Mockaps Mockaps

Privacy Policy

Last updated: November 1, 2026

1. Information We Collect

We collect information you provide directly to us, such as when you:

  • Create an account or make a purchase
  • Sign in using Google OAuth authentication
  • Contact us for support
  • Subscribe to our newsletter
  • Participate in surveys or promotions

This information may include your name, email address, username, profile picture, billing address, payment information, and any other information you choose to provide.

Pro tool usage

While your Pro access is active, we record basic tool usage to understand and improve the service: the tool used, a fixed action such as a download or completed AI render, file format and time. These records are linked to your account and available only to administrators. They do not include your artwork, prompts, messages, filenames, template identifiers, IP address or browsing history. Records are retained for up to 180 days and removed with your account. Browser reporting respects Do Not Track and Global Privacy Control and introduces no additional tracking cookies. Successful server operations may still be recorded for service analysis.

Saved Mockups

When you choose Save, we store your project name, artwork, editable text, scene settings and a preview image with your account using Cloudflare database and private object storage. Saved projects are accessible through your signed-in account and are not published in the public mockup catalog.

Saved projects are retained while your Pro plan is active and for 30 days after it expires. During those 30 days, you can view previews or delete projects, and renewing restores editing access. At the end of that period, access ends and projects are permanently removed by our hourly cleanup process. Deleting a project or your account also schedules its saved files for removal. Cleanup failures are retried. You can delete a saved project from Saved mockups at any time while it remains in your account.

AI Render

When you choose Generate in AI Render, we send a snapshot of your current mockup view and your prompt to our configured image provider, fal.ai or Replicate, to create an image. Recent results are held in your browser tab unless you download them or choose Save. Saving a mockup stores the selected AI result, its source view and editable scene, and the prompt in your private saved project under the same retention rules. Administrator-published Showroom examples include the selected result, editable scene and reusable prompt publicly.

We retain request identifiers, provider, dimensions, timestamps and credit status to manage your allowance and prevent duplicate charges. We request that fal.ai disable input/output payload history, return inline images without CDN storage, and expire any fallback generated files after one hour. Replicate automatically removes API input parameters, output files and logs after one hour by default. Each provider processes requests under its own privacy terms.

AI Design

When you generate an AI Design, we send your prompt, the selected template's design guide and its product and area names to OpenAI. Your existing canvas artwork is not included. OpenAI processes these requests under its own privacy terms; we disable storage of Responses API application state.

We keep request metadata to manage credits and prevent duplicate charges. Generated SVGs and raster images are temporarily cached to recover interrupted requests, available for 15 minutes, then removed on subsequent access or by our hourly cleanup. We do not store your prompt. Artwork placed in the editor stays in that session unless you choose to save the mockup to your account.

Google OAuth Authentication

When you sign up or log in using Google OAuth, we collect the following information from your Google account:

  • Email address: Your primary Google email address
  • Profile information: Your name and profile picture
  • Google User ID: A unique identifier for your Google account
  • Email verification status: Confirmation that your email has been verified by Google

We use this information to create and manage your account. Your email is automatically verified when signing in with Google. We do not access any other information from your Google account, and we never store your Google password.

Account Linking

If you have an existing account with the same email address and later sign in with Google, we will automatically link your Google account to your existing account. This allows you to sign in using either your password or Google authentication. You maintain full control over your account and can manage your authentication methods.

2. How We Use Your Information

We use the information we collect to:

  • Process transactions and send you related information
  • Send you technical notices and support messages
  • Respond to your comments and questions
  • Improve our services and develop new features
  • Send you marketing communications (with your consent)

3. Third-Party Authentication Services

We use Google OAuth 2.0 for authentication services. When you use Google Sign-In:

  • You are redirected to Google's secure authentication page
  • Google's privacy policy and terms of service apply during the authentication process
  • We receive only the information you authorize Google to share with us
  • We do not have access to your Google password or other Google account data

For more information about how Google handles your data, please review Google's Privacy Policy.

4. Information Sharing

We do not sell, trade, or otherwise transfer your personal information to third parties except:

  • With your explicit consent
  • To service providers who assist us in operating our website (such as Google for authentication)
  • To comply with legal obligations
  • To protect our rights and prevent fraud

5. Payment Information

All payment processing is handled by Stripe, a secure payment processor. We do not store your credit card information on our servers. Stripe's privacy policy applies to payment data.

6. Cookies and Tracking

We use cookies and similar technologies to:

  • Remember your preferences and settings
  • Maintain your login session (including OAuth sessions)
  • Analyze how our website is used
  • Provide personalized content and advertisements
  • Improve our services

Authentication cookies are essential for the functioning of your account, including Google Sign-In. You can control non-essential cookies through your browser settings, but disabling authentication cookies will prevent you from staying logged in.

7. Data Security

We implement appropriate security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. This includes encrypted connections (HTTPS), secure session management, and industry-standard authentication protocols like OAuth 2.0. However, no method of transmission over the internet is 100% secure.

8. Your Rights

You have the right to:

  • Access your personal information
  • Correct inaccurate information
  • Delete your account and data (including disconnecting OAuth providers)
  • Opt out of marketing communications
  • Data portability
  • Disconnect Google authentication from your account (if you have an alternative sign-in method)

9. Children's Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete such information.

10. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. Significant changes will be communicated via email to registered users.

11. Contact Us

If you have any questions about this privacy policy, please contact us at:

Email: hello@mockaps.com
Website: Contact Us