1. Who is responsible
MascoAI runs MascoAI and is responsible for your personal data. Contact us at support@mascoai.com.
2. What we collect
- Account details: your email address. If you sign in with Google, also your name, profile picture and Google account ID.
- Your content: the prompts, descriptions, mascot names, lettering and images you give us, and the images, animations and sprite sheets we create for you.
- Billing records: Polar handles payment. We never see or store your card details. Polar sends us the order ID, the product you bought and your customer reference, so we can add your credits. We also keep a record of the credits you use.
- Security and usage data: your IP address, browser type and sign-in times, used to keep accounts safe and prevent abuse.
- Support messages: anything you send us through the Support page or by email.
- MCP keys: if you connect an AI assistant, a scrambled (hashed) copy of each key you create, its name, and when it was last used. We never store the key itself.
3. How we use it
- To create, animate and store your mascots, which means sending your prompts and images to the AI providers below.
- To sign you in, including emailing you one-time sign-in links.
- To add credits when you pay, and to process refunds.
- To answer support requests.
- To protect the service, for example rate limiting and blocking abuse.
We rely on performing our contract with you, on our legitimate interest in keeping the service secure, and on your consent where the law requires it.
4. Who helps us
We share data only with the providers we need, and only for the purposes above:
- Alibaba Cloud Model Studio (Qwen and Wan models): generates and animates mascots from your prompts and images.
- fal.ai: video generation and background removal, where enabled.
- Polar: payments, invoices and tax, as our merchant of record. See Polar's Privacy Policy.
- Resend: delivers sign-in emails.
- Google: Sign in with Google, if you choose it.
- Our hosting provider, which runs our servers and stores your files.
Removing backgrounds from uploaded images normally happens on our own servers. Some providers may process data outside your country; when they do, we rely on the safeguards the law requires.
5. AI training
We do not use your prompts, uploads or mascots to train AI models. Our AI providers process them only to return your results, under their own terms.
6. Cookies and local storage
We use one essential cookie, called session, which keeps you signed in for up to 30 days. We use no advertising, analytics or tracking cookies, so there is nothing to opt out of. To see which pages are popular we may use Plausible, which counts visits without cookies and without identifying you. The app also saves a few things in your browser's local storage, such as your recent mascots and an unfinished draft, so they are there when you come back.
7. How long we keep data
- Your mascots stay until you delete them in the app or close your account. Deleting a mascot removes its files from our servers.
- Account details are kept while your account is open.
- Sign-in links expire within minutes.
- Billing records are kept as long as tax law requires. Polar keeps its own payment records.
8. Your rights
You can ask us for a copy of your data, to correct it, to export it, or to delete your account and everything in it. Email support@mascoai.com and we will reply within 30 days. If you are in the EU or UK, you can also complain to your data protection authority.
9. Children
MascoAI is not meant for children under 16, and we do not knowingly collect their data. If you believe a child has given us data, contact us and we will delete it.
10. Changes
If we change this policy in a way that matters, we will tell you by email or in the app before the change takes effect.