MentionBeat is a measurement service that reads the public web, not you. This policy covers what we collect, who else processes it, and how long we keep it — with no tracking cookies and no third-party analytics script anywhere on this site.
Last updated .
MentionBeat is an AI-visibility measurement service: it asks AI assistants questions about your category and reports how they answer. It is operated by Brevence Oy (Business ID 3454899-8, Kivenhakkaajankuja 3 B, 02650 Espoo, Finland), which is the data controller for the information described below. Questions, access requests and deletion requests go to hello@mentionbeat.com.
We count page views to know which pages are worth keeping. That counting is done on our own server while it serves the page — there is no analytics script in your browser, no cookie, and no third-party tag.
For each page view we record the path, the referring site's domain, whether the device is mobile or desktop, and a visitor hash: a salted hash of your IP address and user-agent string that is re-salted every day. The raw IP address is never written to our database, and because the salt rotates daily, the same visitor hashes differently tomorrow. It can count how many people read a page; it cannot follow a person from one day to the next. Raw page-view rows are deleted after 90 days; only aggregate counts are kept longer.
We store two things in your browser's local storage, and neither is used for tracking: your sign-in token, and your light/dark theme choice.
The free checker and AI-access check take a public URL, fetch it the way an answer engine would, and score what they find. The result is stored so it can be shared as a link, and it expires. If you ask us to email you the report or watch a site for changes, we keep the email address you gave for that purpose and nothing else, and every message we send carries a one-click unsubscribe we honour permanently.
We also keep a record of what was asked: the search or URL you typed, the domain you were checking, which tool it was and whether it ran. We use it to see which questions people bring us — so we know what to write about and what to build — and, where the domain is a company we could help, to decide who to contact. This is a company-level record: we do not store your IP address, a visitor identifier or your browser alongside it, so it says a business looked something up, not who you are.
The lawful basis is our legitimate interest in understanding demand for a business product, balanced against the fact that no individual is identified. We keep these records for 18 months and then delete them. You can ask us to remove entries for your domain, or object to the whole thing, at hello@mentionbeat.com — and we do not share any of it with advertising networks or use it to build ad audiences.
Measuring visibility means asking real assistants real questions. The prompts we send are about brands, products and categories — the questions your buyers ask. We also send the text of pages fetched from the public web — yours, or a URL you enter — when you run a page audit, build a brand profile or draft content, because those features work by reading the page. We do not send your customer lists or your account details, and we do not use provider APIs to process personal data on your behalf.
| Subprocessor | What for |
|---|---|
| Railway | Hosting, application databases and encrypted backups |
| Stripe | Payments, invoicing and tax. Card data is held by Stripe, not us |
| Resend | Transactional email — sign-in, verification, invitations, reports and alerts |
| Anthropic, OpenAI, Google, Perplexity and other answer engines | The measurement itself: the prompts we ask on your behalf |
| SerpApi | Reading Google AI Overviews and AI Mode — the search terms we run on your behalf, and the ones typed into the free AI Overview checker |
| Sign-in with Google, and web fonts on our marketing pages |
We will update this list before adding anyone to it.
You can ask for a copy of your data, ask us to correct it, ask us to delete it, restrict how we use it, take it elsewhere, or object to it altogether. Email hello@mentionbeat.com and we will answer within 30 days, free of charge.
Our lead supervisory authority is the Finnish Data Protection Ombudsman (Tietosuojavaltuutetun toimisto, tietosuoja.fi). If you think we have got something wrong you can complain to them, or to the authority in your own EU or UK country — you do not have to come to us first.
Data is encrypted in transit. Access is scoped per workspace and enforced on every request; API credentials are held only as hashes and can be revoked by you at any time. We will tell affected customers about a breach that puts their data at risk without waiting to be asked.
If we change this policy in a way that matters, we will email account holders rather than quietly updating the date at the top.
See also our terms of service, and the measurement methodology, which explains what our numbers can and cannot tell you.