Privacy Policy

What Mocklist (mocklist.com, operated by Vice City Apparel & Prints, Miami, Florida) collects, why, and what we do with it — in plain language.

What we collect

Data	Why	Where it lives
Your email address	To sign you in (magic link) and to contact you about your account	Supabase (our database and sign-in provider)
Plan and AI-credit usage	To know what your plan allows and show you credits left	Supabase
Payment details	To bill paid plans	Stripe only. We never see or store card numbers; we keep a Stripe customer ID.
Model photos, designs, collections	So your library is there next time	Your browser's storage on your device only. They are not uploaded to Mocklist.
Images you send to AI tools	To run that one AI action (enhance, complete edges, generate, listing)	Sent to the AI provider (Google Gemini) for processing; not stored by us
A one-way hash of your IP address	To limit abuse of the AI features (rate limits)	Supabase; the raw IP address is not stored in this table
Basic server logs	To keep the service running and stop abuse (rate limits)	Vercel, short retention

What we don't do

• We don't sell or rent your data, ever.
• We don't use your designs or photos to train AI models ourselves. Images you send to AI tools are processed by Google under its API terms.
• We use Google Analytics, which sets cookies, to understand how visitors use Mocklist — only after you click Accept on the cookie banner. If you decline, no analytics cookies are set. We don't sell your data.

Mockups, background removal and vectorizing

These run entirely in your browser. The images never leave your device.

Who we share data with

Only the services that run Mocklist: Supabase (database, sign-in, storage), Stripe (payments), Vercel (hosting), Google (Gemini AI processing), and the email sender for sign-in links. Each receives only what it needs to do its job. We also share data when the law requires it.

Google (Google Analytics) — anonymous usage data such as pages visited, device type, approximate location and actions like signing up or starting checkout, only if you accept cookies.

Meta (Facebook/Instagram) — ad measurement data, only if you accept cookies.

Cookies and storage

Your sign-in session and your library are kept in your browser's local storage so you stay signed in and your work is there next time. Clearing site data removes them.

Analytics

Google Analytics loads only after you click Accept on the cookie banner; if you decline, it never loads. Your choice is saved in this browser. To change it, clear this site's data (cookies and local storage) and the banner will ask again — note this also signs you out, as described above.

We also use the Meta Pixel to measure our Facebook and Instagram ads, only after you accept cookies. We don't sell your data.

Your choices

• See or export your account data, or delete your account and everything with it: email hello@mocklist.com. We'll handle it within 30 days.
• You can stop sign-in emails by not requesting them; we don't send marketing email without asking you first.

Retention

Account data stays while your account exists. Images sent for AI processing aren't retained by us. Server logs are kept briefly for security. Deleted accounts are removed from our systems within 30 days, except records we must keep for tax and payment compliance (Stripe keeps those).

Children

Mocklist is for adults running a business. We don't knowingly collect data from anyone under 18.

Changes and contact

If this policy changes in a way that matters, we'll tell you in the app. Questions or requests: hello@mocklist.com.