Privacy policy

• Your account: your email address and, if you sign in with Google, your name and profile picture. Sign-in is handled by Stytch, which keeps these details.
• Your addresses: the addresses you save, each with a label, name, email, phone number and address, kept by Crossmint. Menta keeps which one is your default.
• Your chats with Menta: the messages, photos and voice messages you send in Menta's web chat, your answers to a store's questions, and the notes Menta saves to remember your preferences.
• Your location, if you share it: we turn it into your neighborhood, city and postal code, and don't keep your exact coordinates.
• Your settings: the assistants you connect, your notification devices, and, if you set them up, Grok Bot updates and the key that sends them.

Card details never reach Menta. You enter a card in a secure form run by Crossmint, which keeps it in a vault certified to the PCI DSS standard. Menta only sees a card's brand, last four digits and expiry date. Store passwords and verification codes go through protected fields to the store, never through a chat, your assistant or Menta's logs.

• Your purchases: each checkout's store, what you asked for, its price limit, status, total and receipt, and the payments you approve. Crossmint keeps these as your purchase history.
• Store sign-ins: when you sign in to a store during a checkout, the checkout's browser keeps you signed in there for your next purchases, until you sign out of all stores in Settings.
• Technical data: records of requests to Menta, such as your IP address and browser, kept to run Menta, secure it and fix problems. We use your IP address to pick the stores and currency the homepage shows, and don't store it for that.

We use your information to run Menta: to sign you in, run your checkouts at stores, answer you in the web chat, show your cards, addresses and history, ask for your approval, send the updates you turn on, prevent fraud and abuse, meet our legal obligations, and improve Menta.

We don't sell your information, and we don't use it for advertising.

We share only what each one needs to do its part:

• Crossmint's checkout and card services, which run each checkout at the store with what you asked for, its price limit and your address, keep your cards and addresses, and process the payments you approve.
• The store, which gets what it needs to fulfil your order, such as your name, address, email and phone. The order is in your name.
• Card networks and your card issuer, such as Visa and Mastercard, to verify and process the payments you approve.
• The assistant you connect (such as ChatGPT, Claude or Grok Bot). It gets the results of what it asks Menta to do, such as a checkout's store, items, price and status and the label and city of the address it ships to. Menta's card inside it also gets your name, email and phone to fill in forms, and your saved cards' brand and last four digits. Answers you give in the card, and short notes such as which payment you approved, go into your conversation with it. The assistant's own privacy policy covers what it does with them.
• AI model providers, through Vercel's AI Gateway: Anthropic, to answer you in the web chat and suggest replies; OpenAI, to name your chats from their recent messages; and Microsoft, to transcribe your voice messages. What they get includes your chat, its photos, Menta's notes about you, your checkouts and, when needed, your saved addresses. Web searches in the chat go to Exa, a search provider.
• Service providers that run Menta for us: Stytch for sign-in, Vercel for hosting and for storing your chats, Neon for our database, OpenStreetMap to look up a location you share, and your browser's push service (Google, Apple, Mozilla or Microsoft) for notifications you turn on.
• Checkout updates: when ChatGPT asks to follow a checkout, or you set up Grok Bot updates, we send that checkout's progress to them.
• Authorities, when the law requires it, and a buyer or successor if Crossmint's business is sold or merged.

• Your account, addresses, Menta's notes and your connections stay until you delete them or ask us to delete your account.
• Your chats are stored for a limited time. Deleting a chat removes it from your chats right away, and its stored copy is deleted when that time ends.
• Purchase records are kept as long as the law requires, which can be several years after you close your account.
• Technical records, such as notification deliveries and location lookups, are kept for days or hours.

Your information is encrypted in transit and at rest, and keys we keep for you are sealed. Card details stay in Crossmint's PCI DSS vault. Our logs are designed to leave out what you write, your addresses and your keys, and only people who need access to run Menta have it. No system is perfectly secure, so we can't promise it will never be breached.

In Menta, you can delete chats and Menta's notes about you, change or delete addresses, remove cards, cancel approvals, sign out of all stores, disconnect assistants and turn off notifications, at any time.

Depending on where you live, you may also have the right to access, correct, delete or get a copy of your information, and to object to or limit how we use it. To delete your account or make any of these requests, email agents@crossmint.com. We answer within 30 days, and may keep what the law requires, such as purchase records.

Menta uses cookies to keep you signed in (for up to 7 days), finish a sign-in where you started it, remember your language, and recognize a device you get notifications on. We don't use analytics or advertising cookies. Crossmint's secure card forms may use their own. If you block cookies, you can't sign in.

Menta is for people 18 and older. We don't knowingly collect information from anyone younger, and we delete it if we find out we have.

Crossmint is based in the United States, and your information may be processed there and in other countries where our providers work. When it moves between countries, we protect it as the law requires.

We may update this policy. We'll post the new version here with a new date and, for important changes, tell you in Menta or by email.

Email agents@crossmint.com or tag @crossmint_ai on X. Menta is operated by Crossmint.