Privacy Policy

1. Overview

This Privacy Policy describes how Mentic Inc.(“Mentic,” “we,” “us,” or “our”) collects, uses, shares, and protects personal information when you visit mentic.io or use the Mentic application (collectively, the “Service”).

Mentic is an autonomous advertising agent. If you choose to connect your Meta account (Facebook and/or Instagram), the Service will access certain advertising data through Meta’s authorized APIs in order to deliver the features you enable. This policy explains what that means in practice.

2. Information we collect

a. Account information

• Name, email address, and authentication identifiers (for example, a Google account ID if you sign in with Google).
• Account settings, preferences, and workspace configuration.

b. Meta-connected information (only if you connect Meta)

When you authorize Mentic to access your Meta assets, and based on the permissions and assets you select, we may access:

• Business, ad account, Page, Pixel, and related identifiers.
• Campaign, ad set, and ad metadata and settings, including any targeting you configure.
• Performance metrics such as spend, impressions, clicks, conversions, CPA, and ROAS.
• Connected asset configuration required to run ads (for example, Page or Instagram linkage).

We never see or store your Meta password. Access is granted entirely through Meta’s OAuth authorization flow and can be revoked by you at any time.

c. Usage and technical information

• Activity logs for actions you take in the app, with timestamps.
• IP address, device and browser information, and approximate location derived from IP.

d. Payment information

Payments are processed by Stripe. We receive billing metadata such as subscription plan, invoice records, and payment status. We do not receive or store full payment card numbers.

3. How we use information

We use the information described above to:

• Provide, operate, and improve the Service, including dashboards and any automations you enable.
• Retrieve Meta insights and configuration needed for reporting and recommendations.
• Create, update, pause, or resume campaigns strictly based on your instructions and settings.
• Authenticate users, prevent fraud and abuse, and maintain security and audit logs.
• Communicate with you about your account, billing, support requests, and material changes to the Service.
• Comply with applicable legal obligations.

4. How we share information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share information only in the following limited circumstances:

• Service providers. Vendors that help us run the Service, including hosting, database, monitoring, analytics, customer support, and email infrastructure providers, processing data on our behalf under contract.
• Payment processor. Stripe processes payments and related billing data.
• At your direction. When you explicitly request it — for example, exporting a report or connecting a third-party tool.
• Legal and safety. When required by law, valid legal process, or to protect the rights, property, or safety of Mentic, our users, or others.
• Business transfers. In connection with a merger, acquisition, financing, or sale of assets, subject to standard confidentiality protections.

5. Meta Platform data

When you connect your Meta account, we handle Meta-derived information in accordance with Meta’s Platform Terms and Developer Policies. Specifically, we:

• Use Meta data only to provide the Mentic features you have enabled.
• Do not sell or license Meta data to any third party.
• Apply least-privilege access controls and maintain security logs of API actions.
• Delete or anonymize Meta data when you disconnect Meta, delete your account, or upon valid request, unless retention is required by law.

6. Data deletion (Meta requirement)

If you connected Meta and would like the associated data deleted:

1. Email maksymilian@mentic.io with the subject line “Meta Data Deletion Request.”
2. Include the email address associated with your Mentic account.
3. We will delete or anonymize the Meta-connected data tied to your account, unless retention is required by law.

You can also disconnect Meta inside Mentic, or revoke Mentic’s permissions directly from your Meta account settings. Once revoked, Mentic can no longer access your Meta data through the API.

7. Cookies and similar technologies

We use cookies and local storage for essential functionality such as keeping you signed in, remembering preferences, and securing the Service. We may also use limited analytics to understand how the Service is used and to improve it. You can control cookies through your browser settings; disabling essential cookies may affect how the Service works.

8. Data security

We use reasonable administrative, technical, and physical safeguards designed to protect your information, including:

• Encryption in transit (TLS) and encryption at rest where applicable.
• Encrypted storage of tokens, credentials, and secrets.
• Role-based access controls, audit logging, monitoring, and an incident response process.

No system is perfectly secure. You are responsible for keeping your account credentials confidential and notifying us immediately of any suspected unauthorized access.

9. Data retention

We keep personal information only for as long as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we delete or anonymize it. Backups and security logs may persist for a limited period under our standard rotation schedule before being overwritten or purged.

10. Your choices and rights

You have meaningful control over your information:

• Access and update. You can review and update most of your account information from your Mentic settings.
• Disconnect Meta. You can disconnect your Meta account in Mentic at any time, or revoke permissions in Meta’s settings.
• Delete your account. Contact us at maksymilian@mentic.io to request deletion. We will delete or anonymize your personal information, subject to legal retention requirements.
• Marketing emails. You can opt out of non-essential marketing emails using the unsubscribe link in any such email. We will still send transactional messages necessary to operate your account.

For California residents

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), gives you the right to:

• Know what personal information we collect about you and how we use and share it.
• Request a copy of the personal information we hold about you.
• Request correction of inaccurate personal information.
• Request deletion of your personal information.
• Opt out of the “sale” or “sharing” of personal information. Mentic does not sell or share personal information for cross-context behavioral advertising.
• Limit the use of sensitive personal information. We do not use sensitive personal information for purposes that require this right.
• Be free from unlawful discrimination for exercising any of these rights.

To exercise any of these rights, email maksymilian@mentic.io. We may need to verify your identity before fulfilling your request. You may also use an authorized agent to submit a request on your behalf, subject to verification.

11. Children’s privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

12. International users

Mentic is based in the United States. If you access the Service from outside the U.S., you understand that your information will be transferred to, stored, and processed in the United States and in any other country where our service providers operate. By using the Service, you consent to this transfer.

13. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the “Effective date” at the top of this page. If the changes are material, we will provide additional notice, for example by in-app message or email.

14. Contact us

If you have questions about this Privacy Policy or our privacy practices, please contact us:

Email maksymilian@mentic.io

Mail Mentic Inc., 251 Little Falls Drive, Wilmington, New Castle County, Delaware 19808, USA