Privacy Policy

We collect the following categories of information:

• Account information. Your name, email address, profile image, authentication identifiers, and account status. Our authentication service providers handle sign-in credentials and authentication methods on our behalf.
• Onboarding and profile information. Your stated use case, technology stack, referral source, prior purchasing experience, favorite example, and other answers you choose to provide.
• Creative content. Mascot names, product context, visual and personality briefs, custom gesture descriptions, edit instructions, conversation history included with an edit, uploaded reference images, selected AI model, and the SVGs, previews, icon files, favicons, PWA assets, logos, and other outputs created through the Service.
• Library and marketplace records. Saved mascot packs, themes, poses, parts, source listing, download activity, and marketplace orders, licenses, reservations, and fulfillment records.
• Billing information. Plan, entitlement, renewal and expiry status, token balances and ledger entries, product identifiers, checkout and payment status, transaction amounts, currency, and provider transaction identifiers. We do not receive or store your full payment-card number; payment details are handled by our checkout and billing providers.
• Usage and technical information. Pages and features used, coarse product events, model selection, generation success or failure, token usage, download type, IP address and request information used for security and rate limiting, browser or device information, and diagnostic logs.

We collect information from you, automatically from your device and use of the Service, and from service providers when they confirm account or transaction events.

We use information to:

• create and secure accounts, synchronize profiles, and provide customer support;
• generate concept samples, animated SVG mascot packs, new gestures, refinements, remixes, and app-brand assets;
• save your work, support downloads, maintain version and ownership records, and fulfill marketplace purchases;
• show live prices, process purchases, administer subscriptions, refill and deduct tokens, prevent double spending, and handle refunds or payment disputes;
• operate, debug, secure, monitor, and improve the Service, including preventing abuse and measuring which product flows work;
• communicate about the Service, transactions, security, policy changes, and account administration; and
• comply with law, enforce our Terms of Service, and protect users, MascotAI, and others.

We do not use your private creative content to train a MascotAI model. We also configure our product analytics so that names, email addresses, mascot briefs, prompts, and other free-text customer content are not included in custom analytics events.

MascotAI lets you choose between models provided by OpenAI and Anthropic. To perform a generation, we send the selected provider the information needed for that request. Depending on the feature, this may include your brief, product context, mascot SVG or compact mascot pack, selected sample, edit history, custom gesture, and reference image.

The provider returns generated text, structured data, SVG, or image output to MascotAI. Those providers process this information on our behalf or as otherwise described in the terms and privacy documentation applicable to their services. Provider practices, including abuse monitoring and retention, may vary by provider and our configuration. Do not submit content you are not authorized to share with the selected provider.

We disclose information only as needed for these purposes:

• Service operations: Companies that help us host the Service, store data, secure accounts, provide authentication, monitor reliability, understand product usage, support customers, and process billing and payments. They receive only the information reasonably needed to perform those services.
• AI generation: OpenAI or Anthropic, based on the model you select, and OpenAI for an image feature when that feature is enabled.
• Legal and safety: Authorities, advisors, or other parties when reasonably necessary to comply with law, protect rights and safety, investigate fraud, or enforce agreements.
• Business transfers: A buyer, investor, lender, or successor in connection with due diligence or a merger, financing, reorganization, or sale of assets, subject to appropriate confidentiality protections.

We do not sell personal information for money. We do not use personal information for third-party targeted advertising, and we do not share private library mascots or private creative briefs with other customers.

Marketplace listing previews and public example studios are public. Your own saved mascots do not become marketplace listings merely because you create or save them.

• Reference images are session-scoped and scheduled for automatic deletion within 24 hours of upload. Removing a reference in the product requests deletion sooner.
• Saved mascot packs and completed app-asset packs remain in your library until you delete them or close your account, subject to backup and legal-retention exceptions.
• Incomplete app-asset samples and temporary uploads are periodically purged when they become stale or are not attached to a completed pack.
• Account, billing, token-ledger, marketplace order, fraud, and security records are retained for as long as needed to operate the account, honor purchases and licenses, resolve disputes, maintain financial records, prevent abuse, and comply with law.
• Temporary operational records are retained only as long as needed for reliability, security, and preventing duplicate charges.

When you delete your account, we begin deleting or de-identifying account-linked content from active systems. We may retain limited transaction, license, dispute, security, and backup information where required or reasonably necessary. Backup copies are removed on their normal rotation.

We use administrative, technical, and organizational measures designed to protect information, including access controls, account security, monitoring, safeguards for payments and stored assets, and limited retention for temporary uploads. No system is completely secure, and we cannot guarantee that unauthorized access, loss, or misuse will never occur. You are responsible for protecting your sign-in methods and for notifying us if you believe your account has been compromised.

You can review and update certain account details through your account controls, remove saved mascots and app-asset packs in the product, remove a current reference upload, cancel a subscription through the checkout or account-management flow made available by the billing provider, and delete your account where that option is available.

Depending on where you live, you may have rights to request access, correction, deletion, portability, restriction, or objection concerning personal information, or to appeal a decision about a request. You may also have a right not to receive discriminatory treatment for exercising privacy rights. To make a request, email privacy@mascotai.app. We may need to verify your identity and may retain information permitted by law.

Browser privacy signals vary in meaning. Because MascotAI does not sell personal information or use it for cross-context behavioral advertising, we do not currently treat such signals as a request to opt out of those activities.

MascotAI and its service providers may process information in the United States and other countries where they operate. Those countries may have different data-protection laws from your home country. Where required, we use appropriate contractual or other safeguards for cross-border transfers.

The Service is built for product creators and businesses and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, contact us so we can investigate and delete it. You must be old enough to enter into the Terms of Service to hold an account.

We may update this Privacy Policy as the Service or law changes. We will post the revised version here, update the date above, and provide additional notice when required. Material changes apply prospectively unless law permits otherwise.

For privacy questions or requests, contact MascotAI at privacy@mascotai.app.