Privacy Policy

1. Who we are

Mentro is operated by Thirteen Lab ("Thirteen Lab", "we", "us" or "our"), which is the data controller responsible for the personal data processed through the Mentro browser extension, website and related services. If you have questions about this Privacy Policy or how we handle your data, contact us at zaurberd.work@gmail.com.

2. Information we collect

• Account information: email address and password when you create an account
• Session data: focus sessions you complete or abandon, including phase (focus or break), duration, start and finish timestamps, and status
• Subscription metadata: Paddle customer ID, subscription ID, status and current period end (received from Paddle; we do not store card numbers)
• Authentication tokens: short-lived access tokens and longer-lived refresh tokens used to keep you signed in
• Extension settings and local state: selected character, theme, language, display mode, focus goal, focus mode, timer state, overlay position and size, and cached tab organizer results stored in Chrome local storage
• Browser tab and page data: when you use focus checking or tab organizing, Mentro may process open tab IDs, titles, URLs, hostnames, URL paths, active page title, H1/H2 headings, meta description and Open Graph title. We do not read form fields, passwords, personal communications or full page body text for these features
• Server log data: IP address, request path, response code and user agent, recorded for security and operational purposes

3. How we use your information

• Authenticate you and keep your timer and session history in sync across devices
• Generate AI-driven character dialogue and synthesized voices during your sessions
• Compare your current browser page and open tabs against your focus goal, suggest useful tab groups, warn about distracting pages, and let you choose which distracting tabs to close
• Store extension preferences and timer state locally so Mentro works consistently across browser tabs
• Process and reflect the status of your subscription via our payments provider
• Communicate important updates about your account or our services
• Respond to support requests you send us
• Detect and prevent fraud, abuse and security incidents

4. AI-powered features

Mentro uses OpenAI's and ElevenLabs' technology to generate short character dialogue, synthesize character voices (text-to-speech), classify whether the active page matches your focus goal, and organize browser tabs around that goal. When these features are used, our server sends only the data needed for the request: the focus goal, selected character, scenario context, and relevant tab or page metadata described above. We do not send your password, payment details, full account history, form fields, personal communications or microphone audio to these AI providers. Both providers state that data submitted via their APIs is not used to train their models by default. Mentro does not record audio from your microphone; AI voice output is one-way playback only.

5. Chrome extension permissions and consent

• tabs, scripting and host permissions are used to read normal http/https tab metadata and active page metadata needed for focus checking and tab organizing
• storage is used to keep authentication state, timer state, extension settings and cached feature results in Chrome local storage
• identity is used only to support Google sign-in through Chrome's authentication flow
• tabGroups and tabs are used to group useful tabs and close distracting tabs only after a user action or confirmation
• sidePanel, contextMenus and alarms are used for the extension interface, shortcuts and timer behavior

AI tab organizing runs when you choose the tab organizer action. Page focus checking runs while the focus timer or focus mode is active. You can stop this processing by turning off focus mode, signing out or uninstalling the extension.

6. Data storage and security

Account, subscription and session-history data is stored in our PostgreSQL database hosted on encrypted servers. Passwords are hashed using bcrypt (cost factor 12) and are never stored in plain text. Access tokens are short-lived (15 minutes) and refresh tokens are hashed before storage and rotated on every use. Extension preferences, timer state, focus goal, display settings and cached tab-organizer results are stored locally in Chrome storage on your device. Browser tab and page metadata sent for AI focus checking is used to produce the requested result and is not stored in your account history. All client-server traffic is encrypted with HTTPS. Synthesized voice audio is cached on our server keyed by the hash of the input text; the cache is shared across users and is not associated with any individual account.

7. Information sharing

• We do not sell your personal data to third parties
• We share the minimum necessary feature data with OpenAI solely for AI dialogue, tab organization, page focus checking and voice synthesis, subject to their API data usage policy
• We share data with ElevenLabs solely for voice synthesis, subject to their API data usage policy
• We share data with Paddle.com (our authorised reseller and Merchant of Record) for subscription billing; Paddle processes this data as an independent controller under its own privacy notice at paddle.com/legal/privacy
• We may disclose data if required by law or to protect our legal rights

8. Chrome Web Store Limited Use

Mentro's use and transfer of information received from Chrome APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements. We use Chrome API data only to provide Mentro's focus timer, page focus checking, tab organizing, extension UI, authentication and related security functions. We do not sell Chrome API data, use it for advertising, or use it to determine creditworthiness, lending eligibility, employment eligibility or similar purposes.

9. Your rights

• Access: request a copy of the personal data we hold about you
• Correction: update or correct inaccurate information in your profile
• Deletion: permanently delete your account and all associated data from Settings → Delete Profile
• Data portability: request your data in a structured, machine-readable format
• Objection: opt out of non-essential data processing at any time
• Restriction: request that we limit how we process your data

To exercise any right that is not available directly in the extension, email zaurberd.work@gmail.com from the address on your account. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

10. Cookies and local storage

Our browser extension and website use local storage for essential functionality such as authentication, theme and language preferences, extension settings, and offline session caching. We do not use third-party cookies, analytics SDKs or tracking pixels.

11. Age rating and children's privacy

Mentro is suitable for general audiences. However, account creation requires users to be at least 13 years old (16 in the European Economic Area). We do not knowingly collect personal information from children below this age. If we discover that we have collected data from such a child, we will delete it promptly. If you are a parent and believe your child has provided us with personal data, please contact us at zaurberd.work@gmail.com.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the extension or via email. Continued use of Mentro after changes constitutes acceptance of the updated policy. We encourage you to review this page periodically.

13. Contact us

If you have any questions about this Privacy Policy or our data practices, please contact us at zaurberd.work@gmail.com.