Privacy Policy

Mofano ("Mofano", "we", "us", "our") is an AI-powered creative platform that helps brands generate ads, videos, posters, avatars, brand kits and related marketing assets. This Privacy Policy describes the information we collect when you visit mofano.ai or use our studio products, how we use it, and the choices you have.

The data controller is Mofano Technologies Limited, a company registered inEngland and Wales. For any privacy question, write to privacy@mofano.ai.

2.1 Account information

When you create an account we collect your name, email address, and a securely hashed password. If you sign in with Google, we receive your name, email, Google account ID, and profile photo.

2.2 Brand information

To generate on-brand assets we store the brand information you give us: brand name, industry, uploaded logos, product photos, brand guidelines, colour palettes, fonts, tone-of-voice notes and contact details you choose to include in creatives.

2.3 Generated content

We store the ads, videos, posters, avatars, copy and any other assets you create on the platform, along with the prompts, parameters and revision history used to make them.

2.4 Usage data

We log features used, prompts entered, generation history, credit consumption, in-app navigation, referral source and timestamps so we can operate, secure and improve the product.

2.5 Device & technical data

We collect IP address, browser, operating system, device type, language, screen size, performance metrics and session timestamps.

2.6 Payment information

Payments are processed by Stripe and our regional payment partners. We never store full card numbers or banking credentials. We store the last four digits, card brand, billing country and invoice history for accounting and fraud prevention.

2.7 Communications

If you contact support, request a demo or reply to a transactional email, we keep the message and any attachments to respond and improve our service.

3.1 To provide the service

Generate creatives, save assets, host your brand kit, manage your subscription, process payments and let you collaborate with teammates.

3.2 To improve the platform

Diagnose bugs, measure performance, study aggregate usage patterns and prioritise the roadmap.

3.3 Model improvement (opt-in)

By default, your prompts, uploads and generated outputs are not used to train any AI model. You may opt-in inside Studio → Settings → Privacy if you'd like to contribute to model improvements. You can opt-out again at any time.

3.4 Transactional emails

Account verification, password resets, billing receipts, security alerts and important product notices. These are essential to the service and cannot be unsubscribed from while your account is active.

3.5 Marketing emails

Only sent if you explicitly opt-in. Every marketing email contains a one-click unsubscribe.

3.6 Fraud, abuse & legal compliance

We use account and usage data to detect abuse of the platform, enforce our Terms of Use and meet legal obligations.

Mofano relies on third-party AI providers for image generation, video generation and language processing. When you generate content, the necessary prompt and reference material is sent to the relevant provider under our enterprise agreement and processed under their privacy and security terms.

• We do not sell user data, prompts or outputs to third parties.
• We choose providers that contractually agree not to train on our customers' data by default.
• You retain ownership of the content you generate on Mofano, subject to the limits in our Terms of Use.
• AI outputs can be inaccurate, biased or coincidentally similar to existing works. Please review before publishing.

We share personal data with the following categories of processors, each bound by a written data processing agreement:

• Hosting & infrastructure: cloud and CDN providers that host the platform.
• Payment processors: Stripe and local payment partners.
• AI model providers: to generate the assets you request.
• Analytics: to understand product usage in aggregate.
• Email delivery: to send transactional and (opted-in) marketing email.
• Customer support tooling: to respond to your requests.

We may also disclose data when required by law, to protect our rights or users, or in connection with a corporate transaction (with notice where reasonably possible).

Mofano operates globally, so personal data may be processed outside your country of residence, including in the European Economic Area, the United Kingdom, the United States and Kenya. Where required, we rely on Standard Contractual Clauses, UK IDTA, adequacy decisions, or other legally-recognised safeguards.

If you are in the EU/EEA or UK, you have rights under the GDPR / UK GDPR. If you are in California, you have rights under the CCPA/CPRA, including the right to know, delete and opt-out of "sale" or "sharing" of personal information (Mofano does neither).

• Account data: kept while the account is active and for 90 days after deletion (for backups and dispute resolution), then permanently deleted.
• Generated assets: kept until you delete them, or 90 days after account deletion.
• Billing records: kept for the period required by tax and accounting laws (typically 7 years).
• Support tickets: kept for 24 months after resolution.
• Server logs: kept for up to 90 days.

Depending on your jurisdiction you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your account and associated personal data.
• Export your data in a portable format.
• Object to or restrict certain processing.
• Opt-out of marketing communications.
• Opt-out of using your prompts and outputs for model improvement.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, email privacy@mofano.ai. We will respond within 30 days.

The service is intended for users aged 16 and older. We do not knowingly collect personal data from children. If you believe a minor has provided us with personal data, contact privacy@mofano.ai and we will delete it.

We protect your data with industry-standard controls:

• TLS 1.2+ encryption in transit.
• Encryption at rest for stored data, uploaded assets and database backups.
• Least-privilege role-based access for employees, with audit logging.
• Regular vulnerability scans, dependency monitoring and third-party penetration tests.
• Incident response procedures with notification to affected users where legally required.

No system is perfectly secure. If you suspect a security issue, email security@mofano.ai.

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email and via an in-app banner at least 14 days before the new version takes effect. The "Last updated" date at the top reflects the most recent version.

Privacy questions: privacy@mofano.ai

Legal: legal@mofano.ai