Privacy Policy

Who We Are

Mockups Generator is the service that operates this website, editor, public template library, and API. For the purposes of the EU/UK General Data Protection Regulation (GDPR), we act as the data controller for the account and usage information we collect about you, and as a processor for the design files and PSD templates you upload and ask us to render.

Our registered entity and governing jurisdiction are being finalized. Where this policy refers to applicable law, it means the laws of the jurisdiction in which Mockups Generator is established. A current registered address is available on request by emailing support@mockupsgenerator.com.

Information We Collect

We collect only what we need to run the Service. This falls into a few clear categories:

• Account data: your email address and a hashed version of your password. We never store your password in plain text.
• Uploaded files: the PSD templates and design images you upload so we can render mockups for you. These are private to your account.
• Rendered output: the mockup images and print files the Service generates from your templates and designs.
• Usage data: counters and basic logs such as how many renders you have run, API request activity, timestamps, and error information used to operate and secure the Service.
• API keys: keys we issue so your applications can authenticate to our REST API and receive webhooks.
• Billing data: when paid plans are enabled, an optional Stripe customer and subscription identifier. Payment card details are handled by Stripe and are never stored on our servers.
• Cookies and similar technologies: essential cookies needed to keep you signed in and secure, plus optional analytics cookies that load only with your consent.

How We Use Your Information

We use the information above for the following purposes, and no others without telling you first:

• Operating the Service: creating and managing your account, the editor, the template library, and the API.
• Rendering mockups: processing your PSD templates and design images to produce mockup images and print files.
• Billing: managing subscriptions and payments through Stripe when paid plans are enabled (paid tiers are currently coming soon).
• Support: responding to your questions and troubleshooting issues you report.
• Security and reliability: detecting abuse, preventing fraud, enforcing usage limits, maintaining backups, and keeping the Service available.
• Improving the Service: understanding aggregate usage patterns so we can make the product better. Importantly, this never includes using your uploaded files to train AI models.

Legal Bases for Processing (GDPR)

If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases to process your personal data:

• Performance of a contract: to provide the Service you signed up for, including rendering your mockups and managing your account.
• Legitimate interests: to secure the Service, prevent abuse, maintain logs, and improve the product in ways that do not override your rights.
• Consent: for optional analytics cookies and any optional AI features. You can withdraw consent at any time.
• Legal obligation: where we must retain or disclose information to comply with applicable law.

What We Never Do

We want to be direct about this. We do not sell your personal data to anyone. We do not share it with third parties for their own marketing.

We also do not use the PSD templates, design images, or rendered outputs you upload or generate to train AI models, whether our own or anyone else's. Your uploaded files are private to your account and are used only to provide the Service to you.

You retain full ownership and intellectual property rights in the designs you upload and the mockups we render for you. The one exception is templates you choose to publish to our public library: publishing a template grants us a license to display and distribute that template within the library so other users can find and use it. That choice is always yours.

Sharing With Subprocessors

To run the Service we rely on a small number of trusted providers, called subprocessors. Each receives only the data needed for its specific role, and each is bound by appropriate data protection terms. We name them explicitly:

• Stripe: payment processing, used only when billing is enabled. Stripe handles your payment details and the associated customer and subscription records.
• Replicate: optional AI segmentation and generation, used only when you actively use an AI feature. If you never use an AI feature, your files are not sent to Replicate.
• S3-compatible object storage (AWS S3, Cloudflare R2, or MinIO): secure storage of your uploaded files and rendered outputs.

Cookies and Analytics

We use two kinds of cookies. Essential cookies are strictly necessary: they keep you signed in, maintain your session, and protect the Service against abuse. These cannot be turned off because the Service will not work without them.

Optional analytics cookies help us understand how the Service is used in aggregate so we can improve it. These load only after you give consent, and you can change or withdraw your choice at any time through the cookie controls on our site. We do not use advertising or cross-site tracking cookies.

Data Retention

Your rendered files and uploaded files persist until you delete them. We do not auto-expire your mockups; they remain available in your account so you can come back to them, and you remain in control of removing them whenever you choose.

We keep your account data (such as your email and password hash) for as long as your account is active. When you delete your account, we delete or anonymize your personal data and associated files within a reasonable period, except where we must retain limited information to meet legal, accounting, or security obligations. Backups are rotated on a regular cycle and purged in the ordinary course.

Security

We take reasonable and appropriate technical and organizational measures to protect your information. These include storing passwords only as salted hashes (never in plain text), enforcing access controls so that uploaded files are private to the account that owns them, encrypting data in transit, and limiting internal access to systems and data on a need-to-know basis.

No method of transmission or storage is perfectly secure, but we work to protect your data and to respond promptly if an issue arises. If you believe your account has been compromised, contact us immediately at support@mockupsgenerator.com.

International Data Transfers

Mockups Generator and our subprocessors may process and store data in different countries, which means your information may be transferred across borders. Where personal data is transferred out of the EEA or UK, we rely on appropriate safeguards for such transfers, such as standard contractual clauses or an equivalent recognized mechanism, so that your data continues to receive an adequate level of protection.

If you would like more detail about the safeguards in place for a particular transfer, contact us at support@mockupsgenerator.com.

Your Rights (GDPR)

If you are in the EEA or UK, you have the following rights over your personal data. We will not discriminate against you for exercising them.

• Access: ask for a copy of the personal data we hold about you.
• Correction: ask us to fix inaccurate or incomplete data.
• Deletion: ask us to delete your personal data, subject to legal retention requirements.
• Portability: receive your data in a structured, commonly used, machine-readable format.
• Objection and restriction: object to or ask us to limit certain processing, including processing based on our legitimate interests.
• Withdraw consent: where we rely on consent (such as for optional analytics), withdraw it at any time without affecting prior processing.

Your Rights (CCPA/California)

If you are a California resident, you have the right to know what personal information we collect and how we use and disclose it, the right to request deletion of your personal information, the right to correct inaccurate information, and the right not to be discriminated against for exercising your rights.

We do not sell your personal information and we do not share it for cross-context behavioral advertising, so there is no need for a 'Do Not Sell or Share' opt-out, but you remain free to exercise the rights above. To submit a request, email support@mockupsgenerator.com. We will verify your request against your account before acting on it, and you may use an authorized agent where the law permits.

How to Exercise Your Rights

To exercise any of the rights described above, email us at support@mockupsgenerator.com from the address associated with your account, or include enough detail for us to verify your identity. We will respond within the timeframes required by applicable law.

Many actions, such as updating your email or deleting your files and account, can also be done directly within your account settings.

Children's Privacy

The Service is intended for businesses and professionals and is not directed to children. We do not knowingly collect personal data from anyone under 16 (or under 13 where that is the applicable minimum age). If you believe a child has provided us with personal data, contact us at support@mockupsgenerator.com and we will delete it.

Changes to This Policy

We may update this Privacy Policy from time to time as the Service evolves or as the law requires. When we make material changes, we will update the effective date at the top of this page and, where appropriate, notify you through the Service or by email. Your continued use of the Service after an update means you accept the revised policy.

Contact Us

If you have any questions about this Privacy Policy, want to exercise your rights, or wish to reach our data protection contact, email us at support@mockupsgenerator.com. For requests that require a registered postal address, we will provide one on request through that same email.

Effective date: June 21, 2026.