Privacy Policy

Mishkim is run by [Company legal name], [Registered address]. We are the controller of the personal data described here. You can reach us about anything in this policy at sales@mishkim.ai.

• Account details: your email address and a securely hashed password.
• Workspace details: your workspace name and the answers you give during onboarding, such as what you plan to use Mishkim for.
• What you upload: product photos, garment photos and any other reference images, including photos of people if you upload them.
• What you make: generated images and videos, the AI models you create, your projects and films, and the prompts and settings behind each one.
• Product profiles: when you upload a product photo, an AI model reads it and we store a short structured description of the product (its name, category, colours and notable details). We use it to suggest scenes and looks for that product.
• Credits and billing history: your credit ledger, plans, trials and the amounts and dates of your payments. We do not receive or store card numbers; Dodo Payments holds those.

We use your data only to run the service for you:

• to sign you in and keep your account secure;
• to generate what you ask for and keep it in your workspace;
• to count, charge and refund credits, and to keep billing records;
• to send you service emails, such as confirming your address or resetting your password;
• to answer you when you contact us, and to prevent fraud and abuse.

We do not use your uploads or outputs to train AI models, and we do not sell your personal data or use it for advertising.

If you are in the EU, the EEA or the UK, the law asks us to say why we can use your data:

• To perform our contract with you: running your account, generating content and billing.
• Legitimate interests: keeping the service secure, preventing abuse and answering your questions.
• Legal obligations: keeping tax and billing records.

We use a small number of providers to run the service. Each gets only what it needs for its job:

• Supabase for sign-in, our database and file storage. Your account, workspace data, uploads and outputs are stored there.
• Google (Gemini API and Veo) to generate images and video and to read product photos. Your uploaded images and prompts are sent to Google to produce each output. Under Google’s paid Gemini API terms, Google does not use this data to improve its products.
• Dodo Payments to take payments. Dodo Payments is the Merchant of Record: it is the seller of record for your purchase, handles tax and holds your payment details under its own privacy policy.
• Our hosting provider to serve the website and app.

We may also share data if the law requires it, or with a buyer if our business is sold, in which case this policy keeps applying to your data.

Our providers may process data outside the country you live in, including in the United States. Where the law requires it, these transfers rely on recognised safeguards such as the European Commission’s standard contractual clauses.

We only use the cookies needed to keep you signed in and your session secure. We do not use advertising cookies, analytics cookies or tracking pixels, so there is no cookie banner to click through.

We keep your data for as long as your account is open. You can delete individual uploads and generations from your workspace at any time.

When your account is closed, we delete your data within a reasonable period. The exception is billing records, which we keep for as long as tax and accounting law requires.

Your files are kept in private storage and shown to you through short-lived links, and all traffic to the service is encrypted. No system is perfectly secure, but if a breach affects your data we will tell you and the authorities as the law requires.

Wherever you live, you can ask us to do any of the following. Email sales@mishkim.ai from the address on your account and we will reply within one month.

• Access: get a copy of the data we hold about you.
• Correction: fix data that is wrong.
• Deletion: close your account and erase your data.
• Export: get your data, including your uploads and outputs, in a format you can take elsewhere.
• Objection and restriction: ask us to stop or limit a particular use of your data.

EU, EEA and UK. These are your rights under the GDPR and UK GDPR. You can also complain to your local data protection authority, though we would like the chance to fix things first.

California and other US states. You have the right to know what we collect, to delete it, to correct it, and not to be treated differently for using these rights. We do not sell or share personal information for cross-context behavioural advertising, so there is nothing to opt out of.

If you upload a photo of someone else, for example as a reference for a model or a try-on, you must have their consent (see our Terms). If you are in a photo someone uploaded without your consent, write to sales@mishkim.ai and we will help.

Mishkim is not for anyone under 18, and we do not knowingly collect data from children. If you think a child has given us their data, contact us and we will delete it.

We will update this policy when what we do with your data changes. If a change is significant, we will tell you by email or in the app before it takes effect. The date at the top of this page shows when it last changed.

Questions or requests about your data go to sales@mishkim.ai, or by post to [Company legal name], [Registered address].