Privacy Policy

This Privacy Policy explains how MochiMotion ("we", "us") collects, uses, and shares information when you use our website and services ("Services").

1. Information we collect

You give us:

• Account info — name, email, password (hashed), profile picture if you sign in with Google.
• Order info — shipping address, items purchased, sizes, colors, prompts for AI customization.
• Communications — messages, reviews, quiz answers (e.g., Fit Finder), email subscribes.

Collected automatically:

• Device & usage — browser, IP address, pages viewed, referring URL, time zone.
• Analytics — anonymous A/B test events, funnel drop-off, wishlist and cart activity.
• Cookies — session cookies for login, functional cookies for cart persistence.

From partners:

• Stripe — the last 4 digits of your card, brand, and payment status. We never see or store your full card number.
• Google — when you sign in with Google, your email, name, and picture (per your Google privacy settings).

2. How we use it

• Fulfill your orders and provide the Services.
• Send transactional email (order confirmations, restock alerts, welcome emails).
• Send marketing email if you opted in (unsubscribe anytime — link in every email).
• Improve the product with anonymous analytics.
• Detect and prevent fraud.
• Comply with legal obligations.

3. Legal bases (for EEA/UK visitors)

We process your data on the following bases: performance of a contract (to fulfill your order), your consent (for marketing email), legitimate interests (analytics and security), and legal obligations (tax, accounting).

4. Who we share it with

• Stripe — payment processing.
• Resend — sending transactional and marketing email.
• Google — social login (only if you use it).
• Shipping carriers — to deliver your order.
• Service providers — hosting, analytics, customer support tools bound by confidentiality.
• Legal / safety — if required by law or to protect our rights or users.

We do not sell your personal information.

5. AI processing

When you use the AI customization tool, your prompt is sent to our AI image provider (Google Gemini, via Emergent) to generate a preview. Prompts and preview images may be retained by us to improve product quality and by the provider under their own terms.

6. Data retention

We keep your account and order data as long as you have an account, plus a reasonable period afterward to comply with tax and legal obligations. Analytics events are retained in aggregated form. You can request deletion at any time (see Your Rights below).

7. Your rights

Depending on where you live, you may have the right to access, correct, delete, or port your personal data, restrict or object to processing, and withdraw consent. Californians have additional rights under the CCPA. To exercise a right, email us at privacy@mochimotion.com — we'll respond within 30 days.

8. Cookies & tracking

We use strictly-necessary cookies (login session, cart), and analytics events for product improvement. You can control cookies in your browser settings. Blocking strictly-necessary cookies may break login and checkout.

9. Security

We use HTTPS, hashed passwords (bcrypt), scoped access tokens, and least-privilege database access. No system is 100% secure — please use a strong, unique password.

10. Children

The Services aren't directed to children under 13, and we don't knowingly collect data from them. If you believe a child has provided us data, please email us and we'll delete it.

11. International transfers

Your data may be processed in the United States or other countries where our service providers operate. We take reasonable steps (contractual clauses, encryption) to protect it.

12. Changes

We'll post updates to this policy here with a new effective date. Material changes will be highlighted at the top of this page.

13. Contact

Privacy questions: privacy@mochimotion.com.