§ legal
Privacy Policy
last updated October 24, 2026
1. Overview
This policy explains what personal data mockiso ("we", "us") collects when you use our website and studio, why we collect it and the choices you have. We collect as little as we need to run the Service.
2. Data we collect
- Account data: name, email address, password hash, or your Google account identifier if you sign in with Google.
- Project data: project settings and compressed copies (max. 100 KB each) of the screenshots and images you save in projects.
- Billing data: plan, subscription status and payment history. Card details are collected and stored by Dodo Payments, our Merchant of Record — we never see or store full card numbers.
- Usage data: basic logs such as IP address, browser type and pages visited, used for security and to improve the Service.
3. How rendering works
3D rendering and exporting happen entirely in your browser. Exported images are not uploaded to our servers. Only the project files you choose to save are stored in your account.
4. How we use data
- To provide, maintain and secure the Service and your projects.
- To process subscriptions and send transactional emails (account verification, password resets, trial and billing notices).
- To respond to support requests.
- To understand aggregate usage and improve features.
We do not sell your personal data and we do not use your screenshots to train models.
5. Service providers
We share data only with providers that help us run the Service, under contracts that protect it:
- Dodo Payments — payments, taxes and invoicing (Merchant of Record).
- Vercel — hosting and file storage.
- Neon — database hosting.
- Google — optional sign-in.
- Our email delivery provider — transactional email.
6. Cookies
We use a strictly necessary session cookie to keep you signed in and a short-lived cookie to protect Google sign-in. Your editor preferences are stored in your browser's local storage. We do not use advertising cookies.
7. Retention
We keep account and project data while your account is active. When you delete a project or your account, the related files are deleted within 30 days. Billing records are retained as required by law.
8. Your rights
Depending on where you live (including under the CCPA/CPRA and GDPR), you may have the right to access, correct, export or delete your personal data, and to object to certain processing. You can update your profile and delete your account in the app, or email us for any other request. We will not discriminate against you for exercising your rights.
9. Security
Data is encrypted in transit (HTTPS) and passwords are hashed. No method of transmission or storage is 100% secure, but we work hard to protect your data.
10. Children
The Service is not directed to children under 16 and we do not knowingly collect their data.
11. Contact
Privacy questions or requests: support@mockiso.com.