Privacy Policy
This Privacy Policy describes how MentionBell ("we", "us", "our") collects, uses, stores, and shares information when you ("you", "your") use our social listening service (the "Service"). By using the Service, you agree to the terms described below.
1. Who we are
MentionBell is a social listening dashboard that helps brands track public mentions of their accounts on third-party platforms (currently Instagram, with additional channels planned). The Service is operated independently and is not affiliated with, endorsed by, or sponsored by Instagram, Meta Platforms, Inc., or any other platform whose public data we surface.
2. Information we collect
We collect the following categories of information:
- Account information: name, email address, password (hashed), and any organisation/brand details you provide when signing up.
- Connected platform data: when you connect an Instagram Business or Creator account to MentionBell, we receive — via Meta's official Graph API and Webhooks — an access token, the connected account's profile information (username, account ID, linked Facebook Page name and ID), and notifications of new posts, comments, stories and Direct Messages where your account has been tagged or @mentioned.
- Public content of third-party creators: when another Instagram user mentions or tags your brand, we capture the public content of that mention (post or story media, caption, comment text, metrics such as likes / comments / views / impressions) and basic public profile details of the mentioning creator (username, display name, follower count, biography, profile picture — when made available by the platform's public APIs).
- Service usage data: standard server logs (IP address, user agent, request timestamps) collected for security, debugging, and abuse prevention.
3. How we use the information
- To operate and provide the Service to you and your brand.
- To capture, store, and display mentions of your brand on the connected social channels.
- To compute and display engagement metrics over time for those mentions.
- To authenticate you, secure your account, and protect against fraud and abuse.
- To communicate with you about the Service (support, updates, billing).
4. How we store and protect information
- Data is stored in managed PostgreSQL databases hosted with Supabase (which uses Amazon Web Services infrastructure). Media files (re-hosted from temporary Meta CDN URLs) are stored in Supabase Storage.
- All access tokens for connected platforms are encrypted at rest using AES-256-GCM with keys held only by the application.
- Traffic between your browser, our API, and our database is encrypted in transit using TLS.
- Access to production data is restricted to authorised personnel and is audit-logged.
5. Sharing of information
We do not sell your personal data. We share information only with:
- Infrastructure providers who process data on our behalf under written data-processing agreements (currently: Supabase for database / storage / authentication; Vercel and Fly.io for hosting; Meta Platforms, Inc. via the Graph API for the connected Instagram data flow).
- Legal obligations: when required by valid legal process or to protect our rights, users, or the public.
6. Data retention
We retain account information for as long as your MentionBell account is active. Connected-platform data (mentions, comments, story captures, metrics history) is retained for as long as you remain connected to that platform, plus a 30-day grace period after disconnect, after which it is permanently deleted from our systems.
7. Your rights
You have the right to:
- Access the personal data we hold about you.
- Correct inaccurate personal data.
- Disconnect any connected social account at any time from the Integrations page in your MentionBell dashboard. Disconnecting immediately stops further data capture for that account.
- Request deletion of your MentionBell account and all associated data by writing to contact@mentionbell.com. We will action verified deletion requests within 30 days.
- Withdraw consent at any time (where consent is the legal basis).
8. Children's privacy
The Service is not directed to individuals under 16 years of age. We do not knowingly collect personal data from children.
9. International transfers
MentionBell may process and store data in regions outside the user's country of residence. Where required, we rely on Standard Contractual Clauses or equivalent safeguards for such transfers.
10. Changes to this policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the latest revision. Material changes will be communicated via email to registered users.
11. Contact
Questions, data-deletion requests, or other privacy concerns can be sent to contact@mentionbell.com.