Privacy Policy

What we collect

• Account details. You sign in with Google. Google gives us your name, email address and profile picture. We never see your Google password.
• Sign-in sessions. To keep you signed in, we store a session record with the IP address and browser user agent of the device you signed in from.
• Workspaces. Workspace names, members and their roles, and invitations, including the email address of each person you invite.
• Content you give us. The URLs you submit, the text of the pages we fetch from them, the page summaries and audiences we generate and any edits you make, run results, fix lists, share links, and the display name and logo you upload for shared reports.
• Billing details. Stripe handles payment. We store your Stripe customer ID and your subscription status (plan, billing interval, renewal and cancellation dates). We never see or store your full card number.
• Usage records. For each run we record which models ran, how many tokens they used, what they cost and how long they took.
• Website analytics. DataFast measures visits to our website: the pages viewed, the referring site, device and browser type, and an approximate location derived from your IP address.

How we use it

• To sign you in and to run the service: fetch pages, run simulations, show reports.
• To manage workspaces, subscriptions, plan limits and share links.
• To answer your support requests and send messages about your account or billing.
• To understand how the website is used, check our costs and improve the product. We may use de-identified, aggregated results across runs to make simulations more accurate.
• To prevent abuse, keep the service secure and meet legal obligations.

We do not sell your personal information, and we do not use your content to train AI models.

Pages you submit

When you start a run, we fetch the URL you submitted, in the same way that a browser does, and read the public text of that page. Submit only pages that are publicly available. If a page contains personal information about other people, we process that text in the same way as the rest of the page, so do not submit pages that you would not want summarised by an AI model.

Who we share it with

We use these service providers to run Mock Audience:

• Convex: database, file storage and backend hosting. Stores all account and run data.
• Vercel: website hosting.
• Google: sign-in.
• OpenRouter, which sends model requests to Anthropic (Claude) and TypeSafe (Jev): the page text, page summaries and audiences needed to produce your results.
• Stripe: checkout, payments, tax and the customer portal. Stripe, through its Link service, is the merchant of record for your subscription and handles your payment details under its own privacy policy.
• DataFast: website analytics. When you start checkout, we pass your DataFast visitor and session IDs to Stripe, so that we can see which marketing channel led to a purchase.

Other members of your workspace can see the workspace's sites, runs and reports. Anyone who has a share link can see that report, and the branding on it. We also disclose information when the law requires it.

Overseas disclosure

Our providers store and process data in the United States and in other countries where they operate. By using Mock Audience, you acknowledge that your personal information goes to these countries. We choose providers that protect data with security measures that are appropriate to the data.

Cookies and local storage

• Sign-in cookies keep you signed in. The dashboard does not work without them.
• Analytics cookies (datafast_visitor_id and datafast_session_id) count visits and sessions.
• Local storage keeps your light or dark theme choice.

We do not use advertising cookies. You can block or delete cookies in your browser settings.

How long we keep it

We keep your account and workspace data while your account is active. You can delete your account at any time from the Account page in the dashboard, or ask us to do it. We then delete your account, sign-in sessions and memberships at once, and the content of the workspaces that only you used within 30 days (usually within minutes). Workspaces that other members use stay with them. We keep usage records, which show models, tokens and costs and do not identify you, and records that we must keep by law, such as billing and tax records. Stripe keeps its own payment records under its own policy.

Security

All traffic uses HTTPS, and the dashboard shows each workspace's data only to its members. No system is fully secure. If a data breach is likely to cause you serious harm, we will tell you and the Office of the Australian Information Commissioner as the law requires.

Your rights

You can ask us for a copy of the personal information we hold about you, and ask us to correct it. You can delete your account yourself from the Account page. You can revoke a share link or remove your shared report branding at any time from the dashboard. You can cancel your subscription from the billing page.

If you are in the European Economic Area, the United Kingdom or a US state with a privacy law, you can have more rights, for example to object to processing or to get your data in a portable format. We will respect these rights as the law requires.

To make a request, email support@mockaudience.com. We reply within 30 days.

Complaints

If you have a concern about how we handle your personal information, email support@mockaudience.com first. If our reply does not solve the problem, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au, or to the data protection authority in your country.

Children

Mock Audience is a business tool for people aged 18 or over. We do not knowingly collect personal information from children.

Changes to this policy

When we change this policy, we update the date at the top of this page. If a change is significant, we tell you by email or in the dashboard before it applies.

Contact

Anthony Kroeger, Australia. Email support@mockaudience.com.