Sub-processors

Mentioned is operated by Pickleland LLC. These are the service providers we use to run Mentioned that process personal data on our behalf, including data we process for business customers under our Data Processing Agreement. Each is bound by a written agreement with data-protection terms at least as protective as that agreement, and transfers of personal data from the EEA, the UK or Switzerland to them rely on the European Commission's Standard Contractual Clauses or an equivalent safeguard.

Current sub-processors

Cloudflare, Inc.

• Purpose: hosting and compute (Workers), the database (D1), rate limiting, the bot check on checks, the contact form and the free tools (Turnstile), and cookieless page-view counts (Web Analytics).
• Data: all customer data stored in Mentioned, and the requests made to it.
• Location: United States (stored data, Western North America). Requests are handled at the Cloudflare data center nearest the user.
• Privacy: cloudflare.com/privacypolicy

Anthropic, PBC

• Purpose: answering checks and tracked keywords on Claude with Mentioned's own API key, drafting the buyer questions for a check, and writing the setup brief for a site you add.
• Data: the brand, category and competitors you enter, the questions, and, for the setup brief, text from the public website you point it at.
• Location: United States
• Privacy: anthropic.com/legal/privacy

OpenRouter, Inc.

• Purpose: answering checks and tracked keywords on ChatGPT and Gemini with Mentioned's own OpenRouter account, and on Claude when Mentioned does not reach Anthropic directly. OpenRouter passes each request to the company behind the model: OpenAI for ChatGPT, Google for Gemini, Anthropic for Claude.
• Data: the brand, category and competitors you enter, and the questions.
• Location: United States
• Privacy: openrouter.ai/privacy

Resend, Inc.

• Purpose: sending email: email verification, password resets, workspace invitations, the weekly digest if you turn it on, notices about your account, and delivering contact-form messages to us.
• Data: the recipient's email address and the message, which for the digest includes your tracked keywords and their figures.
• Location: United States
• Privacy: resend.com/legal/privacy-policy

Stripe, Inc.

• Purpose: billing for paid plans.
• Data: email address, billing details and subscription status. Card details go to Stripe directly and never reach Mentioned.
• Location: United States
• Privacy: stripe.com/privacy

Google LLC

• Purpose: Google Analytics on mentioned.at, only where the visitor allows it (see the Privacy policy), and Google Fonts, which serves the site's typefaces.
• Data: for Analytics, the pages visited, the referring page, browser and device type and an approximate location; for Fonts, the visitor's IP address and browser details.
• Location: United States
• Privacy: policies.google.com/privacy

Providers you connect yourself

Some services only see your data because you connected them, and they handle it under your own agreement with them, so they are not our sub-processors:

• AI providers on your own API key: OpenAI, Google (Gemini), Anthropic, DeepSeek, Groq, Perplexity and OpenRouter, when you paste or save your own key for them. A check on your key sends its brand, category and questions to that provider under your account with them.
• Sign in with Google, and the Google Analytics and Search Console connection, which Mentioned reads live to show your figures back to you.
• Bing Webmaster Tools, if you save a key for it.
• The AI agent you connect over MCP, such as Claude or ChatGPT, which receives what it reads from your account.

The Privacy policy says what each one receives.

Changes to this list

We add a new sub-processor to this page at least 10 days before it starts processing customer personal data, and update the date at the top. This page is the notice: we don't send separate announcements. Section 7 of the Data Processing Agreement explains what you can do if you object. Questions: support@mentioned.at.