally. Material changes will be posted here with an updated date.