Privacy Policy

The controller of Personal Data processed in connection with the Service is:

We have not appointed a Data Protection Officer, as applicable law does not require one given the nature and scale of our processing. Please send all privacy requests to the address above.

For purposes of this Policy, “Personal Data” means information that identifies, relates to, or can reasonably be linked to an identifiable individual. “Customer Content” means information that you or your organization submits, configures, uploads, connects, or generates through the Service, including project settings, prompts, URLs, brand and competitor information, reports, and related materials.

AgentMention generally acts as a data controller for account administration, website operations, billing, product analytics, marketing, and support. Where we process Personal Data contained in Customer Content solely on behalf of a business customer, we may act as a processor or service provider, depending on the applicable law and the circumstances.

3.1 Information you provide directly

Depending on how you use the Service, you may provide us with:

• Account and profile information, such as your name, work email address, company or organization, role, and authentication information.

• Project and workspace information, such as brand names, domains, markets, competitors, tracked topics and prompts, URLs, content, and other configuration data.

• Communications and support information, including the content of emails, support requests, meeting notes, feedback, and other messages you send to us.

• Demo, waitlist, newsletter, or free-report information, such as your email address, website URL, name, company details, and the information you provide when requesting a report or meeting.

• Billing and transaction information, such as billing contact details, plan, invoice information, transaction amount, currency, and payment status. Full payment card details, where applicable, are processed by our payment provider rather than stored directly by AgentMention.

3.2 Customer Content and AI visibility data

To provide AI search visibility and analytics, we process Customer Content and data generated through the Service. This may include prompts and queries, AI-generated responses, mentions, citations, source URLs, rankings, sentiment outputs, competitor comparisons, content-gap findings, audit results, and other derived metrics or recommendations.

We may also collect and analyze publicly available information from websites, search results, AI answer engines, and other public sources when necessary to provide the Service. Public information may sometimes contain Personal Data, for example an author name or a public business contact.

3.3 Information from integrations and connected services

If you connect a third-party account, data source, API, website integration, or other service to AgentMention, we receive the information needed to operate that integration in accordance with the permissions you grant. This may include account identifiers, authorization tokens, analytics data, search performance data, website or crawler request metadata, and other information made available by the connected service.

3.4 Information collected automatically

When you visit or use the Service, we and our service providers may automatically collect technical and usage information, including:

• IP address and approximate location derived from IP;

• browser type and version, User-Agent string, device type, operating system, language, and similar technical information;

• pages or screens viewed, features used, clicks, navigation paths, session timing, and referring URLs;

• login events, diagnostic data, error logs, performance data, and security signals;

• cookie identifiers and similar online identifiers, subject to your choices and applicable consent requirements.

3.5 Infrastructure-level visit logging

Separately from web analytics, we maintain server-side logs of website visits. For each request we record the IP address, User-Agent string, requested path, timestamp, and referrer. These logs are forwarded to our data ingest service and are used for security, abuse detection, load measurement, and to analyze how the website is visited by automated agents, bots, and crawlers operated by AI systems and search engines — which forms part of our core business subject matter.

This logging takes place independently of cookies and does not require your consent: the legal basis is our legitimate interests (Article 6(1)(f) GDPR) in securing and operating the Service. We do not use these logs to serve you advertising and do not combine them with marketing profiles.

We use Personal Data for the following purposes:

• Provide, operate, maintain, and deliver the Service, including AI visibility tracking, analytics, reports, recommendations, and integrations.

• Create and administer accounts, workspaces, user roles, authentication, subscriptions, and billing.

• Generate requested reports, including free AI visibility reports, and respond to demo requests or other inquiries.

• Process prompts and related Customer Content through AI systems, search services, data providers, and other tools required to produce the requested analysis.

• Communicate with you about the Service, including account, security, billing, operational, legal, and product notices.

• Provide customer support, troubleshoot issues, and respond to feedback.

• Understand how the Service is used, measure product performance, improve features and user experience, and develop new functionality.

• Protect the Service, our users, and our business, including fraud prevention, abuse detection, security monitoring, and enforcement of the terms on which the Service is provided.

• Send newsletters, product updates, guides, offers, and other marketing communications to people who have contacted us or who use the Service. You can opt out at any time.

• Comply with legal obligations, resolve disputes, enforce agreements, and establish, exercise, or defend legal claims.

• Create aggregated or de-identified statistics, benchmarks, and product insights that do not reasonably identify an individual.

Where the GDPR, UK GDPR, or similar laws require a legal basis, we rely on one or more of the following:

• Contract: processing necessary to enter into or perform our agreement with you, including providing the Service, account access, support, and billing.

• Legitimate interests: operating, securing, supporting, analyzing, and improving the Service; maintaining server logs and ensuring security; managing customer and business relationships; preventing fraud and misuse; and direct B2B marketing to customers and to people who have contacted us through forms on our website, where those interests are not overridden by your rights.

• Consent: for optional cookies and analytics, and for other processing where consent is required by law. You may withdraw consent at any time.

• Legal obligation: processing needed to comply with tax, accounting, law-enforcement, regulatory, or other legal requirements.

• Vital interests or public-interest grounds, where applicable in exceptional circumstances permitted by law.

For individuals whose data is processed under Ukrainian law, processing is carried out in accordance with the Law of Ukraine “On Personal Data Protection” — in particular on the basis of the data subject’s consent, the conclusion and performance of a transaction, and the legitimate interest of the data owner.

AgentMention is an AI search analytics service. To provide the Service, we may send prompts, queries, URLs, brand or competitor identifiers, and other relevant Customer Content to third-party AI model providers, search services, APIs, or data providers. We may receive and store their outputs, including answers, citations, source links, and related metadata, and analyze those outputs to calculate visibility, sentiment, position, share of voice, citation, source, and other metrics.

Third-party providers may process information in accordance with the agreements we have with them and, where applicable, their own privacy terms. We select providers and configurations with privacy and security in mind, but their services are not controlled by AgentMention.

Please do not include sensitive Personal Data, confidential third-party information, or special-category data in prompts or Customer Content unless it is necessary, you are authorized to do so, and appropriate safeguards are in place.

We use cookies, local storage, pixels, tags, and similar technologies to keep the Service functioning, remember preferences, understand usage, and measure performance.

Essential technologies are used where necessary for authentication, security, session management, load balancing, and core functionality. Disabling essential cookies may prevent parts of the Service from working correctly.

Analytics technologies. Our website and web application use third-party web analytics tools — Google Analytics on both, and Ahrefs Analytics on the website — which set their own identifiers and collect pseudonymous data about page views and on-site behavior. These tools are optional. They load only after you accept analytics cookies in the consent banner shown on your first visit; if you decline or close the banner, they do not load. The banner offers “Accept” and “Decline” as equal choices.

We store your choice in an essential cookie for up to 12 months, after which we ask again. You can change or withdraw your choice at any time through the “Cookie settings” link in the website footer or on your profile page in the application. Withdrawing consent does not affect the lawfulness of processing carried out before it.

You may also email us at anton@agentmention.ai to request that we stop such processing in relation to you.

We do not use cookies to serve personalized advertising and do not disclose cookie data to advertising networks.

We do not sell or share Personal Data. We may disclose Personal Data in the following circumstances:

• Service providers and processors. We use vendors that provide cloud hosting, databases, authentication, email delivery, payment processing, web analytics, error monitoring, customer support, scheduling, AI/LLM access, search/data services, and security tools. They may process Personal Data only as needed to provide services to us, subject to applicable contractual safeguards.

• Messaging services. Data you submit through forms on our website (contact form, free report request, blog subscription) is, in addition to email, sent to us as an internal notification via Telegram (Telegram Messenger Inc.). This covers at least your email address, website URL, and name where you provide one. Only the operator of the Service receives these notifications.

• Your organization and authorized workspace users. If you use a business workspace, administrators and other authorized users may access information associated with that workspace based on assigned roles and permissions.

• Connected third-party services. When you enable an integration, we may share information with that third party as necessary to complete the action you requested.

• Professional advisers. We may share information with lawyers, accountants, auditors, insurers, and similar advisers where reasonably necessary and subject to confidentiality obligations.

• Legal and safety reasons. We may disclose information where required by law, legal process, court order, or valid governmental request, or where reasonably necessary to protect rights, safety, security, users, or the public.

• Business transfers. If the AgentMention business is transferred to another party — including by moving the Service to a legal entity, raising investment, selling rights in the Service or its assets, or a similar transaction — information may be transferred as part of that transaction, subject to applicable law. We will notify you before your Personal Data becomes subject to a different privacy policy.

• With your direction or consent. We may disclose information where you explicitly instruct or authorize us to do so.

• Aggregated or de-identified information. We may share information that does not reasonably identify an individual for analytics, benchmarking, research, or business purposes.

AgentMention is operated from Ukraine and uses service providers that may process data in other countries. As a result, Personal Data may be transferred to, stored in, or accessed from jurisdictions whose data-protection laws differ from those in your country.

Where required, we use appropriate safeguards for international transfers, which may include adequacy decisions, Standard Contractual Clauses, contractual protections, or other lawful transfer mechanisms. You may contact us for more information about safeguards relevant to your Personal Data.

We have not currently appointed a representative in the European Union within the meaning of Article 27 GDPR. We consider that the exemption in Article 27(2) GDPR applies: our processing of EU individuals’ data is occasional, does not include large-scale processing of special categories of data or data relating to criminal convictions, and is unlikely to result in a risk to the rights and freedoms of individuals. We will keep this assessment under review as the Service grows and will update this Policy if a representative is appointed. Until then, EU data subjects should send all requests directly to anton@agentmention.ai.

We retain Personal Data only for as long as reasonably necessary for the purposes described in this Policy. Unless a more specific period is set by contract or law, we apply the following periods:

Prompt texts and AI responses that are not linked to your account and do not identify you may be kept as de-identified shared data of the Service.

These periods may be extended where data is needed to resolve a dispute, comply with a legal requirement, or establish, exercise, or defend legal claims. Where practical, we delete or de-identify data when it is no longer needed for the purposes described above.

We do not make decisions about you based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you within the meaning of Article 22 GDPR.

The Service produces automated scores, metrics, and recommendations — for example visibility, sentiment, or share-of-voice figures. Those outputs relate to brands, domains, and content rather than to the characteristics, behavior, or reliability of individuals, and are not used to make decisions about individual people.

We use reasonable administrative, technical, and organizational measures designed to protect Personal Data against unauthorized access, loss, misuse, alteration, or disclosure. Measures may include access controls, authentication controls, encryption in transit, protected cloud infrastructure, logging and monitoring, backups, and internal restrictions on access to customer data.

No internet transmission or storage system can be guaranteed to be completely secure. You are responsible for keeping your account credentials confidential, limiting workspace access to authorized users, and using secure devices and networks.

If a Personal Data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the competent supervisory authority and, where the law requires, you — within the timeframes set by applicable law.

Depending on where you live and the law that applies, you may have rights regarding your Personal Data, including the right to:

• request access to the Personal Data we hold about you;

• request correction of inaccurate or incomplete Personal Data;

• request deletion or erasure of Personal Data;

• request restriction of certain processing;

• object to processing based on legitimate interests or to direct marketing;

• withdraw consent at any time where processing is based on consent — withdrawal does not affect the lawfulness of processing carried out before it;

• receive certain Personal Data in a structured, commonly used, machine-readable format and request portability where applicable;

• lodge a complaint with a competent data protection authority;

• exercise other rights available under applicable privacy laws.

For data subjects in Ukraine. Your rights are set out in Article 8 of the Law of Ukraine “On Personal Data Protection.” You may lodge a complaint about the processing of your Personal Data with the Ukrainian Parliament Commissioner for Human Rights (ombudsman.gov.ua), the authority that supervises compliance with personal data protection legislation.

For data subjects in the EEA and the UK. You have the right to lodge a complaint with a supervisory authority in the country of your residence, place of work, or the place of the alleged infringement.

For California residents. Applicable law may also provide rights to know, correct, and delete data, to receive information about categories of Personal Data collected or disclosed, and to opt out of the “sale” or “sharing” of data. We do not sell or share Personal Data, so no opt-out mechanism is required. We will not discriminate against you for exercising rights provided by applicable law.

You can delete your account yourself at any time in the application: Settings → Privacy → Delete account. To exercise any other privacy right, contact us at anton@agentmention.ai. We may ask for information reasonably necessary to verify your identity or authority. We will respond within the period required by applicable law — generally within one month of receiving your request. Some rights are subject to exceptions, including where retention is required by law or necessary to establish, exercise, or defend legal claims.

When you create an account or accept a team invitation in the application, request a free report, subscribe to our blog, or contact us through a form on our website, you give us a work email address in a business context. We use it to send you material about AgentMention: product news, guides, case studies, and offers relating to AI visibility.

The legal basis for these communications is our legitimate interest in developing business relationships (Article 6(1)(f) GDPR). We keep that interest within the following limits:

• we send only material related to the services you showed interest in;

• we write to work addresses, not private ones — except for a blog subscription you have confirmed from your inbox;

• we say so on the form itself, before you submit your details;

• every such message carries a one-click unsubscribe link.

You may object to this processing at any time: use the unsubscribe link in any message or write to anton@agentmention.ai. Marketing communications then stop, and we no longer rely on this basis in relation to you.

Even if you opt out of marketing, we may still send non-promotional communications necessary to provide the Service, such as security alerts, account notices, billing messages, or legal updates.

The Service is intended for business and professional users and is not directed to children under 16. We do not knowingly collect Personal Data from children under 16. If you believe a child has provided Personal Data to us, please contact us so that we can take appropriate action.

The Service may contain links to or integrations with third-party websites, platforms, AI systems, or other services. Their privacy practices are governed by their own notices and terms. This Privacy Policy does not apply to third-party services that are not controlled by AgentMention.

We may update this Privacy Policy from time to time to reflect changes in the Service, our data practices, technology, or legal requirements. We will update the “Last updated” date at the top of this document. Where required by law, or where changes are material, we will provide additional notice through the Service, by email, or by another appropriate method.

If you have questions, requests, or concerns about this Privacy Policy or our privacy practices, contact: