Privacy Policy

• Controller: Maverix Advertising Kft.
• Registered office: 8831 Nagykanizsa, Teleki Blanka utca 1. A. ép.
• Tax number: 25709397-2-20
• Company registration number: 20 09 075201
• E-mail: hello@mentio.hu

This policy describes the processing of personal data in connection with the Mentio service operated by the Controller, in accordance with Regulation (EU) 2016/679 (GDPR) and the applicable Hungarian legislation.

• Account and contact data: the contact person’s name and e-mail address.
• Billing data: company name, tax number, billing address.
• Data provided for using the service: the hotel’s name, city, website, competitors, settings.
• Lead data: the e-mail, hotel, city and website provided by those requesting the free preview.
• Technical data: IP address, browser identifier, log data, cookies (login, security verification).

• Provision of the service, performance of a contract (Article 6(1)(b) GDPR): creating the account, running measurements, displaying results.
• Invoicing, legal obligation (Article 6(1)(c) GDPR): issuing invoices, retention for accounting purposes.
• Legitimate interest (Article 6(1)(f) GDPR): security of the service, prevention of abuse (e.g. captcha), contacting leads, service development.
• Consent (Article 6(1)(a) GDPR): for newsletters or marketing contact, where applicable. Consent may be withdrawn at any time.

The Controller uses the following processors to provide the service. Some providers may also process data outside the EU (e.g. in the USA), subject to appropriate safeguards (e.g. EU standard contractual clauses, data privacy framework):

• Vercel Inc. — application hosting.
• Supabase — database and authentication.
• Google (Google Workspace) — e-mail communication.
• Cloudflare — bot protection (Turnstile).
• AI providers — for the measurements (OpenAI, Anthropic, Google, Perplexity). Only the hotel’s public data (e.g. its name and city) is included in the queries; no personal data is required for the measurements.
• Invoicing / payment provider — upon the introduction of payments (e.g. invoicing software and, in the case of card payments, the payment provider).

The Controller does not transfer or sell personal data to third parties for marketing purposes.

Mentio’s AI Traffic feature allows the user to voluntarily connect the Google Analytics 4 (GA4) property belonging to the hotel, using their own Google account. The connection is established solely with the user’s explicit consent given via OAuth, and may be terminated at any time.

For the connection, Mentio requests the following Google permission (scope):

• https://www.googleapis.com/auth/analytics.readonly — read-only access to GA4 reporting data (traffic, sessions, conversions). Mentio does not modify or delete this data.

Use: we use the retrieved GA4 data solely to display, in the user’s own report, the traffic arriving from AI assistants, the conversions and the related metrics. We do not use it for any other purpose.

Storage and revocation: we store the access and refresh tokens issued by Google encrypted, and use them solely to retrieve the given user’s GA4 data on their behalf. The connection may be revoked at any time in the Mentio interface (AI Traffic → Disconnect) or in the Google account settings (myaccount.google.com/permissions); upon revocation, we delete the stored tokens.

Limited Use: when handling data received from Google APIs, Mentio fully complies with the requirements of the Google API Services User Data Policy, including the Limited Use requirements. Accordingly, we do not use Google user data for advertising purposes, we do not sell it or share it with third parties, and we do not use it to train AI or machine-learning models. Human access is only possible with the user’s explicit consent, for security reasons, to comply with a legal obligation, or in anonymised/aggregated form for operational purposes.

• Account and usage data: for the duration of the contract and for a reasonable period after its termination (until the account is deleted or following inactivity).
• Billing data: for the retention period required by the accounting legislation (typically 8 years).
• Lead data: until the purpose of the contact is achieved, or until consent is withdrawn or an erasure request is made.
• Logs: for a limited period necessary for security purposes.

The data subject has the right to access the personal data concerning them, to have it rectified or erased, to restrict processing, to data portability and — in the case of processing based on legitimate interest — to object. Consent may be withdrawn at any time (this does not affect the lawfulness of prior processing).

Rights may be exercised, and any data protection question raised, at hello@mentio.hu. The Controller will fulfil requests within the statutory time limit.

We use cookies necessary for the operation of the service (e.g. login session, security/captcha verification). These are essential for operation. We do not place marketing or tracking cookies without the user’s consent.

The Controller applies appropriate technical and organisational measures to protect the data (e.g. encrypted connections, access restrictions, reliable providers). In the event of a personal data breach, it acts in accordance with the law.

The data subject may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (Nemzeti Adatvédelmi és Információszabadság Hatóság, NAIH; 1055 Budapest, Falk Miksa utca 9-11.; www.naih.hu), or may seek a judicial remedy.

The Controller is entitled to amend this policy; the version in force at any time is available at mentio.hu. Data subjects will be informed of material changes by e-mail or via the interface.