Privacy Policy

1. Who We Are

MyMockup.io is an AI-powered mockup generation platform for Etsy sellers, accessible at mymockup.io. For the purposes of data protection law, MyMockup.io is the data controller of personal data collected through the Service.

2. Information We Collect

2.1 Account Information

When you register, we collect your email address and create an account record. We use a third-party authentication provider (Clerk) to manage account creation and sign-in — we do not store your password directly.

2.2 Uploaded Images

When you use the Service, you upload product photos and optionally reference images. These files are stored securely in cloud object storage and are associated with your account. They are used solely to generate mockups through our AI generation pipeline.

2.3 Generated Content

Mockup images generated through your account and AI prompts created or refined during sessions are stored and linked to your account so you can access them for that session. After 10 sessions for each product, the product's stored data is auto-deleted.

2.4 Usage & Session Data

We collect information about how you use the Service, including which features you use, session history, credit usage, and general interaction data. This helps us improve the product and enforce plan limits.

2.5 Billing Information

If you subscribe to a paid plan, payment processing is handled by our billing provider (Lemon Squeezy). We do not store your full credit card number. We receive confirmation of successful payments and your subscription tier.

2.6 Communications

If you contact us by email or chat, we retain those communications to help us respond and improve our support.

2.7 Technical Data

We collect standard server log data, including your IP address, browser type, and pages visited. This is used for security, debugging, and performance monitoring.

3. How We Use Your Information

We use your personal data to:

• Provide and operate the MyMockup.io Service
• Process your uploaded images through our AI generation pipeline to produce mockups
• Manage your subscription and credit balance
• Send transactional emails (account confirmation, billing receipts)
• Respond to your support requests
• Detect and prevent fraud or abuse
• Improve the platform through aggregated usage analysis
• Comply with legal obligations

We do not sell your personal data to third parties. We do not use your uploaded product images or generated mockups to train AI models.

4. Third-Party Services

We use the following third-party services to operate the platform:

• Clerk — user authentication and account management
• Lemon Squeezy — payment processing and subscription billing
• AI Image Generation Providers — our AI generation pipeline uses cloud-based image generation APIs. Your product images may be sent to these providers for the purpose of generating your mockups, subject to those providers' data handling terms. We select providers that do not use submitted images for model training.
• VPS service — the in-app support chatbot. Messages you send to the chat widget are handled by this provider.

Each third-party provider has its own privacy policy governing how they handle data.

5. Data Retention

We retain your account information and associated content (uploaded images, generated mockups, session history) for as long as your account is active. If you delete your account, your data is permanently removed from our systems within 30 days, subject to any retention obligations required by law (e.g. billing records).

Draft sessions with no activity for more than 7 days are automatically cleaned up to remove orphaned images from storage.

6. Cookies

We use a session cookie to keep you logged in to MyMockup.io. This cookie is encrypted and contains only an authentication token — it contains no personally identifiable information. We do not use tracking or advertising cookies.

7. Data Security

We take reasonable technical and organisational measures to protect your data against unauthorised access, including encrypted session cookies, HTTPS for all connections, and access controls on our storage systems. No system is perfectly secure; if you suspect a security issue, please contact [email protected] immediately.

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you
• Rectification — request correction of inaccurate data
• Erasure — request deletion of your account and associated data (available from the Account page)
• Portability — request an export of your data in a machine-readable format
• Objection — object to certain processing activities
• Withdraw consent — where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

9. Children's Privacy

The Service is not directed at children under the age of 13 (or 16 in the EU/EEA). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

10. International Data Transfers

Our servers and third-party providers may be located in the United States or other countries outside your own. By using the Service, you consent to the transfer of your data to these countries. We take steps to ensure that such transfers comply with applicable data protection law.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. If the changes are material, we will notify you by email. Your continued use of the Service after the effective date of any change constitutes acceptance of the updated policy.

12. Contact Us

For any questions or concerns about this Privacy Policy or how we handle your data, please reach us at:

Email: [email protected]