Privacy Policy — How We Handle Your Data

Last updated: July 11, 2026.

This Privacy Policy explains how Mentalium (“Mentalium,” “we,” “us,” or “our”) collects, uses, discloses, and protects information when you visit mentalium.tech (the “Site”) or use our AI automation and messaging-agent services (the “Services”).

Who We Are

Mentalium, based in Amman, Jordan, builds AI automation tools and AI messaging agents (including agents that operate over WhatsApp Business API, Instagram, and Facebook Messenger) for business clients. If you have questions about this policy, contact us at business@mentalium.tech.

Information We Collect

Information you give us directly. When you submit a form on the Site (for example, the contact/qualifier form), we collect the fields you enter, which may include: first and last name, email address, phone number, company name, preferred contact channel, estimated messaging volume, and any notes or details you choose to share.

Information collected automatically. If analytics are enabled on the Site, we (or our analytics providers) may collect standard technical data such as IP address, browser type, device type, referring page, and pages visited, via cookies or similar technologies (for example Google Analytics, Google Tag Manager, or a privacy-focused analytics tool such as Umami).

Information processed on behalf of clients. When a business engages Mentalium to deploy a messaging agent (for example, on their WhatsApp Business, Instagram, or Facebook Messenger account), our systems process messages exchanged between that business and its own customers, strictly to provide the agreed automation service. In that context, the business is the data controller for its customers’ data and Mentalium acts as a service provider/processor. This policy covers our handling of that data as a processor; end customers of our clients should also refer to that business’s own privacy notice.

How We Use Information

We use the information above to:

• Respond to inquiries and provide requested information or quotes
• Set up, operate, and support the automation/messaging agents we build for clients
• Improve, secure, and troubleshoot the Site and our Services
• Send service-related communications (for example, replies to your inquiry)
• Meet legal, security, and fraud-prevention obligations

We do not sell your personal information, and we do not use data collected through client messaging integrations for advertising purposes.

Legal Bases (EEA/UK Visitors)

Where applicable data protection law requires a legal basis, we rely on: your consent (for optional cookies/analytics), performance of a contract or steps taken at your request (for inquiries and service delivery), and our legitimate interests in operating and improving the Site and Services.

How We Share Information

We share information only with:

• Service providers who process data on our behalf, including Resend (transactional email delivery), Cloudflare (hosting and infrastructure), and, where enabled, analytics providers such as Google (Analytics/Tag Manager) or Umami.
• Meta Platforms (WhatsApp, Instagram, Facebook), to the extent required to operate an agent integration that a business client has authorized.
• Legal and safety purposes, if required by law, regulation, legal process, or to protect the rights, property, or safety of Mentalium, our clients, or others.
• A successor, if Mentalium is involved in a merger, acquisition, or sale of assets, subject to this policy or a policy at least as protective.

We do not sell personal information to third parties.

Data Retention

We retain contact-form and lead information for as long as reasonably necessary to respond to your inquiry and maintain business records, and delete or anonymize it when no longer needed. Messages processed through a client’s messaging agent are retained according to the agreement with that client and deleted on request as described in our Data Deletion instructions.

Your Rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal information, or to object to or restrict certain processing. To exercise any of these rights, email business@mentalium.tech. We will respond within a reasonable time and in line with applicable law. See Data Deletion for how to request removal of your data specifically.

California residents (CCPA/CPRA). We do not sell personal information and do not share it for cross-context behavioral advertising. You have the right to know what personal information we hold about you, request its deletion, correct inaccuracies, and not be discriminated against for exercising these rights. Submit requests to business@mentalium.tech.

Data Breach Notification

If we become aware of a security incident that compromises your personal information, we will notify affected individuals and, where legally required, relevant regulators without undue delay and in line with applicable law.

Cookies

The Site may use essential cookies required for basic functionality and, where enabled, optional analytics cookies (see “Information collected automatically” above). You can control cookies through your browser settings; blocking them may affect some Site functionality.

Data Security

We use reasonable technical and organizational measures — including encrypted transport (HTTPS), access controls, and reputable third-party infrastructure (Cloudflare, Resend) — to protect information against unauthorized access, loss, or misuse. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

International Transfers

Our service providers (including Cloudflare, Resend, and Meta) may process data outside your country of residence. Where required, we rely on appropriate safeguards for such transfers.

Children’s Privacy

The Site and Services are intended for business use and are not directed to children. We do not knowingly collect personal information from children.

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Last updated” date above. Continued use of the Site or Services after changes take effect constitutes acceptance of the revised policy.

Contact Us

Questions about this policy or how we handle your data: business@mentalium.tech.