Privacy Policy

Last updated: March 2026 · Version 1.0

1. What we collect

We collect only what is necessary to provide the service:

Username and email address (if provided during registration)
Authentication tokens (stored securely, never shared)
Mock data you generate (stored in your isolated database)
Anonymous usage analytics (API call counts, table counts — no personal data)

2. What we do not collect

Passwords are stored as bcrypt hashes — never in plain text
We do not sell your data to third parties
We do not use tracking cookies or advertising pixels
Guest sessions are automatically deleted after 2 hours

3. Data storage

Your data is stored on servers in the EU. Each user has a fully isolated SQLite database. Registered account data is retained until you delete your account. You can request full deletion at any time via the profile page.

4. Training data consent

During registration, you may optionally consent to allow anonymised usage patterns to be used for improving the service. This is strictly opt-in. Consent can be withdrawn at any time from the profile page. No personally identifiable data is used — only aggregated, anonymised patterns.

5. AI access and your data

smart-mock.com supports an AI agent token (smai_) that allows AI assistants (ChatGPT, Claude, etc.) to build data schemas on your behalf. Here is exactly what AI can and cannot access:

Your username is never shared with AI unless you explicitly paste it into a chat yourself
The smai_ token is generated by you and given to AI — it is create-only and short-lived (5 minutes, 20 API calls)
AI with an smai_ token can create tables, columns, and relationships — but cannot read your generated row data
AI cannot delete anything — no tables, no data, no account
AI cannot access your email, password, or personal profile information
You decide when to generate an smai_ token and when to share it. Tokens expire automatically.

The "Allow my data for training pattern-recognition models" checkbox during registration refers only to anonymised usage patterns (API call counts, schema structures) — never to your account details or the content of your mock data.

6. GDPR rights

If you are in the EU, you have the right to access, correct, or delete your personal data. To exercise these rights, contact us or use the account deletion feature in your profile.

6. Cookies

We use only essential session storage (localStorage) for authentication. No third-party cookies are set.

7. Contact

Questions? Reach us via the in-app messaging system (Inbox) or at the contact details on the main website.

smart-mock.com · your data stays yours