Privacy

Mentioned Ltd, registered in England, London, is the data controller for everything described here unless it says otherwise. Contact us at privacy@mentioned.ai.

1. If you are a customer

What we hold

• your name and email address, and your company's name and domain
• what your product is, taken from your own website and confirmed by you
• the articles we found, what we decided about them, and what we drafted
• which mailbox you connected, and what has been sent through it
• billing details, held by Stripe rather than by us

Why

To provide the service you are paying for. The lawful basis is performance of a contract. Billing records are kept because we have to keep them.

Your connected mailbox

If you connect Gmail, we hold an OAuth token that lets us send as you. We use it to send the pitches you have approved the sending of, and for nothing else. We do not read your inbox. You can disconnect it at any time from your settings, and revoking access at Google works too.

2. If you are a journalist we hold contact details for

This is the part most people arrive here for, and it has its own page with the detail, the lawful basis, and a form: if we hold your details.

Briefly: we hold work contact details gathered from published bylines, author pages and structured data, so that our customers can write to you about articles you have published in their category. Our basis is legitimate interests. If you object, we stop, permanently, on the first request, and we do not ask why.

3. Everyone else

If you request a free audit, we hold the domain you gave us and the email we sent the results to. If you never come back, we stop refreshing the audit after a period of inactivity, and the results stay where they are.

Who we share data with

Who	What for	Where
Anthropic	Reading pages and drafting pitches	US
Snov.io	Finding a contact address when free sources fail	US
Resend	Sending our own mail to you	US
Stripe	Payments	US and Ireland
Google	Sending your pitches, through your own mailbox	US

Transfers outside the UK rely on the UK International Data Transfer Addendum or an adequacy decision. We do not sell personal data to anybody, and we do not share our contact corpus with anyone outside Mentioned.

How long we keep things

• Customer accounts: while you are a customer, then six years for billing records.
• Contact records: until they stop being accurate or the person asks us to remove them.
• Suppression list: permanently. It is the only thing that makes "never again" mean never.
• Sent pitches: kept, because they are the record of what was said to whom.

Your rights

Access, correction, erasure, restriction, portability, and objection. For direct marketing the right to object is absolute: we stop, and no balancing test applies.

Customers can email us. Journalists should use the form, which verifies the mailbox first so that nobody can act on somebody else's address.

You may complain to the Information Commissioner's Office at ico.org.uk at any time, whether or not you have raised it with us.

Cookies

A session cookie when you sign in, and a preference for light or dark mode stored in your browser. No advertising cookies and no third-party trackers, which is why there is no cookie banner.