Privacy Policy

The data controller responsible for the processing described in this Policy is Velante LLC, a Wyoming limited liability company, 30 N GOULD ST STE 53429, Sheridan, Wyoming 82801, USA.

Requests concerning your personal data, including the exercise of the rights described in Section 10, may be sent to support@easymock.app.

Account data: your email address and password. Passwords are stored by our authentication provider in hashed form only; we cannot read or recover them.

Generation data: for each mockup, the options you select (such as garment, colour, model characteristics, pose, setting and accessories), the generated image, the date and time of the request, its outcome, the credits charged and whether they were refunded, and an internal cost figure used for accounting.

Purchase data: your credit balance, the credit pack purchased, the amount and currency paid, and the transaction and customer identifiers assigned by our payment processor.

Correspondence: the content of any message you send us and our replies.

Technical data: standard server logs generated by our hosting provider, such as the time of a request, the page requested and error records. These logs may include your IP address and browser information.

Payment card details: card data is entered on Stripe's hosted checkout page and never reaches our servers.

Your designs: the Service does not accept file uploads or free-text input. Your design is added to the mockup outside the Service and is never transmitted to us.

Tracking data: we do not use advertising, analytics or social media tracking technologies.

We process personal data only for the purposes listed below. For users in the European Economic Area, the United Kingdom, Switzerland and Turkey, the legal basis for each purpose is stated in brackets.

— Providing the Service: creating and managing your account, generating the images you request, maintaining your credit balance and displaying your generation history [performance of a contract];

— Processing payments and crediting purchased packs to your account [performance of a contract];

— Keeping accounting and tax records of purchases [compliance with a legal obligation];

— Handling support requests, refund requests and reports of defective outputs [performance of a contract; our legitimate interest in resolving disputes];

— Maintaining the security and integrity of the Service, diagnosing errors and preventing fraud and abuse [our legitimate interests].

We do not use personal data for advertising or profiling, and we do not make decisions based solely on automated processing that produce legal or similarly significant effects on you.

We share personal data only with the service providers that operate the Service on our behalf, and only to the extent each of them needs it to perform its function:

— Supabase, Inc.: database, user authentication and storage of generated images. The data is hosted on Amazon Web Services infrastructure in Seoul, South Korea;

— Stripe, Inc.: payment processing. Stripe receives your email address and the payment details you enter on its checkout page, and processes card data as an independent controller under its own privacy policy;

— Google LLC (Google Cloud Vertex AI, Gemini models): AI image generation. Each generation request contains the options you selected; it does not contain your email address or other account details;

— Vercel Inc.: hosting and delivery of the website;

— Cloudflare, Inc.: domain name services and forwarding of email sent to our contact address.

We may also disclose personal data where required by law, in response to a lawful request by a public authority, or to establish, exercise or defend legal claims. If the Service is transferred as part of a merger, acquisition or sale of assets, personal data may be transferred to the successor, which will remain bound by this Policy.

We do not sell personal data and do not share it for cross-context behavioural advertising.

Velante LLC is established in the United States, and our service providers process data in the United States, South Korea and other countries in which they operate. Your personal data may therefore be processed outside your country of residence, including outside the European Economic Area.

Where such transfers are subject to data protection law, they are based on an adequacy decision (the European Commission has recognised South Korea as providing an adequate level of protection) or on the Standard Contractual Clauses and equivalent safeguards incorporated in our service providers' data processing terms.

Account data is retained for as long as your account exists.

Full-size generated images are deleted automatically 30 days after generation. A reduced-size preview remains in your generation history for as long as your account exists. We recommend downloading any image you wish to keep within that period.

Generation records are retained for as long as your account exists, so that questions about past generations and reports of defective outputs can be verified.

When you ask us to delete your account, we delete your account data, generation records, purchase records and images. Records of payments are also held by Stripe, which retains them in accordance with its own legal obligations. Server logs are kept by our hosting provider for a limited period under its own retention schedule.

We use only cookies that are strictly necessary for the Service to function:

— Authentication cookies, set when you sign in, which keep your session active. They are removed when you sign out or when the session expires;

— A language cookie (NEXT_LOCALE), which remembers your language choice for one year.

Because these cookies are strictly necessary, they do not require your consent. We do not use analytics, advertising or third-party tracking cookies. Stripe's checkout page, which is hosted on Stripe's own domain, may use cookies under Stripe's cookie policy.

We protect personal data with technical and organisational measures appropriate to the risk, including encrypted connections (HTTPS), hashed passwords, access controls that restrict each user to their own records, and private storage for generated images.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Depending on where you live, you may have the right to:

— access the personal data we hold about you and obtain a copy of it;

— have inaccurate personal data corrected;

— have your personal data deleted;

— restrict or object to certain processing;

— receive your personal data in a structured, machine-readable format.

Users in the European Economic Area, the United Kingdom and Switzerland have these rights under the GDPR and equivalent laws; users in Turkey under Law No. 6698 on the Protection of Personal Data (KVKK); and residents of certain US states, such as California, under applicable state privacy laws. We will not discriminate against you for exercising any of these rights.

To exercise a right, email support@easymock.app from the address associated with your account. We may need to verify your identity before acting on a request, and we will respond within 30 days.

You also have the right to lodge a complaint with the data protection authority of your country of residence, such as the Turkish Personal Data Protection Authority or a supervisory authority in the European Economic Area.

The Service is intended for users aged 18 and over and is not directed to children. We do not knowingly collect personal data from anyone under 18; if we learn that we have done so, we will delete it.

We may update this Policy to reflect changes to the Service or to applicable law. The date at the top of this page shows when it was last revised. If we make material changes, we will notify registered users by email or by a notice on the website before the changes take effect.