Privacy Policy

1.Data Controller

The data controller responsible for your personal data is:

2.Types of Data Collected

We collect the following types of personal data, either directly from you or automatically:

• Account information - name, email address, and login credentials.
• Billing information - purchase history and payment details (processed by Polar; we do not store card numbers).
• Technical data - IP address, browser type, operating system, device information, and approximate location.
• File data - uploaded designs, PSD files, and associated metadata (filenames, file size, timestamps).
• Usage data - pages visited, features used, clicks, session duration, and interaction patterns.
• Cookies - as described in our Cookie Policy.

Some data may be collected via third-party services listed in Section 7 below.

3.Mode and Place of Processing

Methods of Processing

Data is processed securely using electronic systems with appropriate technical and organizational safeguards. Access is limited to authorized personnel, service providers, and technical partners under strict confidentiality obligations.

Place of Processing

Data is processed within the European Union and the European Economic Area (EEA) through our hosting and infrastructure partners. Where data is transferred outside the EEA, we ensure adequate data protection standards are maintained through contractual safeguards and technical measures.

4.Data Retention

We retain your personal data:

• For as long as necessary to fulfill the purposes described in this policy.
• For as long as your account remains active.
• Until you withdraw your consent (where consent is the legal basis).
• For longer periods where required by applicable legal, tax, or regulatory obligations.

When data is no longer needed, it is securely deleted or anonymized.

5.Legal Basis for Processing

We process your personal data under the following legal bases, in accordance with the General Data Protection Regulation (GDPR):

• Consent - you have given explicit consent for a specific purpose (e.g., analytics cookies).
• Contract - processing is necessary to fulfill our contract with you (e.g., providing the subscription service).
• Legal obligation - processing is required to comply with applicable laws.
• Legitimate interests - processing is necessary for our legitimate interests (e.g., service improvement, fraud prevention, analytics), provided these do not override your fundamental rights.

6.Purposes of Data Collection

We collect and process personal data for the following purposes:

• Providing, operating, and maintaining the Services.
• Enabling user authentication, account management, and customization.
• Processing payments and managing subscriptions.
• Analyzing platform performance, usage trends, and feature adoption.
• Communicating with you - including support requests, transactional emails, and service updates.
• Detecting, preventing, and addressing security issues, fraud, or misuse.
• Collecting feedback and survey responses to improve the Services.

7.Third-Party Services

We use the following third-party services to operate, analyze, and improve the Services. Each service may collect data as described below.

8.Cookies and Tracking Technologies

We use cookies and similar technologies to enable login sessions, analyze traffic and user behavior, and store user preferences.

For a detailed breakdown of the cookies we use and how to manage them, please refer to our Cookie Policy.

You may also manage your cookie preferences via your browser settings or opt out using the following services:

• YourOnlineChoices (EU)
• Network Advertising Initiative (US)
• Digital Advertising Alliance of Canada (Canada)

9.Your Rights Under GDPR

As a data subject under the General Data Protection Regulation, you have the following rights:

10.Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of sensitive data in transit and at rest.
• Access controls and authentication mechanisms.
• Regular security audits and monitoring.

While we take reasonable measures to protect your data, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

11.Legal Disclosure

We may disclose your personal data where necessary to:

• Comply with applicable legal obligations or court orders.
• Respond to lawful requests by public authorities (e.g., law enforcement).
• Enforce our Terms of Service or defend against legal claims.
• Protect the rights, safety, or property of MockItReal, our users, or the public.

12.Children's Privacy

Our Services are not directed at individuals under the age of 18. We do not knowingly collect personal data from anyone under 18. If we become aware that we have inadvertently collected data from a minor, we will take steps to delete it promptly.

If you believe we have collected data from a minor, please contact us at app@mockitreal.com.

13.Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. Any changes will be posted on this page with an updated "Last Updated" date. Where required by law, we will notify you of material changes via email or platform notification.

We encourage you to review this page periodically to stay informed.

14.Definitions