Privacy Policy

mocktomer is a product of MineledgerAI LLC (“MineledgerAI,” “we,” “us,” or “our”), a United States limited liability company. MineledgerAI LLC is the data controller for personal information processed through the mocktomer websites, applications, and related services (the “Service”). The Service lets site owners send AI customers through customer journeys on their own websites and receive experience feedback.

This Policy explains what we collect, how we use it, who we share it with, and the choices and rights you have. It is incorporated into our Terms of Service.

Account and authentication data. When you create an account we collect your name, email address, and authentication identifiers. Authentication is provided by Firebase Authentication (Google); if you sign in with Google, we receive basic profile information from your Google account.

Site data you submit. We collect the website URLs you submit and the publicly available content of those sites that our systems crawl and render in order to provide the Service, including page content, structure, and metadata.

Screenshots and journey records. While AI customers walk your site, we capture screenshots of the pages they encounter, along with journey events, reasoning narrations, and the resulting experience feedback reports. These may incidentally include content displayed on your site at the time of capture; you should not expose real end-user personal data to runs.

Usage and analytics data. We collect log and event data about how you use the Service — pages viewed, features used, runs launched, device and browser information, IP address, and approximate location derived from it.

Payment data. Payments are processed by Stripe, Inc. We receive limited billing information (such as plan, transaction status, and the last four digits and brand of your card) but we never receive or store your full card numbers.

Optional staging credentials. If you choose to provide credentials for a staging or test environment, they are stored encrypted in Google Secret Manager and used solely to operate AI customers on that environment at your direction. We never ask for, and you must not provide, real customer credentials.

We use the information described above to:

• provide, operate, and maintain the Service, including running AI customer journeys on the sites you submit and delivering experience feedback reports;
• create and secure your account and authenticate you;
• process payments, manage credits, and prevent fraud and abuse;
• communicate with you about your account, runs, billing, and changes to the Service or our terms;
• monitor, debug, and improve the Service, including in de-identified or aggregated form;
• comply with legal obligations and enforce our Terms of Service.

We do not sell your personal information, and we do not use your data for third-party advertising.

The Service is built on large language models. Content from the sites you submit — including page content, screenshots, and journey context — is processed by third-party AI providers, such as Anthropic, to generate the simulated customer journeys and experience feedback reports that make up the Service.

We do not use your data, your sites’ content, or your reports to train AI models. Our AI providers process this data as service providers under their commercial terms; we rely on commercial API arrangements under which provider-side training on our customers’ data is not permitted.

We share personal information only with service providers that help us operate the Service, under contracts that restrict their use of it:

• Google Cloud Platform / Firebase — cloud infrastructure, hosting, authentication, database, file storage, and secret storage;
• Anthropic — AI model inference for journey simulation and report generation;
• Stripe — payment processing and billing;
• other cloud infrastructure and operational tooling used to run, monitor, and secure the Service.

We may also disclose information if required by law, to protect our rights or the safety of others, or in connection with a merger, acquisition, or sale of assets (in which case this Policy will continue to apply to previously collected data).

Where the EU or UK General Data Protection Regulation applies, we process personal information on the following legal bases:

• Performance of a contract — providing the Service you signed up for, including accounts, runs, reports, and billing;
• Legitimate interests — securing and improving the Service, preventing abuse, and communicating with business users, balanced against your rights;
• Consent — where required, for example for optional analytics cookies; you may withdraw consent at any time;
• Legal obligation — where processing is necessary to comply with applicable law.

We retain personal information for as long as your account is active and as needed to provide the Service. Journey records, screenshots, and reports are retained so you can review runs over time. When you delete your account, we delete or de-identify your personal information within a reasonable period, except where retention is required for legal, billing, security, or dispute-resolution purposes. Staging credentials are deleted when you remove them or close your account.

We use industry-standard measures designed to protect your information, including encryption in transit and at rest on Google Cloud infrastructure, encrypted secret storage for any credentials you provide, access controls and least-privilege service accounts, and isolation of the browser containers that run AI customers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Depending on where you live, you may have the right to access, correct, export, restrict, object to the processing of, or delete your personal information, and the right to lodge a complaint with a supervisory authority.

To exercise any of these rights, contact us at support@mocktomer.ai. We will verify your request and respond within the time required by applicable law. You can also delete individual sites, runs, and stored credentials from your dashboard.

If you are a California resident, the California Consumer Privacy Act (CCPA/CPRA) gives you rights to know, access, correct, and delete personal information we hold about you, and the right not to be discriminated against for exercising those rights. We do not sell personal information and we do not share personal information for cross-context behavioral advertising, so no opt-out is required. To exercise your rights, use the contact details in Section 9; you may use an authorized agent where permitted by law.

We use cookies and similar technologies for two purposes: authentication and session cookies that keep you signed in and secure (strictly necessary), and analytics cookies that help us understand how the Service is used so we can improve it. You can control cookies through your browser settings; disabling strictly necessary cookies may prevent the Service from working.

The Service is for business use by adults and is not directed to anyone under 18. We do not knowingly collect personal information from anyone under 18. If you believe a person under 18 has provided us personal information, contact us and we will delete it.

We are based in the United States and process data on servers located in the United States. If you access the Service from outside the United States, your information will be transferred to, stored, and processed in the United States and other countries where our service providers operate. Where required, we rely on appropriate safeguards for such transfers, such as the European Commission’s Standard Contractual Clauses implemented by our service providers.

We may update this Policy from time to time. If we make material changes, we will notify you through the Service or by email before the changes take effect. The “Last updated” date above reflects the current version. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.

For privacy questions or requests, contact:
MineledgerAI LLC
support@mocktomer.ai