Privacy Policy

1. Introduction

Mentis AI ("we", "us", "our") operates the mentisai.ai website and AI-powered due diligence platform. This Privacy Policy explains how we collect, use, store, and protect your information when you use our Service.

2. Information We Collect

Account Information

When you sign in with Google, we receive and store:

• Your name and email address
• Your Google profile picture URL
• Your Google account ID
• OAuth tokens for accessing Google services on your behalf

Documents and Content

When you use the Service, we process and store:

• Files you upload (PDFs, spreadsheets, presentations, and other documents)
• Documents imported from Google Drive or other connected services
• Text extracted from your documents via OCR and parsing
• Vector embeddings generated from your document content
• AI-generated analysis, answers, and memos
• Your questions and interactions with the AI assistant

3. How We Use Your Information

We use your information to:

• Authenticate your identity and maintain your session
• Process and analyze your documents using AI models
• Generate answers to your questions based on uploaded content
• Import files from Google Drive and other connected services on your behalf
• Export AI-generated memos to your Google Drive
• Improve and maintain the Service

4. Third-Party Services

We use the following categories of third-party services to provide our Service:

• Authentication and document storage providers — for authentication and document import/export.
• AI service providers — for document analysis, question answering, and generating search embeddings. Document text is sent to these providers' APIs for processing.
• Third-party integrations — for importing content from connected workspaces, when you choose to connect them.
• Cloud infrastructure providers — for hosting, data storage, and service delivery.

These providers process data under enterprise data processing agreements and do not use your data for model training or any purpose other than providing the service.

5. Google User Data

Mentis AI's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Scopes and Data We Access

• drive.readonly — Used to browse and read file names, folder structures, metadata (size, type, modified date), and file content from your Google Drive when you choose to import documents.
• drive.file — Used solely to export AI-generated memos back to your Google Drive. This scope only allows access to files created by Mentis AI.

How We Use Google Data

We use Google Drive data exclusively to provide the core functionality of the Service: importing documents you select for AI-powered due diligence analysis, and exporting memos you generate. Document text is sent to third-party AI service providers (such as Anthropic and OpenAI) solely to perform analysis on your behalf. These providers process data under enterprise agreements and do not use your data for model training.

Restrictions on Google Data Use

We do not:

• Sell or transfer Google user data to third parties, advertising platforms, data brokers, or information resellers.
• Use Google user data for serving advertisements, retargeting, or personalized/interest-based advertising.
• Use Google user data for determining creditworthiness or for lending purposes.
• Use Google user data to train generalized machine learning or artificial intelligence models. Data is only processed to provide personalized analysis results to you.
• Transfer Google user data to any third party except: (a) as necessary to provide the Service with your consent, (b) for security purposes, (c) to comply with applicable laws, or (d) as part of a merger, acquisition, or asset sale with your explicit prior consent.

Human Access to Google Data

Human access to Google user data is limited to: (a) situations where you have given documented, explicit consent for specific data access; (b) when data has been aggregated and anonymized for internal operations in accordance with applicable privacy laws; (c) when necessary for security investigations or to address abuse, fraud, or technical issues; or (d) to comply with legal or regulatory obligations.

Google Data Retention

Google Drive document content is retained only while the associated data room exists in your account. Deleting a data room permanently removes all imported Google Drive content, extracted text, and generated embeddings. OAuth tokens are stored securely and encrypted at rest, and can be revoked at any time by disconnecting Google Drive from the app or through your Google Account permissions page.

6. Data Storage and Security

Your data is stored on secure cloud infrastructure. We implement reasonable security measures to protect your information, including encrypted connections (HTTPS), secure token storage, and access controls. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Data Retention

We retain your account information and uploaded documents for as long as your account is active. You may delete individual data rooms and their associated documents at any time through the Service. If you wish to delete your entire account and all associated data, please contact us.

8. Managing and Deleting Your Data

You have several ways to manage and delete your data:

• Delete data rooms — You can delete individual data rooms and all associated documents, analysis, and embeddings at any time from your dashboard.
• Disconnect Google Drive — You can disconnect Google Drive from the Drive page in the app, which revokes our access to your Google Drive files.
• Revoke access via Google — You can revoke Mentis AI's access directly from your Google Account permissions page.
• Account deletion — To delete your entire account and all associated data, contact us at support@mentisai.ai. All data will be permanently deleted within 30 days.

For more detailed instructions, visit our Data Management Help page.

9. Your Rights

You have the right to:

• Access the personal information we hold about you
• Request deletion of your data
• Revoke Google Drive access at any time through your Google Account settings
• Disconnect third-party integrations (Google Drive, etc.)
• Export your data upon request

10. Cookies

We use session cookies to maintain your authenticated session. These cookies are essential for the Service to function and are not used for tracking or advertising purposes.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. Your continued use of the Service after changes are posted constitutes acceptance of the revised policy.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at support@mentisai.ai.