Last updated: June 2026
The short version: We collect only what we need to run the service. We don't sell your data or use your artwork to train AI. You can request deletion of your data at any time.
PosterMock AI is an AI-powered mockup generation service. For questions about this policy, contact us at [email protected].
Account information — when you create an account, we collect your email address. We do not collect your name unless you provide it.
Uploaded images — artwork you upload to generate mockups is sent to OpenAI's API for processing. Images are stored temporarily during generation and then in your account's mockup history if you are a registered user. Guest uploads are not stored after generation.
Generated mockups — if you are a registered user, generated mockup images are saved to your account history in Supabase Storage so you can access them later.
Payment information — billing is handled entirely by Stripe. We never see or store your card number, CVV, or full payment details. We store only your Stripe customer ID and subscription status.
Usage data — we store credit balances, plan type, and generation timestamps to operate the credit system.
Guest sessions — if you use the app without an account, we set a cookie to track your free credits. This data is held in memory and is not persisted to a database.
We do not use your uploaded artwork to train AI models. Images are passed to OpenAI solely for the purpose of generating your requested mockup.
We use the following third-party services to operate PosterMock AI:
We retain your account data and mockup history for as long as your account is active. If you close your account, we delete your data within 30 days, except where required by law (e.g., billing records).
Guest session data (credits) is held only in server memory and is cleared when the server restarts.
If you are based in the EU or UK, you have the right to:
To exercise any of these rights, email [email protected]. We will respond within 30 days.
We use a single session cookie (guest_sid) to track free credits for guest users. Registered users have an authentication session cookie managed by Supabase. We do not use tracking cookies or third-party advertising cookies.
All data is transmitted over HTTPS. Authentication and database access are managed by Supabase with row-level security policies. Payment data is handled exclusively by Stripe and never passes through our servers.
The Service is not directed at children under 16. We do not knowingly collect data from children. If you believe a child has provided us with personal data, contact us and we will delete it promptly.
We may update this Privacy Policy from time to time. We will notify registered users of material changes by email. The date at the top of this page reflects the most recent revision.
For privacy questions or data requests, contact us at [email protected].