Privacy Policy

LAST UPDATED · JULY 7, 2026

Mocai is operated by Mocai Inc., a Delaware corporation based in California (“Mocai”, “we”, “us”). This policy explains what we collect, why, how long we keep it, and the rights you have over it. It covers mocai.ai, the Mocai portal, the public API, and the Blender add-on (together, the “Service”).

1. What we collect

• Account information. Your email address, display name, and authentication credentials, handled by Firebase Authentication. If you sign in with a third-party provider, we receive the basic profile that provider shares.
• Content you upload. The videos you submit for processing, along with the titles and options you choose (for example hand capture, person selection, or smoothing level).
• Content we derive. Processing a video produces motion data: a 3D body mesh, a 70-joint skeleton, raw keypoints, thumbnails, and any export files you generate. This data belongs to your account like the upload it came from.
• Billing information. Payments are processed by Stripe. We store your subscription status, plan, and references to Stripe records. Full card numbers never reach our systems.
• Usage and technical data. Log data such as IP address, browser and device information, request timestamps, processing minutes used, and API request metadata. We use this to run, secure, and meter the Service.
• Communications. Emails you send us, and our records of transactional emails we send you.

2. People who appear in your videos

Motion data derived from a video describes the body movement, proportions, and pose of the people in it. We treat this data carefully:

• We use it solely to provide the Service to the account that uploaded the footage.
• We do not use it to identify anyone, match people across uploads or accounts, or build profiles of the people who appear in footage.
• We never sell it or share it for advertising.
• It is deleted on the same schedule as the upload it came from.

When you upload footage, you are responsible for having the right to use it, including any consent required from identifiable people who appear in it. This matters especially in places with biometric-privacy laws. See our Terms of Service for details.

3. How we use information

• To provide the Service: process takes, store your library, and serve exports.
• To bill you and manage your subscription.
• To send transactional email (delivered via Resend): account, billing, and service notices. We do not send marketing email without your consent.
• To respond when you contact us.
• To secure the Service, prevent abuse, and enforce plan limits.
• To improve the Service using aggregate, de-identified information (for example, average processing times). We do not use your videos or derived motion data to train machine-learning models.

4. Legal bases (EEA and UK visitors)

Where the GDPR or UK GDPR applies, we process your data to perform our contract with you (providing the Service), for our legitimate interests (securing and improving the Service), to comply with legal obligations, and with your consent where we ask for it.

5. Who we share data with

We share data only with the service providers we need to run Mocai, and only what each needs:

• Google Cloud Platform: file storage, databases, authentication, and messaging infrastructure (United States).
• Mocai-operated processing servers: the GPU infrastructure that runs reconstruction.
• Stripe: payment processing and billing.
• Resend: transactional email delivery.

Beyond that, we disclose data only if the law requires it, to protect the rights and safety of Mocai or others, or as part of a corporate transaction such as a merger or acquisition (in which case this policy continues to apply to your data). We do not sell personal information, and we have not sold it in the past.

6. How long we keep it

• Uploads and takes are kept for your plan's retention window (see Pricing), then deleted automatically. We warn you before a take expires.
• Abandoned uploads that never become takes are swept within 7 days.
• Account data is kept while your account is open. When you delete your account, your content is deleted and we retain only the minimal records needed for billing disputes, tax, and legal compliance.
• Logs and backups cycle out on a rolling basis within 90 days.

7. Security

Data is encrypted in transit (TLS) and at rest. Access to stored content is scoped with short-lived signed URLs, and internal access is limited to what operating the Service requires. No system is perfectly secure; if a breach affects your data, we will notify you as the law requires.

8. International transfers

Mocai is operated from the United States and data is processed there. If you use the Service from the EEA, UK, or elsewhere, your data is transferred to the US. Where required, we rely on recognized safeguards such as standard contractual clauses.

9. Your rights

You can exercise most rights directly from your account:

• Access and portability: view your takes anytime and download your data in standard formats (FBX, GLB, BVH, USD, keypoints).
• Deletion: delete individual takes or your entire account from the account page.
• Correction: update your account details anytime.

If you are in the EEA or UK, you also have the rights to object to or restrict processing and to complain to your supervisory authority. If you are a California resident, the CCPA/CPRA gives you rights to know, correct, and delete personal information, and the right not to be discriminated against for exercising them; we do not sell or share personal information as those terms are defined in the CPRA, so there is nothing to opt out of. To exercise any right you can't reach from your account, email info@mocai.ai.

10. Children

The Service is not directed to children under 13 and we do not knowingly collect their personal information. If you believe a child has created an account, contact us and we will remove it.

11. Cookies

We use only the cookies needed to keep you signed in and keep the Service secure. We do not use third-party advertising or cross-site tracking cookies.

12. Changes to this policy

If we change this policy, we will post the new version here and update the date at the top. For material changes we will also notify you by email before they take effect.

13. Contact

Questions, requests, or concerns: info@mocai.ai. We answer privacy inquiries from this address, including data-protection requests.