Privacy policy.

Last updated: September 4, 2026.

Who we are and scope

This policy covers mentatnoc.com and its subdomains, operated by MentatNOC, Inc. from the United States. The site is directed at business users, including security integrators and their commercial customers, not at the general consumer public. By using the site or submitting information through it, you agree to the practices described in this policy.

Information we collect

• Form submissions: business details and contact information you provide through inquiry, demo access, or partner application forms, and any business-verification documents you upload with a partner application.
• Demo access data: if a demo requires registration, the contact details you provide and confirmation that your email address was verified.
• Analytics data: we use Google Analytics, delivered through Google Tag Manager, to understand how visitors use the site, including pages viewed, interactions, and approximate location. We also use Microsoft Clarity, which records page interactions such as clicks, scrolling, and mouse movement to produce heatmaps and session replays.
• CRM and tracking data: submitted contact and business details are synced to HubSpot CRM, which sets a tracking cookie that associates your activity on the site with your record.
• Technical data: server logs, device and browser information, IP address, and security telemetry generated by our hosting and network infrastructure, including Cloudflare, which sits in front of the site.

How we use information

We use the information above to respond to inquiries, evaluate partner applications, provide and control demo access, operate, secure, and improve the site, analyze usage, and contact the business contacts who submit forms about MentatNOC products, partnerships, and updates. Submitting a form constitutes your consent to be contacted at the details you provide. Uploaded verification documents are used only to verify the business submitting a partner application. We may also use information to establish, exercise, or defend legal claims and to enforce our terms.

How information is shared

We do not sell personal data. We share information only with: service providers that process it on our behalf (including Microsoft Azure for storage and Microsoft Clarity for analytics, HubSpot for CRM, Google for analytics, and Cloudflare for security and delivery); professional advisers where reasonably needed; authorities where required by law or to protect our rights, users, or the public; and a successor entity in connection with a merger, acquisition, financing, or sale of assets, in which case information may be transferred as part of that transaction.

Cookies

The site uses cookies and similar technologies for analytics and CRM tracking as described above. Your browser offers controls to block or clear cookies. Blocking cookies may limit some site functionality.

Retention

We retain information for as long as reasonably necessary for the purposes described in this policy, to maintain business records, and to meet legal, tax, and audit obligations. Retention periods are determined at our reasonable discretion consistent with those purposes.

Security

We use commercially reasonable technical and organizational measures to protect information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You submit information at your own risk.

Your choices

You may opt out of marketing communications at any time using the instructions in the message or by contacting us. You may contact us to ask what information we hold about you or to request correction or deletion; we will honor requests where applicable law requires and otherwise handle them at our reasonable discretion.

Platform and mobile app

This section covers the MentatNOC platform at access.mentatnoc.com and the MentatNOC mobile app for Android. Platform and app accounts are provisioned by MentatNOC or by your security integrator; there is no self-signup.

• Account data: we store your name, email address, and a hashed password (or your organization's single sign-on identity) with your platform account. The mobile app sends your email address and password over an encrypted connection at sign-in; the app stores only session tokens on your device, in Android's secure keystore, and never your password. Tokens are cleared when you sign out.
• Security telemetry: for security and audit purposes, the platform records the IP address, device and browser information, and time of sign-ins, token refreshes, and API access, and keeps session records that allow administrators to revoke access. These records are part of a tamper-evident audit trail retained with your organization's account.
• No tracking in the app: the mobile app contains no advertising, no third-party analytics, and no crash-reporting SDKs, and requests no device permissions beyond network access.
• Deletion: platform and app accounts are managed business accounts. To request account deletion or data removal, contact your integrator or [email protected]; sessions can be revoked by your administrator at any time.

United States processing

The site is operated from the United States and information is processed and stored there. If you access the site from outside the United States, you consent to the transfer and processing of your information in the United States.

Children

The site is a business site and is not directed at children. We do not knowingly collect information from anyone under 18.

Changes to this policy

We may update this policy at any time by posting the revised version on this page. The date at the top reflects the most recent revision, and revisions are effective upon posting.

Contact

Questions about this policy or requests regarding your information can be sent to [email protected].