Privacy Policy

Information You Provide

• Account Information: Email address, password, company name, contact name, industry
• Branding Information: Logo, brand colors, social media handles, website URL, contact information
• Payment Information: Processed securely through Stripe (we do not store your credit card details)
• User Content: Social media posts, images, keywords, and other content you create using our service
• Communications: Messages you send us through support channels

Information Collected Automatically

• Usage Data: Pages visited, features used, time spent on platform
• Device Information: IP address, browser type, operating system
• Cookies: Authentication cookies to keep you logged in

We use your information to:

• Provide, maintain, and improve our service
• Process your payments and manage your subscription
• Generate AI-powered content tailored to your industry and brand
• Send you service-related emails (trial reminders, payment receipts, important updates)
• Respond to your support requests
• Detect, prevent, and address technical issues and security threats
• Send marketing emails (only if you opt-in; you can unsubscribe anytime)
• Comply with legal obligations

We do NOT sell your personal information. We may share your information with:

Service Providers

• Stripe: Payment processing
• Resend: Transactional email delivery
• Supabase/PostgreSQL: Database hosting
• Cloudinary: Image hosting and optimization
• Anthropic: AI content generation (Claude API)
• Airtable: Data organization and storage
• Google: If you connect Google Drive or Google Business Profile, solely to provide the features you authorize (see "Google User Data" in Section 4 below)

Legal Requirements

We may disclose your information if required by law, court order, or government request, or to protect our rights, property, or safety.

Business Transfers

If Mocassai is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information is transferred.

4. Third-Party Services

Our service integrates with third-party services. Each has their own privacy policies:

• Stripe Privacy Policy: stripe.com/privacy
• Anthropic Privacy Policy: anthropic.com/privacy
• Cloudinary Privacy Policy: cloudinary.com/privacy
• Google Privacy Policy: policies.google.com/privacy

Google User Data

If you choose to connect a Google account, we request access to only the Google data needed for the specific feature you're enabling, and only after you explicitly grant permission through Google's own sign-in and consent screen:

• Google Drive: Used so you can browse and select images and videos from your own Google Drive (for example, a shared video library folder) to include in the social media posts you create with our Service. We access files you choose to use this way; we do not scan, index, or use your Drive contents for any other purpose.
• Google Business Profile: Used, only if you connect it, so you can publish posts you create in Mocassai directly to your Google Business Profile listing on the schedule you set, and so you can choose which of your business locations those posts go to. We do not use this connection to change your business information (name, hours, phone number, etc.) unless a feature that explicitly does so is introduced and disclosed to you first.

We store the access and refresh tokens Google issues for these connections in encrypted form, and use them only to make the specific API calls each feature requires. You can revoke our access at any time from your Google Account's connected apps & sites settings, or by disconnecting the integration from Mocassai's Settings page -- either immediately deletes our stored copy of your tokens.

We implement industry-standard security measures:

• Encryption: All data transmitted over HTTPS/TLS
• Password Security: Passwords are hashed using bcrypt
• Access Controls: Limited access to user data
• Secure Infrastructure: Hosted on secure cloud platforms
• Regular Updates: Security patches and software updates

6. Data Retention

We retain your information:

• Active Accounts: As long as your account is active
• Inactive Accounts: Up to 90 days after cancellation
• Legal Requirements: As required by law (e.g., tax records for 7 years)
• Backups: May remain in backups for up to 90 days

You can request deletion of your data at any time by contacting support@mocassai.com

7. Your Privacy Rights

You have the right to:

• Access: Request a copy of your personal information
• Correction: Update inaccurate or incomplete information
• Deletion: Request deletion of your data ("right to be forgotten")
• Data Portability: Receive your data in a machine-readable format
• Opt-Out: Unsubscribe from marketing emails
• Restrict Processing: Limit how we use your data
• Object: Object to certain data processing

To exercise these rights, email us at support@mocassai.com

8. International Users (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

• Right to withdraw consent at any time
• Right to lodge a complaint with your local data protection authority
• Right to know the legal basis for processing your data
• Right to data portability in a structured, commonly used format

Data Transfers: Your information may be transferred to and processed in the United States. We ensure appropriate safeguards are in place for international transfers.

9. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: What personal information we collect, use, and share
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: We do NOT sell personal information
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights

10. Children's Privacy

Our service is not intended for children under 18 years of age. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@mocassai.com and we will delete such information.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Significant changes will be communicated via email.

Your continued use of our service after changes are posted constitutes acceptance of the updated policy.

If you have questions or concerns about this Privacy Policy, please contact us: