Your data
stays yours.

MockAllies is operated by [BUSINESS LEGAL NAME], a [JURISDICTION] entity registered at [BUSINESS PHYSICAL ADDRESS]. We are the data controller responsible for the personal data you provide and the information we collect about your use of MockAllies.

Data Protection Contact: If you have questions about this Privacy Policy, want to exercise your data rights, or have privacy concerns, please contact us at [SUPPORT EMAIL]. We are committed to responding to all data subject rights requests within one month of receipt, or as required by applicable law.

Account Information: When you create an account, we collect your name, email address, password (hashed), phone number (optional), company name (optional), job title (optional), and any profile information you choose to add.

Session Recordings and Transcripts: When you use MockAllies's practice features, we record audio of your voice during simulated buyer conversations, automatically transcribe that audio, and store both the recording and transcript. These are tied to your account and your session history.

Usage and Activity Data: We collect information about how you use MockAllies: which lessons you access, how long you spend in each section, how many practice sessions you complete, which buyer personas you practice with, your performance metrics, and feedback you receive on sessions.

Payment Information: We collect payment information through Stripe, our third-party payment processor. We do not directly store your credit card numbers, bank account details, or full payment method data — Stripe handles and secures all payment data. We retain a record of transactions (date, amount, subscription plan, status) for billing and accounting purposes.

Technical Information: We automatically collect information about your device, browser, IP address, operating system, and how you interact with MockAllies (page views, clicks, session duration). This helps us understand how the service is being used and identify technical issues.

To Provide The Service (Contract Performance): We use your account information, session recordings, and transcripts to enable you to practice with simulated buyers, receive feedback, track your progress, and replay your sessions. This is necessary to perform the service you pay for.

To Process Payments (Contract Performance): We use payment information to process subscriptions, credit purchases, and to send you invoices and billing statements.

To Improve MockAllies (Legitimate Interest): We analyze aggregated and anonymized usage data to understand which lessons are most helpful, where users struggle, and how to improve the platform. We also use this data to identify and fix technical bugs and security issues. This analysis does not include individual session recordings or transcripts unless you explicitly agree to share specific feedback.

To Communicate With You (Contract Performance / Legitimate Interest): We send you emails about your account, subscription status, important changes to MockAllies, responses to your inquiries, and educational content related to sales training. You can opt out of non-essential emails at any time through your account settings or by replying "unsubscribe" to any message.

For Legal Compliance (Legal Obligation): We use your information to comply with laws, respond to legal requests, enforce our Terms of Service, and protect the rights and safety of MockAllies, our users, and the public.

Explicit Commitment — No Training, No Sharing: We do not use your session recordings, transcripts, or any personal data you provide to train, fine-tune, or improve any AI models. We do not share your recordings or transcripts with third parties for their own use, advertising, or training. We do not sell your personal data.

Our Sub-Processors: Your information is shared with trusted service providers only as necessary to deliver MockAllies and comply with legal obligations:

Google (Gemini Live API): When you practice with MockAllies's simulated buyer personas, your voice audio is sent to Google's Gemini Live API to generate the AI buyer's responses. Google is paid as an API service provider. Critically, Google's paid-tier API (which MockAllies uses) does not use your prompts, responses, or session audio to train or improve Google's models — this is explicitly stated in Google's Terms of Service for paid API customers. Your session data remains your own and is not used by Google for model training. Session audio is temporarily processed by Google to generate responses but is not retained by Google after the API call completes.

Stripe (Payment Processing): We use Stripe to process all payments. When you enter payment information at checkout, it is transmitted directly to Stripe's secure servers. We do not see or store your full payment method details. Stripe retains transaction records as needed for payment processing and fraud prevention. You can review Stripe's privacy practices at https://stripe.com/privacy.

Supabase (Cloud Storage): Your session recordings, transcripts, account data, and usage information are stored on Supabase, a PostgreSQL-based cloud infrastructure provider. Supabase is our cloud storage and database partner and has access to this data solely to provide storage, retrieval, and backup services. Supabase is contractually bound to process data only on our behalf and to maintain appropriate security measures.

No Other Sharing: We do not share your personal data, recordings, or transcripts with any other third parties, including marketing partners, data brokers, or analytics services beyond those listed above.

What We Do NOT Do:

— We do not create voiceprints or voice profiles from your session audio.
— We do not perform speaker identification or voice-biometric matching.
— We do not use your session audio to train, fine-tune, or improve any AI models, including Google Gemini, our own internal models, or any other machine-learning system.
— We do not share your session recordings with third parties, including other users, marketing partners, or research organizations.

How Long We Keep Recordings: Your session recordings and transcripts are retained for [RETENTION PERIOD] from the date they were created. After this period expires, recordings and transcripts are automatically and permanently deleted from our systems. This retention period is enforced by automated deletion and applies to all users without exception. If you want to preserve a session recording beyond this period, you must download or export it before the expiration date. Once the retention period ends, we cannot recover deleted recordings.

Your Recording Controls: You can download, export, or manually delete individual session recordings from your account at any time. You can also request bulk export of all your data, including all session recordings and transcripts, at [SUPPORT EMAIL]. We will provide your data export within 30 days.

Depending on your location, you have the following rights over your personal data and recordings:

Right of Access: You have the right to request and receive a copy of all personal data we hold about you, including your session recordings, transcripts, account information, and usage history. You can download most of this information directly from your account dashboard. For a complete data export, email [SUPPORT EMAIL].

Right to Data Portability: You have the right to request that we provide your personal data and recordings in a structured, commonly used, and machine-readable format (such as JSON or CSV). This allows you to transfer your data to another service if you choose.

Right to Deletion (Right to Be Forgotten): You have the right to request deletion of your account and all associated data, including session recordings and transcripts. Upon request, we will delete your account and all personal data within 30 days, except where we are required by law to retain certain information (such as transaction records for accounting or audit purposes). Please note: once deleted, your account and recordings cannot be recovered.

Right to Correct Inaccurate Data: If any personal information we hold about you is inaccurate or incomplete, you have the right to request correction. You can update most information directly in your account settings, or contact us at [SUPPORT EMAIL] for assistance.

Right to Restrict or Object to Processing: In certain circumstances, you have the right to request that we restrict how we use your data or to object to certain types of processing. For example, if you object to analytics processing, we will stop collecting usage analytics from your account, though this may impact your ability to use certain features that depend on data aggregation.

How to Exercise Your Rights: To exercise any of these rights, contact [SUPPORT EMAIL] with your request and account email address. Please include "Data Subject Rights Request" in the subject line. We will respond within one month of receiving your request. If we need additional information to verify your identity, we will ask. If we cannot fulfill your request, we will explain why.

No Discrimination: We will not discriminate against you for exercising your data rights. You will not be denied service, charged a higher price, or receive reduced quality of service because you asked to see, delete, or port your data.

MockAllies operates globally. Your personal data, session recordings, and transcripts may be transferred to, processed in, and stored in countries other than the country in which you reside. These countries may not have data protection laws equivalent to those in your home country.

Legal Basis for Transfers: Where required by law (such as under the EU General Data Protection Regulation), we rely on Standard Contractual Clauses approved by the European Commission to transfer data from the EU to countries outside the European Economic Area. These clauses ensure appropriate safeguards are in place for your data even in countries without an adequacy decision.

Our Service Providers' Locations: Supabase (our storage provider) operates data centers in multiple regions, and your data may be replicated across regions for redundancy and backup. Google (Gemini API) and Stripe (payments) operate globally and may process data across multiple countries. When you use MockAllies, you consent to these international transfers.

MockAllies is not directed at children under the age of 18. We do not knowingly collect personal information from anyone under 18. If we become aware that a user is under 18, we will delete their account and associated data immediately. If you believe a child has created an account, please contact us at [SUPPORT EMAIL] and we will investigate and remove the account.

Privacy-Focused Analytics: We use privacy-focused, cookieless analytics tools that do not require consent and do not store identifying information about individual users. These tools measure aggregate usage patterns (how many people visit MockAllies, which pages are most popular, typical session duration) without tracking individual users across sessions or creating user profiles.

No Cookies for Tracking: We do not use cookies, pixels, or similar tracking technologies to follow you across the internet or to build profiles for advertising purposes. We use cookies only for essential functions like keeping you logged in and preventing fraud.

No Third-Party Advertising: We do not use your data for targeted advertising on third-party platforms. We do not share your data with ad networks, data brokers, or marketing platforms.

We implement industry-standard technical and organizational security measures to protect your personal data and session recordings from unauthorized access, alteration, disclosure, or destruction. These measures include encryption in transit (TLS/HTTPS), encryption at rest, regular security audits, and restricted access to sensitive data.

Limitation: While we take security seriously, no system is 100% secure. We cannot guarantee that unauthorized third parties will never gain access to your data. You use MockAllies at your own risk. If you become aware of a security breach, please contact [SUPPORT EMAIL] immediately.

Session Recordings and Transcripts: As stated in Section 05, session recordings and transcripts are retained for [RETENTION PERIOD] and then automatically deleted.

Account Data: Account information (name, email, password, profile data) is retained for as long as your account is active. When you delete your account, account data is deleted within 30 days, except where we are required by law to retain information for tax, accounting, or legal purposes (such records are typically retained for [RETENTION PERIOD]).

Payment and Transaction Records: Transaction records are retained for [RETENTION PERIOD] for accounting, tax compliance, and dispute resolution purposes.

Usage Analytics: Aggregated, anonymized usage analytics are retained indefinitely, as they do not identify you personally and help us improve MockAllies.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of material changes by email or by posting a notice on MockAllies. Your continued use of MockAllies after changes are posted constitutes your acceptance of the updated Privacy Policy. We encourage you to review this policy periodically.

If you have questions about this Privacy Policy, concerns about how we handle your data, or want to exercise your data rights, please contact us at [SUPPORT EMAIL]. We will respond within one month of your inquiry.