Mofano

Legal

Legal Centre

Privacy Policy

Effective: 23 October 2026Last updated: 23 October 2026
You're viewing the version for International.

This agreement is with Mofano Technologies Limited.

Company information

1. Governing law and local rights

In plain terms: Local consumer rights stay protected.

This version is governed by England and Wales law. Mandatory consumer and privacy protections in the country where you live remain protected.

2. Information we collect

In plain terms: We collect the information needed for your account, ads and purchases.

Account information includes your name, email, sign in provider and profile details. Brand kits can contain your logo, colours, fonts, products and business information. We store your uploads, prompts, generated content and revision records so you can use your work again.

Payment records include verified amount, currency, pack or plan, credits, payment method and reference through Flutterwave. Hosted checkout collects payment credentials. Usage and device records include feature activity, timestamps, browser and security diagnostics. We also store support messages and browser consent choices.

3. Purposes and legal bases

In plain terms: Each use of your information has a specific purpose.
PurposeInformationBasis where applicable
Account and accessEmail, profile and session informationPerforming our contract
Creative requestsBrand kit, uploads, prompts and outputsPerforming our contract
Payments and receiptsVerified payment, credits and billing countryContract and applicable legal obligations
Security and abuse preventionUsage, device and security eventsLegitimate interests and legal obligations where applicable
SupportMessages and account details needed to helpContract or legitimate interests
Optional browser choicesPreference and consent recordsConsent where required

4. AI processing

In plain terms: Generation sends the required content to external AI services.

Prompts, selected brand information and reference uploads are sent to relevant AI services to produce and revise your requested content. Some processing also supports safety checks and quality checks. The reviewed application contains no Mofano model training job using customer prompts or uploads.

This source review does not prove every provider retention or training practice. We do not promise that all providers disable training or retain nothing. Ask support for current provider terms before uploading confidential or sensitive information.

See Subprocessors for the service inventory.

5. Sharing and public content

In plain terms: Service providers process information to run the app.

We share information with the services listed on our Subprocessors page and with staff who need it to respond to requests or operate the service. Sharing an ad by link makes it accessible according to its sharing settings. We may disclose information where the law requires it or to investigate fraud, abuse or a security incident.

The reviewed application has no personal data sale or advertising audience sharing integration. We do not sell or share personal information for advertising. Processing needed to create your content or collect payment is not advertising audience sharing.

View the service list.

6. International processing

In plain terms: Outside services may process data outside your country.

Processing locations depend on the services used. Specific regions and contractual transfer mechanisms are not verified in this app inventory. Ask support for the current locations and safeguards relevant to your use. Where applicable law requires a transfer safeguard, the responsible company must put it in place before relying on that transfer.

7. Retention and deletion

In plain terms: Keep your work while you need it. Deleted recoverable items are eligible for cleanup after 30 days.

Account and creative records support an active account until you delete them. Recoverable Studio assets, projects and brand items marked deleted are eligible for automated cleanup after 30 days. This is not a guarantee that every backup or external provider copy is removed on that date.

Account deletion requests removal of account records and associated uploaded files. Payment records may be needed for legal or accounting duties. Exact statutory, backup, support and provider retention periods need confirmation from the responsible company; we do not claim an unverified fixed period.

8. Security

In plain terms: Access controls and authenticated requests protect information, but no system is risk free.

The app uses authenticated account requests, access policies and secure web connections. Avoid uploading information you do not have permission to use. Report a suspected breach to support. We do not claim security certification, guaranteed encryption arrangements or independent audits not confirmed for the service.

9. Your rights and account controls

In plain terms: You can ask to access, download, correct or delete your information.

Depending on your law, you may request access, correction, deletion, restriction, portability, object to processing, withdraw consent or complain to a regulator. We verify identity and respond within the period the applicable law requires. Withdrawing consent does not undo earlier lawful processing.

Download data exports the account categories currently available in that feature, not every possible record. For additional information or a full rights request, contact support.

Download data and Delete account are together in your account deletion controls. Correct your profile.

10. Children

In plain terms: The Service is not intended for children below the applicable minimum age.

The minimum is 16, or the higher local age of digital consent. If a child below that age supplied information, contact support so we can investigate and apply the appropriate deletion or protection measures.

11. EEA and United Kingdom

In plain terms: GDPR rights apply where the law covers the processing.

Under the EU GDPR or UK GDPR, relevant rights include access, rectification, erasure, restriction, objection and portability. You may withdraw consent and complain to your data protection authority, including the UK Information Commissioner where applicable. Our basis table explains proposed purposes; international safeguards still require verified agreements.

12. United States

In plain terms: State privacy rights depend on your residence and whether the law applies.

California CCPA and CPRA and similar state laws may provide rights to know or access, correct, delete and receive data, and to opt out of sale, advertising sharing or certain profiling. We do not sell or share personal information for advertising. We do not discriminate for using a protected privacy right. Contact support for requests or an authorised agent request, subject to verification.

13. Other regional rights

In plain terms: Your local law may provide additional privacy rights.
RegionRelevant law and rights, where applicable
BrazilLGPD: confirmation, access, correction, deletion, portability and consent rights.
CanadaPIPEDA and applicable provincial laws: access, correction and complaints.
South AfricaPOPIA: access, correction, objection and complaints to the Information Regulator.
NigeriaNDPA: access, correction, deletion, objection and complaints to the Nigeria Data Protection Commission.
KenyaData Protection Act: access, correction, deletion and complaints to the Office of the Data Protection Commissioner.
UgandaData Protection and Privacy Act: access, correction and complaints to the Personal Data Protection Office.
IndiaDPDP Act, as brought into force: access summaries, correction, erasure, grievance and other applicable rights.
AustraliaPrivacy Act, where applicable: access, correction and complaints including to the OAIC.

14. Questions and changes

In plain terms: Contact support if anything is unclear.

Questions? support@mofano.ai

Material changes to Terms or Privacy appear in a notice in the app. Review the date and change log on each policy.

Change log

23 October 2026: reorganised global policies, company selection, credit rules, privacy disclosures and consent choices.