Effective Date: April 6, 2026
This Privacy Policy describes how MockupFlowAI ("we", "us", "our") handles information when you use our desktop application and website.
MockupFlowAI is a local desktop application. It runs entirely on your machine. We are committed to minimal data collection. The core application does not require an internet connection to function, except when communicating with third-party APIs that you configure yourself (e.g., Etsy OAuth, cloud storage).
All processing happens on your computer:
To validate your software license, we collect:
This data is sent to our licensing server (Supabase) and is the only data that leaves your machine to our servers.
When you purchase a license, payment is processed by Lemon Squeezy (our merchant of record, powered by Stripe). They collect your name, email, billing address, and payment method. We receive your name, email, and order details (product, amount, date) but never your full credit card number or PayPal credentials. This data is used to provision your license and send purchase receipts.
If you submit your email via our website waitlist form, we collect your email address via Web3Forms. This is used solely to notify you about product availability. You can unsubscribe at any time.
We do not collect, transmit, or store:
The voice input feature requests access to your device's microphone via the web browser. Microphone access is optional and can be denied without affecting other functionality.
When you use voice input, audio is processed according to the engine you select:
The voice reply feature uses gTTS (Google Text-to-Speech), an open-source library. When voice replies are enabled, the text of the assistant's response is sent to Google's TTS service to generate audio. No personal information, API keys, or metadata is transmitted — only the text content. The generated audio file is stored temporarily on your device and deleted after playback.
Audio recordings and generated speech files are stored as temporary files on your local machine and are deleted immediately after processing or playback. We never retain, transmit, or store audio data on our servers.
MockupFlowAI integrates with third-party services that have their own privacy policies. When you use these integrations, data flows directly between your machine and the third-party service:
All purchases are processed by Lemon Squeezy (powered by Stripe), which acts as our merchant of record. When you purchase a license, Lemon Squeezy collects your payment information (credit card, PayPal), billing address, email, and name. We do not have access to your full payment details. See Lemon Squeezy Privacy Policy and Stripe Privacy Policy.
The following services are accessed directly from your machine using your own credentials:
When you provide your own API keys for optional features (design tools, SEO writing, voice transcription), the Software connects directly from your machine to those providers. MockupFlow does not proxy, store, or log these requests. You are responsible for reviewing the privacy policies of any third-party services you choose to connect.
All API keys and OAuth tokens are:
You are responsible for the security of your own API keys. We recommend keeping your database backups in a secure location.
When you connect your Etsy shop via OAuth, MockupFlowAI accesses certain Etsy data to provide its services. With respect to this data, MockupFlowAI acts as a service provider (data processor) to you, the Etsy seller (data controller), and processes such data solely to fulfill the services described in our Terms of Service.
Through the Etsy API, MockupFlowAI may access:
All Etsy data accessed through the API is stored exclusively on your local machine in the application's SQLite database. We do not transmit, copy, or store Etsy data on our servers. OAuth tokens are encrypted at rest using Fernet symmetric encryption.
In compliance with the Etsy API Terms of Use:
Cached data is refreshed from the Etsy API on subsequent access after expiration.
You can disconnect your Etsy shop at any time from the Settings panel. Upon disconnection:
In the unlikely event that any Etsy member data accessed via the API is compromised or suspected to be compromised, we will promptly notify Etsy at dpo@etsy.com and the affected Etsy seller within 24 hours of discovery.
Our website (mockupflow.ai) may use basic analytics cookies to understand traffic patterns. The desktop application does not use cookies, tracking pixels, or any form of telemetry.
The Software includes an optional telemetry module (disabled by default) that, when explicitly enabled by you, sends anonymized usage statistics to help us improve the product. No personal data, designs, or business information is included in telemetry data. You can enable or disable this at any time from the Settings panel.
As a company based in the European Union (Croatia), we comply with the General Data Protection Regulation (GDPR).
Under GDPR, you have the right to:
To exercise any of these rights, contact us at info@mockupflow.ai. We will respond within 30 days as required by GDPR.
License validation data is stored on Supabase servers. When you use third-party APIs, data flows directly from your machine to those providers. We do not control or process this data. Refer to each provider's privacy policy for their data transfer practices.
MockupFlowAI is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us to have it deleted.
MockupFlowAI uses open-source libraries under permissive licenses (MIT, BSD, Apache 2.0). These libraries do not collect personal data independently. All open-source components used in this Software are commercially licensed and permit redistribution. A full list of third-party components is available in the Software's documentation.
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. For significant changes that affect your data rights, we will provide notice via email (if you are a registered user) or via a notification in the Software. Continued use of the Software after changes constitutes acceptance of the updated policy.
If you have questions about this Privacy Policy, want to exercise your data rights, or wish to file a complaint, contact us at:
Email: info@mockupflow.ai
Company: MockupFlowAI
Location: Croatia, European Union
If you are unsatisfied with our response, you have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP) or your local EU supervisory authority.
Last updated: April 6, 2026