1. Scope
This Privacy Policy applies to RPMockup’s website, mockup builder, AI conversation tools, exports, accounts, purchases, and related support. “RPMockup,” “we,” “us,” and “our” refer to the operator of the RPMockup service.
2. Information we collect
- Account information: name, email address, profile image, authentication provider, and account identifiers.
- Authentication and security data: session tokens, one-time-code records, IP address, user agent, and sign-in activity.
- Content: prompts, fictional conversation text, names, avatars, uploaded reference screenshots, mockup settings, and other material you submit.
- Purchase and access data: SellAuth order and product identifiers, buyer email, plan, access period, activation count, key fingerprint and last four characters. We store a cryptographic hash—not the full plaintext access key.
- Export data: app style, device, dimensions, title, timestamp, and the conversation/settings needed to reopen an export. The rendered PNG is returned to you and is not intentionally retained as an export file by RPMockup.
- Technical data: request logs, error information, browser/device data, and functional browser storage used to preserve pending actions and editor state.
- Communications: messages and information you send to support.
3. How we use information
We use information to:
- provide accounts, mockup generation, AI drafting, exports, history, and support;
- authenticate users, deliver one-time codes, activate purchases, and enforce plan limits;
- process prompts and reference images at your request;
- protect RPMockup and its users, prevent abuse, troubleshoot, and improve reliability;
- communicate service, security, purchase, and policy updates; and
- comply with law and enforce our Terms.
4. AI processing and uploaded content
When you use AI features, RPMockup sends your prompt and any reference screenshots you choose to upload to our AI provider, Google Gemini, so it can generate the requested draft. Do not upload confidential information, real private conversations, or personal data you do not have permission to use. RPMockup does not add reference screenshots to your export history, but the AI provider may process submitted material under its own terms and privacy commitments.
5. How we share information
We disclose information only as needed to operate the service, including to:
- Google: OAuth sign-in and Gemini AI generation;
- Resend: delivery of authentication and service emails;
- Neon: managed database infrastructure;
- SellAuth: checkout, payment-related order events, and digital product delivery;
- hosting and infrastructure providers: application hosting, security, and request processing; and
- authorities or transaction parties: when required by law, needed to protect rights and safety, or involved in a merger, financing, or sale of the service.
We do not sell your personal information or use it for cross-context behavioral advertising.
6. Cookies and local storage
RPMockup uses cookies and similar browser storage that are necessary for authentication, security, editor continuity, pending imports, and core product preferences. We do not currently use third-party advertising cookies.
7. Retention
We keep account and purchase records while your account or access remains active and as reasonably necessary for security, support, accounting, dispute resolution, and legal obligations. Export metadata and saved conversation settings remain until they are deleted or the account is removed. Security logs and expired sessions may be retained for a limited period. We may retain de-identified data that can no longer reasonably identify you.
8. Security and international processing
We use reasonable administrative and technical safeguards, including hashed access keys and access controls. No system is completely secure. RPMockup and its providers may process information in countries other than yours, where privacy laws may differ.
9. Your choices and rights
Depending on where you live, you may have rights to access, correct, delete, restrict, or receive a copy of personal information, and to object to certain processing. You may also withdraw consent where consent is the basis for processing and complain to your local data protection authority. To make a request, email support@rpmockup.app. We may verify your identity before completing it. Some records may be retained where law requires.
10. Children
RPMockup is not directed to children under 16, and we do not knowingly collect their personal information. If you believe a child has provided information, contact us so we can review and delete it where appropriate.
11. Changes and contact
We may update this policy as RPMockup changes. We will post the revised version here and update the effective date; material changes may also be communicated in the product or by email. Questions and privacy requests can be sent to support@rpmockup.app.