Skip to content
Mentioned First

Legal

Privacy policy

How Mentioned First handles information, in plain language.

Draft — pending legal review

Draft — pending legal review

This is a plain-language draft that hasn't had legal review yet. It isn't a final, binding document. Text in [brackets] still needs confirmation from Mediazealous.

Operator
Mediazealous
Applies to
Mentioned First (mentionedfirst.ai)
Last updated
[Date of publication]

1.Who we are

Mentioned First is a software product built and operated by Mediazealous ([legal entity name], [registered address]). In this policy, “we” and “us” mean Mediazealous.

Questions about privacy can go to [privacy contact email].

2.What this policy covers

This policy covers the Mentioned First website, the free scanner, reports and share pages, and the Mentioned First app. If you use a client portal run by an agency, that agency's own privacy terms apply too [confirm controller and processor roles].

3.Information you give us

  • Account details: your name, email address, company and sign-in details [confirm the authentication provider and what it stores].
  • Business details you enter for a scan: business name, website, category, services, market and any other names you use.
  • Early-access sign-ups and messages you send through our forms or by email: your email address, and any name, company, website, plan interest or message you add. We keep a keyed hash of your network address to limit spam, never the address itself.
  • Billing details: payments are handled by [payment processor]. [Confirm which billing details we keep.]

4.Information collected automatically

  • Basic technical information, such as browser type, pages visited and approximate location from your IP address, used to run and secure the service.
  • Cookies needed to keep you signed in. [List any analytics tools and cookies before launch.]

5.Public business information and AI answers

To run a scan, we look up public information about businesses, for example through [business data provider], and keep it in line with that provider's terms.

We send questions to AI services and keep their answers, sources and measurement details as evidence for reports. Discovery questions don't include your business name. Brand accuracy questions name you on purpose.

We don't need access to your Google Business Profile, and we never change listings or websites. [List the AI providers and data services used, with links to their terms.]

6.How we use information

  • To run scans and show reports
  • To send the reports, alerts and account emails you ask for
  • To answer your messages and provide support
  • To bill for subscriptions
  • To keep the service secure and prevent abuse
  • To improve the product, using [aggregated or de-identified] data where we can
  • [Confirm: we do not sell personal information.]

7.Agency client portals

When an agency invites you to a client portal, the agency decides who can see your workspace, and it sees only the workspaces it manages. We don't send marketing to agency clients.

[Explain how agency clients can make privacy requests.]

8.When information is shared

We share information only as needed to run the service: with service providers for hosting (Vercel), our database (Supabase), the AI engines and data partners a scan asks (DataForSEO, OpenRouter and Perplexity, which see only the scan's questions, never your contact details), and [email delivery] and [payments] once those features open; when the law requires it; or as part of a business transfer [confirm wording].

A report is visible to people outside your account only if you choose to share it, and shared links can be turned off.

9.Marketing emails

Report and account emails are separate from marketing. We send marketing emails only if you opt in, there are no pre-checked boxes, and you can unsubscribe at any time.

10.How long we keep information

We keep account and report data while your account is open and for [retention period] after it closes, unless you ask us to delete it sooner. Billing records are kept for [period required by law or accounting rules].

11.Your choices

You can ask to see, correct, export or delete your information by writing to [privacy contact email]. [Add region-specific rights once the operator's obligations are confirmed.]

12.Security

We use reasonable measures to protect information, such as access controls [confirm specific safeguards]. No system is perfectly secure. If a breach affects you, we'll let you know as the law requires.

13.Children

Mentioned First is a business tool and isn't meant for children under [minimum age]. We don't knowingly collect their information.

14.Changes to this policy

When this policy changes, we'll update this page and the date at the top, and email account holders about significant changes.

15.Contact

Mediazealous, [postal address]. Email: [privacy contact email].

You can also reach us through the contact page.

See also: Terms of service (draft)