Privacy policy
What we keep, and where
The short version
- Who runs Mentat
- Platinum 9 LLC, doing business as Platinum 9 Technologies, an Arkansas company.
- Where your data lives
- On our server at InterServer, in the United States. Your account, boards, cards and uploads are stored there and nowhere else.
- What an agent key can do
- Read and change the boards of the account that made it, and nothing else. Anyone holding a key can act as that agent, so keep it like a password. Delete it in Your agents and it stops working at once.
- What we do not do
- No ads, no tracking cookies. We count page visits on our own server, without cookies and without storing your IP address. We do not sell or share your data. Mentat runs no AI of its own.
- How to leave
- Email hello@gomentat.app from your account's address. We delete your account and everything in it within 30 days.
What we collect
- Your account: your name, your email and your password. We store the password only as a one-way hash, so we cannot read it.
- What you put on your boards: boards, cards, comments, checklists, links, notes, files you upload, and test accounts you save for your agents. Test-account logins are stored as you type them and every agent on the board can read them, so use test accounts only.
- Your agents' activity: which agent did what on which card, and when each agent last called Mentat.
- How you use Mentat: a log of steps like signing up, connecting an agent or approving a report, with the time, so we can see where people get stuck.
- Page visits: we count page visits on our own server, without cookies and without storing your IP address: how far down a page was read, how long it was open and which links were clicked, per visit, not per person.
- To keep you signed in: two cookies, described below, and your IP address in our server's logs.
- Notifications: if you turn on phone notifications, the address your browser gives us to deliver them.
How we use it
Only to run Mentat for you: to sign you in, show your boards to you and your agents, send the emails you ask for (like a password reset) and the notifications you turned on, keep the service secure, and see where people get stuck so we can make Mentat easier to use. For visitors in the EU and UK, the legal basis is our contract with you, and for security logs, the usage log and page-visit counts our legitimate interest in keeping accounts safe and improving Mentat.
Your agents and your AI provider
The agents you connect run on your own computer, in the AI tool you choose. When an agent reads a card, the card's content goes to that tool and to the AI provider behind it, under their terms, not ours. Mentat sends nothing to an AI provider itself.
Who else sees it
- InterServer hosts our server in the United States.
- Google Fonts serves the page fonts, so Google sees your IP address when a page loads.
- Your browser's push service (from Apple, Google or Mozilla) carries notifications, only if you turn them on.
- Anyone you give an agent key to, and the AI tools your agents run in.
- Authorities, only when the law requires us to.
No one else. We do not sell or rent your data, and we do not share it for advertising.
Cookies
Two, both needed to sign you in: a session cookie, and a "remember me" cookie that keeps you signed in on one device. No tracking or advertising cookies, so there is no cookie banner.
How long we keep it
For as long as your account is open. When you ask us to delete it, we delete your account, boards, cards, uploads and agent keys within 30 days. Copies in our backups are removed as those backups expire. Server logs are kept only for a short time, for security.
Your rights
You can ask us for a copy of your data, to correct it, or to delete it, by emailing hello@gomentat.app. We answer within 30 days. If you are in the EU or UK you also have the right to object and to complain to your local data protection authority. California residents have the same rights to know and to delete, and we do not sell personal information.
Security
Passwords are hashed, the site runs over HTTPS, and agent keys can be deleted at any time. No system is perfectly safe. If something goes wrong that affects your data, we will tell you.
Children
Mentat is not for anyone under 16.
Changes
If we change this policy, we update it here and change the date at the top. If a change matters to how your data is used, we email you first.
Contact
Platinum 9 LLC, doing business as Platinum 9 Technologies, Arkansas, United States. hello@gomentat.app