Privacy Policy

• Account details: your name and email address, and your password (stored only in protected, hashed form by our login provider). If you sign in with Google, we receive your name, email and profile photo from Google.
• What you create: the descriptions you write, photos you upload (such as a profile photo), and the mascots, images, animations, app screens, chat messages and code made for you.
• Websites you analyze: the address you enter and the public information we read from that site (such as titles, page text and brand colors) to suggest mascots.
• Billing information: your plan, subscription status, credit balance and history, and the customer and subscription IDs from our payment partner. Your card or UPI details are handled by Dodo Payments; we never see or store them.
• Technical data: basic information our servers receive, such as your IP address, browser type and the time of requests, used for security and to keep the Service working. When you try the website analysis without an account, we store a one-way scrambled (hashed) version of your IP address to apply a daily limit, not the address itself.

• To provide the Service: create your account, generate and save your work, and show it to you.
• To run your subscription: process payments through our payment partner, add credits and apply your plan.
• To keep the Service safe: prevent abuse and fraud, enforce limits, and fix problems.
• To improve the Service: understand, in aggregate, how people find and use our website.
• To contact you about your account, payments, important changes, and replies to your support requests.

We do not sell your personal data, and we do not use advertising trackers.

Your content isn't used to train AI. We don't use your descriptions, uploads or creations to train AI models. We send them to our AI providers through their business APIs only to generate your results.

We use trusted service providers to run Mascotix Studio. They only process your data to provide their service to us:

• Cloud hosting and database providers: run our servers and store your account, files and creations.
• A privacy-friendly, cookieless analytics provider: counts visits and page views on our website.
• AI model providers: receive the prompts and images needed to generate your mascots, screens and animations.
• Dodo Payments: payments, subscriptions, taxes and invoices, as merchant of record.
• Google: sign-in with Google, if you choose it, and the web fonts our pages use.

Some of these providers process data outside your country, including in the United States. We rely on their security commitments and contractual protections. You can ask us at hello@mascotixstudio.com for more details about the providers we use. We may also share data if the law requires it, or to protect our users and the Service.

We use only the cookies needed to keep you signed in and your session secure. Our website analytics is cookieless: it counts visits and page views (for example, how many people visit the pricing page) without setting cookies or following you across other websites. We don't use advertising or cross-site tracking cookies. Your browser may also keep small preferences (such as the music player state) on your own device.

We keep your account and your creations while your account is active. If you ask us to delete your account, we delete your personal data and files within 30 days, except records we must keep by law (such as billing and tax records) and short-lived security logs. Website analysis results are kept for a short time so repeat requests are fast.

You can ask us to access, correct, export or delete your personal data, or to stop using it for a specific purpose, by writing to hello@mascotixstudio.com. You can delete individual mascots and designs in the app at any time, and turn off prototype share links whenever you want. Depending on where you live, you may have extra rights (for example under India's Digital Personal Data Protection Act or the EU GDPR), and you can complain to your data protection authority.

We protect your data with encrypted connections (HTTPS), hashed passwords, access controls, and private file links that expire. No system is perfectly secure, so please use a strong password and keep it to yourself.

Mascotix Studio is not meant for children. You must be 18 or older, or have a parent's or guardian's permission. If you believe a child has given us personal data without permission, contact us and we'll delete it.

We may update this policy as the Service changes. If a change matters, we'll tell you by email or in the app. Questions or requests: hello@mascotixstudio.com. See also our Terms & Conditions and Refund Policy.