Privacy policy

Last updated: June 29, 2026

1. Data controller

The data controller is KOMTOP, the company that publishes the mentionLAB service (Lorient Trade Register 909 980 765). For any question about your data, contact contact@mentionlab.ai.

2. Data we collect

We collect the data required to run the service: email address, account information, your site data (URL, business profile), connection data for the third-party services you authorize (Google Search Console, CMS), as well as billing and usage data.

3. Purposes and legal bases

Your data is used to deliver the service (performance of the contract), to handle billing (legal obligation), and to ensure the security and improvement of the platform (legitimate interest). We never resell any data.

4. Processors and hosting

To deliver the service, we rely on technical processors (hosting, payment, artificial intelligence, SEO analysis, email delivery) acting on our instructions and in compliance with the GDPR. Some processing may involve transferring data outside the European Union, framed by appropriate safeguards (standard contractual clauses).

5. Retention period

Your data is kept for the duration of the contractual relationship, then for the applicable legal periods (for example, invoices are kept for 10 years). Beyond that, it is deleted or anonymized.

6. Security

We implement appropriate technical and organizational measures to protect your data against any unauthorized access, alteration or disclosure.

7. Your rights

Under the GDPR, you have the right to access, rectify, erase, port, object to and restrict the processing of your data. You can exercise these rights at contact@mentionlab.ai. You may also lodge a complaint with the relevant supervisory authority (in France, the CNIL).

8. Cookies

mentionLAB uses cookies that are strictly necessary for operation (authentication, session) and, where applicable, anonymized audience measurement cookies.