Privacy Policy

Operator and contact

Mention.bot is operated by Cihan Tas, Senzkerstraße 6, 13591 Berlin, Germany. Contact: cihan@unfollow.io.

Data we process

We process your account name, email address, hashed password, alert queries, source settings, match results, and notification settings. If you configure an external notification channel, we store the connection details needed to deliver it. We also keep daily AI request counts and provider-reported token totals to apply usage limits. Requests to our service can include an IP address, browser details, and operational log data.

We retrieve public posts and comments from supported sources. This material can include usernames, text, links, and timestamps. We use your queries and source text to calculate relevance and generate notifications. Do not put sensitive personal information in alert queries.

Purposes and legal bases

We process account, matching, and delivery data to provide the service you request. We use operational data for our legitimate interests in securing the service and diagnosing failures. We use optional analytics and advertising only with your consent. Where a legal obligation requires records, we retain the relevant records to meet that obligation.

Service providers

If you use Google sign-in, Google authenticates you and provides your name, email address, and Google account identifier. We store that identifier to recognize your account. We do not store Google access or refresh tokens, or request access to Gmail, Drive, or contacts.

Our hosting and configured email providers process data needed to run the service and deliver messages. Microsoft Azure hosts the OpenAI models that process alert queries and public source text for embeddings and relevance checks. Global model deployments can process data outside the hosting resource region. Firecrawl retrieves public Reddit content for the service when that source is enabled. Sentry receives diagnostic error events; our application removes request, user, extra, and breadcrumb context before sending those events.

If you choose Slack, Discord, or Telegram notifications, the selected service receives the notification content and delivery identifiers. Stripe is the payment provider for paid subscriptions when checkout is available; its checkout explains its payment processing. We do not collect card details in this application.

Some providers process data outside the European Economic Area. Contact us for details about the providers and transfer safeguards relevant to your data.

Analytics and advertising preferences

With analytics consent, Birby measures page categories, successful registrations, checkout starts, and campaign performance. A random visitor identifier is stored in your browser for up to 30 days to connect visits and purchases. A separate session identifier expires after 30 minutes of inactivity. We collect only source, medium, and campaign labels from supported campaign parameters, subject to format limits. We do not send your email, alert text, full URL, or referrer to Birby. With analytics consent, we can pass these random identifiers to Stripe to connect a payment to an earlier visit. Withdrawal stops further collection and clears the local identifiers; it does not automatically delete records already collected. Birby is our analytics service.

You can choose analytics without advertising. If you also accept advertising, configured Google Ads and Meta Pixel scripts can measure visits and registrations and support relevant advertising. We do not load these scripts before advertising consent. The implementation does not enable Google Analytics storage.

You can reject or withdraw through Privacy settings or Do Not Sell or Share My Personal Information. We treat Global Privacy Control and Do Not Track signals as a refusal on all supported browsers, without relying on location detection. A saved preference expires after 180 days. Essential session and security cookies continue to support account access.

We do not sell personal information for money. Advertising disclosures can constitute sharing under applicable privacy laws; the controls above disable our optional advertising use.

Retention

We retain account settings and results while needed to provide your account. You can request deletion using the contact below. The Reddit cleanup task removes expired source material using a configured retention window of 48 hours by default. This source window is not a promise that all account records, messages already delivered to external channels, or provider records disappear after 48 hours.

A daily cleanup task deletes AI usage records dated more than 90 days ago. Your account-linked AI usage records are included in the account export and removed when your account is deleted. Aggregate service usage records do not identify your account.

Other records are retained for the service purpose, security needs, and applicable recordkeeping obligations. Contact us for the retention period that applies to a particular record.

Your rights

Depending on applicable law, you can request access, correction, deletion, restriction, or a copy of your personal data, and object to certain processing. You can withdraw consent without changing the lawfulness of prior processing. Send requests to cihan@unfollow.io. We may need to verify your identity before responding. You can also download an account export and request account deletion from your account settings. Deletion requires your password. An active or pending paid subscription must be resolved before self-service deletion; contact us for help if this prevents your request. Cookie settings do not submit an account deletion or export request.

You can complain to a data protection supervisory authority, including the Berlin Commissioner for Data Protection and Freedom of Information. We do not discriminate against users for exercising applicable privacy rights.

Changes

We publish policy changes on this page with a fixed revision date. We will provide additional notice when required for a material change.