This policy explains what personal data Supermention collects, why we collect it, and what you can do about it. We have tried to keep it short and plain.
What we collect
- Account data: your email address and a password (stored only as a salted hash, never in clear).
- Your website and brand: the website address you give us, the public text of that site, and what we derive from it: a description of your business, likely competitors, keywords and the drafted mentions.
- Billing data: handled by our payment provider. We receive a customer reference, the subscription status and its dates. We never see or store your card number.
- Technical data: basic information such as IP address, browser type and request logs, used to run and protect the service.
Why we use it
- To provide the service: analyse your website, find relevant conversations, write and post mentions.
- To manage your account, subscription and payments, and to contact you about the service.
- To keep the service secure and prevent abuse.
- To improve how the service works.
Under European law, our legal bases are the performance of our contract with you, our legitimate interest in running and securing the service, and, where required, your consent.
Who processes your data
We use a few service providers to run Supermention. They process data on our behalf:
- Cloudflare: hosting, database, and the AI models we use. The public text of your website is sent to an AI model hosted by Cloudflare to analyse it and draft mentions.
- Our payment provider: subscriptions and payments.
- Google (YouTube API): we search public videos using keywords related to your business. We do not send your personal data to YouTube.
Some of these providers are located outside the European Economic Area. Where that is the case, they rely on safeguards such as standard contractual clauses. We do not sell your personal data.
Public mentions
The mentions we post are public. They may contain your brand name and relate to your website, and the platforms where they appear have their own privacy rules.
Cookies and similar storage
We use a single session cookie to keep you logged in, and your browser’s local storage to remember your light or dark theme. Both are essential to the service. At the moment, we do not use advertising or analytics cookies. If that changes, we will update this page and ask for your consent where required.
How long we keep it
We keep your account data while your account is active. If you ask us to delete your account, we delete or anonymise your data, except what we must keep by law (for example billing records).
Your rights
You can ask us to access, correct or delete your personal data, to restrict or object to its use, and to receive a copy of it. To do so, write to [EMAIL]. If you are in the European Union, you can also complain to your data protection authority; in France, that is the CNIL.
Security
We use reasonable technical measures to protect your data, such as hashed passwords and encrypted connections. No online service is completely secure, so we cannot guarantee absolute security.
Children
Supermention is for businesses and is not intended for anyone under 18.
Changes
We may update this policy. The date at the top shows the latest version, and we will tell you about important changes.
Contact
Questions about your data: [EMAIL]. See also our Terms of Service.