Privacy policy

Data controller

Simon Lascaud EI, who operates Mento, 1422 avenue de l’Europe, 34170 Castelnau-le-Lez, France. Contact: support@mentogrow.com.

• Mento is the controller for creators' data (account, subscription, use of the Service) and for visitors of mentogrow.com.
• For the data of a store's buyers and contacts, the creator is the controller. Mento acts as a processor on their behalf (article 28 GDPR): it hosts this data and processes it to run the store, following the creator's instructions. A buyer who wants to exercise their rights should first contact the creator. Mento forwards any request it receives.

Data collected

Creators

• Name, email address and password (stored hashed). When signing in with Google: name and picture of the Google profile.
• Store information and published content (texts, images, files).
• Subscription and billing. Payment is handled by Stripe: Mento never receives the card number.
• ID of the Stripe account connected to collect sales.
• Services the creator chooses to connect: access to Google Calendar to create coaching appointments and their Google Meet links, access to the Discord server to manage members.
• Texts and images submitted to the artificial intelligence tools.
• Exchanges with support.

Visitors of the website and stores

• IP address and technical connection data, in the server logs.
• Technical error reports, when a page malfunctions.
• Number of store and product views, counted per day without identifying the visitor.
• Referral code, if you arrive through a referral link.

Buyers, processed on behalf of the creator

• Name, email address, orders and amounts paid.
• Depending on the product: coaching booking (date, video call link), course progress, Discord username.
• Card payments are handled by Stripe, never by Mento.

Purposes and legal bases

• Providing the Service (account, store, sales, service emails, AI tools, connected services): performance of the contract (article 6.1.b GDPR).
• Billing the subscription and keeping accounts: legal obligation (article 6.1.c).
• Securing the Service, preventing fraud and fixing errors: Mento's legitimate interest in providing a reliable service (article 6.1.f).
• Counting store views and attributing referrals: legitimate interest (article 6.1.f).
• Answering support requests: performance of the contract or legitimate interest.

Providers

Mento relies on the following providers for some processing. They act only on its instructions.

• OVH SAS: hosting of the servers and the database (France).
• Cloudflare: storage of files and images (United States, global network).
• Stripe: payment of subscriptions and sales, identity verification of creators who sell (Ireland, United States). Stripe also acts as a controller for its own obligations, such as fraud prevention.
• Resend: sending emails (United States).
• OpenRouter: routing requests made to the AI tools to the model that runs them (United States).
• Google: Gemini models that generate texts and images, called through OpenRouter (outside the European Union).
• Sentry: technical error tracking (data hosted in the European Union, in Germany).

The services a creator chooses to connect (Sign in with Google, Google Calendar and Google Meet, Discord) process data under their own policies.

Stores load the font chosen by the creator from Google Fonts: your browser then sends your IP address to Google. A creator may also add advertising tracking tools to their store (Meta, TikTok, Google Analytics). The creator is responsible for them, including for collecting your consent.

Transfers outside the European Union

Some providers are based in the United States or may access data from there. These transfers rely on the European Commission's adequacy decision of 10 July 2023 (EU-US Data Privacy Framework) when the provider is certified, and otherwise on the standard contractual clauses adopted by the European Commission.

Retention periods

• Account and store: for the lifetime of the account, then deleted 3 years after it is closed.
• Buyer data: according to the creator's instructions, and at the latest within the same period after their account is closed.
• Accounting records (subscription invoices): 10 years (article L123-22 of the French Commercial Code).
• Server logs: 1 year.
• Error reports: 90 days.
• Support exchanges: 3 years after the last exchange.
• Referral cookie: 60 days.
• Database backups: 14 days, on a rolling basis.

Cookies and local storage

• mentogrow.com sets no advertising or audience measurement cookies.
• The mento_ref cookie stores a referral code for 60 days. It is only set if you arrive through a referral link.
• The app.mentogrow.com application uses session cookies, needed to keep you signed in.
• Stores save in your browser's local storage the date of your last visit to a page, so that only one view per day is counted.

Your rights

You have the right to access, rectify, erase, restrict, object to and port your data. You can also give instructions on what happens to your data after your death.

To exercise these rights, email support@mentogrow.com. Mento replies within one month. If there is reasonable doubt about your identity, Mento may ask for proof.

Complaint to the CNIL

If you believe your rights are not respected, you can lodge a complaint with the French data protection authority (Commission nationale de l'informatique et des libertés, CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, or online at cnil.fr.

Security

Connections to the website are encrypted (HTTPS), passwords are stored hashed, access to the servers is restricted and the database is backed up every day.

Changes

The date of the last update is shown at the top of this page. Mento informs creators by email of any significant change. See also the terms of service.