Privacy Policy

Last updated: June 2026

This Privacy Policy explains what personal data Menciona collects, how we use and share it, and the rights and choices you have. It applies to menciona.ai and the Menciona service. Menciona is operated by BRESSAN INTERMEDIACOES LTDA, based in Rio de Janeiro, Brazil, which acts as the controller of your personal data. We follow the Brazilian General Data Protection Law (LGPD) and, where it applies, the GDPR.

Information we collect

Depending on how you use the Service, we collect:

  • Account data: your name, email, password, language, and the team members you invite.
  • Brand and site data: the domains you add, public content we crawl from those sites, and the brand summary you confirm.
  • Prompts and results: the prompts you choose to track, the answers we collect from AI tools, and the audit, competitor, source, and score data we generate.
  • Billing data: your plan and transaction history. Payment card details are collected and stored by Stripe, not by us.
  • Usage and device data: log data, IP address, browser type, and how you interact with the Service, including via cookies and similar technologies.
  • Support data: the messages and information you send when you contact us.

How we use your information

We use personal data to:

  • provide, operate, and secure the Service;
  • identify your brand and run your chosen prompts against AI tools;
  • store model answers and audits so your score and trends stay comparable over time;
  • process payments, manage your subscription, and prevent fraud;
  • provide support and respond to your requests;
  • send service, security, and (where permitted) marketing messages; and
  • analyze and improve the Service, including with aggregated, de-identified data.

Legal bases for processing

Where the LGPD or GDPR applies, we rely on: performance of our contract with you (to provide the Service and handle billing); our legitimate interests (to secure, analyze, and improve the Service, and for direct marketing to existing customers); your consent (for optional cookies and certain marketing, which you can withdraw at any time); and compliance with legal obligations.

AI tools and how prompts are processed

To produce your results, the Service submits the prompts you choose to third-party AI tools (such as ChatGPT, Gemini, Google AI Overview, and Google AI Mode) and records their answers. Please choose prompts that do not contain sensitive personal data, since they are sent to those external tools.

Those providers process the prompts under their own terms and privacy policies, which we do not control. We are not affiliated with them.

How we share your information

We do not sell your personal data. We share it only with:

  • service providers (sub-processors) who help us run the Service, under contract and only as needed — for example payment processing (Stripe), cloud hosting and infrastructure (Cloudflare), and email delivery (Resend);
  • the third-party AI tools we query on your behalf, as described above;
  • professional advisers or authorities, where required by law or to protect our rights; and
  • a successor, in the event of a merger, acquisition, or sale of assets.

International data transfers

We and our service providers may process your data in countries other than yours, including the United States and the European Union. Where required, we apply appropriate safeguards for international transfers consistent with the LGPD and GDPR.

Data retention

We keep model answers and audit history so your score and trends stay comparable. Canceling a subscription stops new monitoring, but data already created stays available in your dashboard until you delete it or close your account. We retain account and billing records for as long as needed to provide the Service and meet legal, tax, and accounting obligations, then delete or anonymize them.

Your rights

Subject to applicable law, you can:

  • access your data and request a copy or export;
  • correct inaccurate or incomplete data;
  • delete your data or close your account;
  • restrict or object to certain processing, and withdraw consent;
  • request anonymization or portability; and
  • ask with whom we have shared your data.

Cookies

We use cookies and similar technologies that are necessary to run the Service (for example, to keep you signed in) and, with your consent where required, to measure and improve how the Service is used. You can control non-essential cookies through your browser or any cookie settings we provide.

Security

We use technical and organizational measures to protect your data, including encryption in transit, access controls, and trusted infrastructure providers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Children

The Service is for business and professional use and is not directed to anyone under 18. We do not knowingly collect data from children.

Changes to this policy

We may update this Privacy Policy from time to time. If a change is material, we will give reasonable notice, for example by email or an in-product notice. The "last updated" date above shows the latest version.

Contact

Questions, or want to exercise your privacy rights? Email contact@menciona.ai. To act on a request, we may need to verify your identity.

You also have the right to lodge a complaint with the Brazilian National Data Protection Authority (ANPD), or your local data protection authority.

BRESSAN INTERMEDIACOES LTDA — CNPJ 67.311.693/0001-04, Rio de Janeiro, Brazil.