Privacy Policy

1. Who we are

Mentrd ("Mentrd," "we," "us") is an AI business mentor for founders. This Privacy Policy explains what we collect, why, and what choices you have about it. We’re the data controller for the personal data we process about you.

2. Data we collect

Account information: your email address, display name, optional avatar, and authentication identifier from your social sign-in provider (if used).

Content you create: chat messages with Mentrd, tasks, notes, calendar events, vision boards, goals, revenue entries, business profile fields you fill out during onboarding, and any documents or images you attach.

Product usage: which features you use, when, and whether actions succeed or fail. We use this to fix bugs and improve the product; we don’t build behavioural profiles for advertising.

Payment metadata: your subscription plan, billing cycle, credit balance, and transaction IDs from Stripe. We never receive, see, or store your card number, CVV, or full bank details. See our PCI Statement for more.

Device + connection data: IP address, browser type, and approximate location (city level) inferred from IP, for security and abuse prevention.

3. How we use it

• To run the product: generate your daily brief, plan tasks, answer questions, render the UI.
• To bill you: process subscription payments via Stripe and apply credit charges.
• To secure your account: detect suspicious sign-ins, rate-limit abuse, enforce plan limits.
• To communicate with you: transactional email (account changes, receipts) and product-update email if you opt in.
• To comply with law: respond to lawful requests from authorities.

4. What we do NOT do

• We do not train AI models on your data. Your messages, notes, and tasks are not used as training data for any model, ours or any vendor’s.
• We do not sell your data. Ever. There is no marketing-data buyer pipeline.
• We do not show ads. Mentrd is subscription-funded.
• We do not track you across the web after you leave the app.

5. Sub-processors

Mentrd uses a small set of vendors to deliver the service. Each has access only to what they need:

• Convex: application database + real-time backend.
• Vercel: web hosting + CDN.
• Stripe: payment processing (PCI DSS Level 1).
• OpenRouter + model providers (Anthropic, OpenAI, Perplexity, xAI): AI inference. Your chat input is sent to whichever model handles the request; providers have contractual commitments not to train on your data.
• Resend: transactional + opt-in marketing email.
• BetterAuth: authentication + session management.
• Kit (ConvertKit): pre-launch waitlist email only.

6. Where your data is stored

Data is stored on infrastructure in the United States. If you access the service from outside the US, you consent to this transfer. EU/UK users are covered by Standard Contractual Clauses with our US sub-processors.

7. How long we keep it

• Active account data: retained while your account is active.
• Deleted accounts: purged within 30 days, except where retention is required by law (e.g. tax records for billed transactions).
• Chat + AI extraction logs: retained for the lifetime of the conversation; deleting a conversation deletes the logs.

8. Your rights

Whether you’re in the EU, UK, California, or elsewhere, you have these rights:

• Access: download everything we have about you (Settings → Legal → Export your data).
• Erasure: delete your account and all associated data (Settings → Account → Delete account).
• Correction: edit your profile and content directly in the app.
• Portability: the export is structured JSON, importable into any compatible tool.
• Object / restrict: email privacy@mentrd.ai for non-self-service requests.

9. Cookies

We use cookies (and localStorage / sessionStorage) only for essential product functionality: authentication, session management, your last-active page, and preference settings. No third-party analytics or advertising cookies.

10. Children

Mentrd is intended for adults building businesses. We do not knowingly collect data from anyone under 16. If you believe a minor has used the service, email privacy@mentrd.ai and we’ll delete their account.

11. Changes to this policy

We’ll update the effective date at the top of this page and announce material changes in-product before they take effect. For non-material updates (typos, structural reorganization), we may update silently.

Questions? privacy@mentrd.ai