Política de Privacidad

PRIVACY POLICY

Last updated: May 29, 2025

This privacy notice for Menta ("we," "us," or "our") describes how and why we might collect, store, use, and/or share ("process") your information when you use our services ("Services"), such as when you:

• Visit our website at https://mentatv.com
• Engage with us in other related ways, including any sales, marketing, or events

Questions or concerns? Reading this privacy notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at [email protected].

SUMMARY OF KEY POINTS

This summary provides key points from our privacy notice. For more details, please read the full notice.

- Personal information collected: name, surname, email address, viewing behavior (e.g., which videos watched, duration), payment data (stored by Iyzico).
- No sensitive personal data is processed.
- Third-party tools like Google Analytics, Hotjar, and MUX are used for analytics and streaming. Brevo is used for email communication.
- Data is used to improve recommendations, communicate with users, and enhance content.
- Data is stored on Microsoft Azure until the user requests deletion.
- We do not knowingly collect information from children under 18. The platform is designed to be used by caregivers on behalf of individuals with cognitive conditions.
- Data protection rights vary by region and are respected accordingly.

TABLE OF CONTENTS

1. WHAT INFORMATION DO WE COLLECT?

2. HOW DO WE PROCESS YOUR INFORMATION?

3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR PERSONAL INFORMATION?

4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

5. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

6. HOW LONG DO WE KEEP YOUR INFORMATION?

7. HOW DO WE KEEP YOUR INFORMATION SAFE?

8. DO WE COLLECT INFORMATION FROM MINORS?

9. WHAT ARE YOUR PRIVACY RIGHTS?

10. CONTROLS FOR DO-NOT-TRACK FEATURES

11. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

12. DO WE MAKE UPDATES TO THIS NOTICE?

13. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

14. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

1. WHAT INFORMATION DO WE COLLECT?

Personal information you disclose to us

In Short: We collect personal information that you provide to us voluntarily.

We collect personal information when you register on our platform, interact with our Services, or communicate with us. The personal information we collect includes:
- Name and surname
- Email address
- Viewing behavior (e.g., which videos you watched, how long you watched them)
- Payment data (stored and managed entirely by Iyzico)

All personal information you provide must be accurate, complete, and up to date. You are responsible for notifying us of any changes.

Sensitive Information

We do not process sensitive personal information (such as health data, biometric data, etc.).

Payment Data

All payments on Menta are securely processed by Iyzico. We do not store any credit card or bank details on our servers. Please refer to Iyzico's privacy policy for more information.

Information automatically collected

In Short: Some information — such as your IP address and browser/device characteristics — is collected automatically.

This data does not reveal your specific identity but may include:
- IP address
- Browser and device type
- Operating system
- Language preferences
- Referring URLs
- Device name
- Country, location
- Usage activity timestamps

This information is used for system diagnostics, analytics, and platform optimization. It is collected via services like Google Analytics, Hotjar, and MUX. All MUX data is anonymized.

2. HOW DO WE PROCESS YOUR INFORMATION?

In Short: We process your information to provide and improve our Services, personalize user experience, ensure platform security, and communicate with you.

We process your personal data for the following purposes:
- To facilitate account creation, login, and management
- To recommend relevant content based on your watch behavior
- To analyze user engagement and enhance our content library
- To communicate with you via email through Brevo (transactional and marketing emails)
- To detect and prevent fraud and security threats
- To comply with legal obligations
- To process payments via Iyzico (we do not directly access or store your payment details)
- To generate anonymized usage statistics with services like MUX, Google Analytics, and Hotjar

We only process your data when we have a valid legal basis to do so and ensure that it is used only for the purposes outlined above or with your consent.

3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR PERSONAL INFORMATION?

In Short: We only process your personal information when we have a legal reason to do so, such as your consent, compliance with legal obligations, contract performance, or our legitimate interests.

If you are located in the European Economic Area (EEA), the United Kingdom (UK), or are subject to similar regulations, we rely on the following legal bases:
- Consent: We process your data when you give us explicit permission to do so, for example when subscribing to our platform.
- Contractual necessity: When processing is necessary to provide the services you have requested, such as account access and video streaming.
- Legal obligation: When we are required to comply with legal regulations, including data retention and fraud prevention.
- Legitimate interest: When we process your data to improve user experience, analyze service usage (e.g., anonymized streaming analytics), or communicate with you (excluding unsolicited marketing).

If you are located in Turkey, we also comply with the Turkish Personal Data Protection Law No. 6698 (KVKK). Your data may be processed under the legal grounds defined in Articles 5 and 6, and you may exercise your rights under Article 11.

4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

In Short: We do not sell your personal information. We only share your data with third parties when necessary to operate our Services, fulfill legal obligations, or enhance your experience through trusted service providers.

We may share your personal information in the following situations:
- With service providers who perform services on our behalf, such as:
  • Iyzico, for secure payment processing
  • MUX, for video streaming and anonymized usage analytics
  • Google Analytics and Hotjar, for usage statistics and behavioral analytics
  • Brevo (formerly Sendinblue), for email communications
- In the event of a business transfer, merger, acquisition, or asset sale
- When required by law, court order, or other legal process
- To enforce our Terms of Service, policies, or legal agreements
- To protect the rights, property, or safety of Menta, our users, or others

We ensure that all third-party processors comply with applicable data protection laws and only process your data under our instruction and authorization.

5. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

In Short: Yes, we use cookies and similar tracking technologies to enhance user experience and analyze usage.

We use cookies and other tracking technologies such as web beacons and pixels to:
- Maintain platform functionality and security
- Save user preferences and session settings
- Analyze platform usage through services like Google Analytics and Hotjar
- Improve content recommendations based on usage trends

Some third-party services we use may set cookies on your device. These services include:
- Google Analytics: for demographic, device, and behavioral analytics
- Hotjar: for session recordings and interaction heatmaps
- MUX: for anonymous video streaming analytics
- Brevo: for email engagement tracking (e.g., open and click rates)

You can set your browser to refuse cookies or alert you when cookies are being used. However, disabling cookies may affect certain features or functionality of our Services.

To learn more, please refer to our Cookie Policy.

6. HOW LONG DO WE KEEP YOUR INFORMATION?

In Short: We keep your information for as long as necessary to fulfill the purposes outlined in this privacy notice, unless otherwise required by law or unless you request deletion.

We retain your personal data:
- As long as your user account remains active
- Until you request your data to be deleted
- As required by legal, accounting, or regulatory obligations

If there is no ongoing legitimate business need to process your personal data, we will either delete or anonymize it. In some cases, if data is stored in backup archives, it will be securely stored and isolated until deletion becomes possible.

Retention applies to data such as name, email address, watch behavior, and analytics. Payment data is managed and retained independently by Iyzico in accordance with its own policies.

7. HOW DO WE KEEP YOUR INFORMATION SAFE?

In Short: We use a combination of technical and organizational measures to protect your personal information.

We are committed to securing your personal data. Some of the key measures we implement include:
- Storing all user data in secure Microsoft Azure infrastructure
- Encrypting data in transit and at rest
- Restricting access to personal data to authorized personnel only
- Using anonymized analytics where possible (e.g., MUX for video usage)
- Regular monitoring and updating of our systems to address potential vulnerabilities

Despite our efforts, no electronic transmission or storage system can be guaranteed 100% secure. While we strive to protect your data, use of our Services is at your own risk, and you should access them in a secure environment.

8. DO WE COLLECT INFORMATION FROM MINORS?

In Short: We do not knowingly collect data from or market to individuals under 18 years of age.

Menta is designed to be used primarily by caregivers, family members, or professionals on behalf of individuals with cognitive impairments, such as dementia. We do not knowingly collect personal data directly from individuals under 18 years of age.

By using the Services, you represent that you are at least 18 years old or are the parent or legal guardian of a minor dependent who is using the platform under your supervision.

If we learn that personal information has been collected from individuals under 18 without verified parental or guardian consent, we will deactivate the account and delete such data. If you believe we might have any information from or about a child under 18, please contact us at [email protected].

9. WHAT ARE YOUR PRIVACY RIGHTS?

In Short: Depending on your location, you may have certain rights under applicable data protection laws regarding your personal information.

If you are located in the European Economic Area (EEA), United Kingdom (UK), Switzerland, or Turkey, you may have the right to:
- Access your personal information
- Request correction of inaccurate or incomplete data
- Request deletion of your personal data
- Object to or restrict processing of your data in certain situations
- Request data portability
- Withdraw your consent at any time where processing is based on consent
- File a complaint with a data protection authority

In Turkey, these rights are regulated under Article 11 of the Law on the Protection of Personal Data (KVKK No. 6698).

To exercise your rights, you can submit a data subject access request or contact us at [email protected]. We will evaluate and respond to your request in accordance with applicable data protection laws.

10. CONTROLS FOR DO-NOT-TRACK FEATURES

Most web browsers and some mobile operating systems and applications include a Do-Not-Track (DNT) feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected.

Currently, no uniform technology standard for recognizing and implementing DNT signals has been finalized. Therefore, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online.

If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this privacy notice.

11. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

In Short: Yes, if you are a resident of certain U.S. states, you may have additional rights regarding your personal information.

Residents of states like California, Virginia, Colorado, and others may have the right to:
- Know whether we process your personal data
- Access your personal data
- Correct inaccuracies
- Request deletion
- Obtain a copy of data you have provided
- Opt out of targeted advertising, profiling, or sale of data (which we do not engage in)
- Appeal decisions if we deny your privacy request

We do not sell or share your personal information for monetary or commercial purposes.

You or your authorized agent can make a request by contacting us at [email protected]. We will verify your identity before fulfilling any request.

California residents may also request, once a year and free of charge, disclosure of categories and specific data shared for direct marketing purposes, per the California 'Shine the Light' law (Civil Code Section 1798.83).

12. DO WE MAKE UPDATES TO THIS NOTICE?

In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws and to reflect any changes to our practices.

We may update this privacy notice from time to time. The updated version will be indicated by a new 'Last Updated' date at the top of the document. If we make material changes to this notice, we may notify you either by prominently posting a notice or by directly sending you a communication.

We encourage you to review this notice frequently to stay informed about how we protect your information.

13. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have questions or comments about this notice, you may contact us by email or postal mail:

Email: [email protected]

Postal Address:
Menta
Bebek Mahallesi
Küçük Bebek Caddesi No:83
Beşiktaş, İstanbul 34342
Turkey

14. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

You have the right to request access to the personal information we collect about you, to correct any inaccuracies, and to delete your personal data. You may also withdraw your consent for processing where applicable.

To exercise these rights, you may submit a data subject access request or contact us at [email protected].

Upon verifying your identity, we will:
- Provide a copy of your personal data
- Correct any incomplete or inaccurate data upon request
- Delete your data from our active databases unless we are required to retain it for legal purposes

Please note that data stored by third parties (e.g., Iyzico) is subject to their retention policies and may require contacting them directly.

If your account is terminated, we will delete or anonymize all remaining data unless required to retain it by law or for security, fraud prevention, or dispute resolution.