Privacy Policy

Vaibhav operates Mockship and is responsible for personal information processed to provide the Mockship service. This policy covers our website, accounts, billing integration and support. For questions or requests about your personal information, contact:

Paddle separately handles purchases as merchant of record. Its handling of transaction information is described in its own privacy notice. Other services you choose to use outside Mockship have their own policies.

The current Mockship editors import and process your screenshots, images, videos and project documents on your device. Projects, media and editor preferences are saved using browser storage, including IndexedDB and local storage. Our billing export endpoint receives an export identifier and studio identifier to count exports; it does not receive the exported image or video.

Signing in does not upload your local project library or create a cloud backup. Current share routes do not publish your projects online. Files you export, share outside Mockship or voluntarily send to support are handled according to those actions. Do not send sensitive project files when a redacted example will explain the issue.

Remove local work through project controls or your browser’s site-data settings. Clearing site data can permanently delete projects and sign you out. We cannot recover local files that are no longer on your device. Clearing browser data does not delete server-side account or billing records or cancel a subscription.

Account and authentication: your email address, account identifier, sign-in/session information and authentication security records. Email sign-in uses Supabase. A configured Cloudflare Turnstile challenge processes browser and network signals to help prevent automated abuse.

Billing and usage: your selected plan, subscription status, billing interval, renewal and cancellation dates, Paddle customer/subscription/transaction identifiers, RevenueCat entitlement identifier, and export counts, studio identifiers and timestamps. Paddle collects the checkout and payment information it needs. Mockship’s application does not collect or store complete payment-card numbers.

Website and security data: hosting and service providers may process IP addresses, request information, browser/device details, timestamps and error/security logs. Vercel Web Analytics collects page-view statistics such as page URL, referrer, approximate location and browser/device type. It uses request-derived identifiers instead of third-party tracking cookies; this is still online data processing.

Correspondence: information you choose to include in email, refund requests, troubleshooting reports or complaints, including any attachments.

We use account and billing information to authenticate you, deliver paid access, manage subscriptions, reconcile purchases and apply export allowances. We use support information to respond to requests and resolve problems. Security records help prevent fraud, investigate abuse and keep the service reliable. Website statistics help us understand aggregate use and improve the website.

Where a law requires a legal basis, we rely on performance of our contract for requested account and product services; legitimate interests for proportionate security, support and service improvement after considering your rights; legal obligations for records, lawful requests and compliance; and consent where required. You can withdraw consent for future processing without affecting earlier lawful processing. Optional marketing requires a separate basis; accepting these Terms is not marketing consent.

Account and transaction details needed to provide a paid service are required for that service; without them we may not be able to authenticate you, process the purchase or provide paid exports. We do not use your creative files to train AI models, sell your personal information, or share it for cross-context behavioral advertising. We do not make decisions producing legal or similarly significant effects solely through automated profiling. Automated subscription checks enforce the purchased allowance; contact us if you believe a check is wrong.

Information is disclosed as needed to providers supporting the relevant function: Supabase for authentication and database records; Paddle for checkout, subscription transactions and refunds; RevenueCat for subscription entitlements and purchase reconciliation; Vercel for Web Analytics; our hosting infrastructure for website delivery and logs; Cloudflare Turnstile when enabled for bot protection; and email providers for sign-in and correspondence. Providers receive information necessary for their role, not our local creative project library.

Provider information is available from Supabase, Paddle, RevenueCat, Vercel and Cloudflare. Their roles may include acting on our instructions or independently for their own legal and security obligations.

We may disclose relevant information to comply with law, defend legal claims, protect people or investigate fraud. If the business is reorganized or transferred, information may be transferred with appropriate confidentiality protections and any notice required by law. We do not grant advertisers access to your local projects.

Authentication uses browser session storage/cookies so you can stay signed in. Local storage and IndexedDB preserve creative work, theme and editor settings. Checkout and bot-protection providers may use their own necessary storage or similar technologies when you interact with those services.

Vercel Web Analytics runs on the website to provide usage statistics. Its analytics visitor identifier is discarded after 24 hours, according to Vercel’s documentation; this is not a promise that all account, security or aggregate analytics records are deleted in 24 hours.

You can manage site storage through your browser settings. Blocking necessary storage may prevent sign-in, checkout or project saving. Mockship does not currently offer a separate analytics preference control. We do not interpret a general Do Not Track setting as a subscription cancellation or deletion request. Where applicable law requires consent for a non-essential technology, it must not be used before that consent is obtained.

Local projects remain until you remove them or your browser clears or evicts them. Online account and entitlement records are retained while needed to provide your account, reconcile payments, resolve disputes, prevent abuse or meet legal obligations. Export-event records support allowance accounting and troubleshooting. Correspondence is kept for the request and any related follow-up or legal need; technical records follow the relevant provider’s configured retention.

Retention depends on the purpose, account status, applicable accounting/legal requirements, limitation periods and provider settings. We do not promise immediate deletion of receipts or legally required records when an account closes. Once no longer needed, information should be deleted or anonymized; isolated backups may remain until their normal expiration. Contact us for the retention information applicable to a specific record or to request deletion.

Request online account deletion by email. We may need proportionate proof of account ownership. We will explain any information we must retain and why. You should separately cancel recurring billing and remove local project data from each device.

Mockship is operated from India. Our providers may process information in other countries, including the United States and countries where their infrastructure or support teams operate. Privacy laws may differ from those in your country. Where required, international transfers must use a lawful mechanism such as an adequacy decision, applicable contractual safeguards or another legally permitted basis. Contact us for information about safeguards relevant to your data.

We use access controls and authenticated service requests to restrict account and billing operations. No website, browser storage or transmission method can be guaranteed completely secure. Keep your device and email account secure, use an updated browser and report suspected incidents promptly. We will give breach notifications when required by law.

Depending on your location and applicable law, you may request access, correction, deletion, a portable copy, restriction of processing or objection to processing, and withdraw consent where consent is used. You may also have rights to information about disclosures, an authorized representative, an appeal of a declined request, or nomination under applicable Indian law when those provisions apply. We will not unlawfully discriminate against you for exercising a privacy right.

Email Vaibhav using the contact above and describe your request. We will verify identity only as reasonably necessary and respond within the applicable legal deadline. If we cannot fulfill the request, we will explain the reason and available complaint or appeal options. For information held independently by Paddle, you can also contact Paddle directly.

You may complain to the authority competent for your location, including an EU/EEA supervisory authority, the UK Information Commissioner, an applicable US regulator, or the competent Indian authority where available under the law in force. You do not have to contact us before approaching a regulator. For grievances sent to us, we aim to acknowledge within 48 hours and resolve within one month, subject to applicable statutory timelines.

Mockship accounts and purchases are intended for adults aged 18 or over. We do not knowingly collect children’s personal information through accounts. If you believe a child has supplied personal information, contact us so we can investigate and take appropriate action.

We will update this policy when our practices change, show the new revision date and provide additional notice or obtain consent where required. Our Terms of Service govern service use and our Refund Policy covers refund requests.