Privacy Policy

Last updated: June 2026

Soma Mockup Studio (“Soma”, “we”, “us”, or “our”) operates the website at somamockups.studio (the “Service”). We take the protection of your personal data seriously. This Privacy Policy explains what personal data we collect, why we collect it, how we use and share it, how long we keep it, and the rights you have over it under the EU General Data Protection Regulation (GDPR) and other applicable data protection law.

Please read this policy carefully. If you do not agree with it, please do not use the Service. By using the Service you confirm that you have read and understood how we handle your personal data as described here.

1. Who we are

Soma Mockup Studio is the controller responsible for the personal data processed through the Service. We are based in the European Union and operate the website at somamockups.studio. For any privacy related question, or to exercise the rights described below, you can reach us at hello@somamockups.studio.

“Personal data” means any information relating to an identified or identifiable natural person. “Processing” means anything we do with that data, such as collecting, storing, using, sharing, or deleting it.

2. Scope of this policy

This policy applies to personal data we collect when you visit our website, join our waitlist, or use the mockup generation features of the Service. It does not apply to third party websites or services that we link to but do not control. When you follow a link to a third party, their own privacy policy governs how they handle your data.

3. The information we collect

Information you provide to us

Waitlist email address. If you choose to join our waitlist, we collect the email address you submit. The waitlist form is handled on our behalf by Formspree, which receives and stores your submission so we can contact you.
Images and inputs you upload. When you use the generation features, you may upload images, such as a logo, and provide other inputs such as colours or text. We process these only to produce the mockup you requested. We do not store your uploaded images on our servers after processing, and the generated results live only in your browser session.
Messages you send us. If you email us, we receive your email address and the contents of your message so we can respond.

Information collected automatically

Technical and log data. Our hosting provider, Vercel, automatically records basic technical information needed to deliver and secure the Service, such as your IP address, browser type and version, device and operating system information, the pages you request, and the date and time of your requests.
Local storage and essential cookies.The Service uses your browser’s local storage and strictly necessary cookies to keep it working, for example to remember your in progress generation session and the state of the waitlist form. See our Cookie Policy for details.

We do not knowingly collect special categories of personal data, such as data revealing health, political opinions, or religious beliefs, and we ask that you do not submit such information through the Service.

4. How and why we use your information

We use the personal data described above for the following purposes:

To provide the Service and generate the mockups you request.
To send you waitlist updates and product announcements that you have asked to receive.
To respond to your enquiries and provide support.
To operate, maintain, debug, and improve the Service.
To keep the Service secure, prevent abuse and fraud, and protect our rights and the rights of our users.
To comply with our legal obligations and enforce our terms.

We do not use your personal data to make decisions about you based solely on automated processing that would produce legal or similarly significant effects.

5. Legal bases for processing

Under the GDPR we must have a lawful basis for processing your personal data. We rely on the following bases:

Consent (Article 6(1)(a)), for sending you waitlist updates. You can withdraw your consent at any time, and doing so does not affect the lawfulness of processing carried out before withdrawal.
Performance of a contract or steps prior to a contract (Article 6(1)(b)), to provide the generation features you ask us to perform.
Legitimate interests (Article 6(1)(f)), to secure, operate, and improve the Service, provided those interests are not overridden by your rights and freedoms.
Legal obligation (Article 6(1)(c)), where we are required to process data to comply with the law.

We do not sell your personal data, and we do not share it with third parties for their own marketing. We share data only with the service providers who help us run Soma, and only to the extent they need it to perform their service for us. These providers act as our processors under written agreements and may include:

Formspree, which receives and stores waitlist form submissions on our behalf.
Google, whose Gemini model processes the inputs you provide in order to generate your mockup.
Vercel, which hosts the Service and serves it through its content delivery network.

We may also disclose personal data where we are legally required to do so, to respond to lawful requests by public authorities, or to protect our rights, our users, or the public. If our business is involved in a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction, and we will notify you before it becomes subject to a different privacy policy.

7. International data transfers

Some of our service providers are located outside the European Economic Area, including in the United States. Where we transfer personal data outside the EEA, we take steps to ensure it receives an adequate level of protection, for example by relying on European Commission adequacy decisions or on Standard Contractual Clauses together with appropriate additional safeguards. You can ask us for more information about these safeguards using the contact details below.

8. How long we keep your data

We keep personal data only for as long as we need it for the purposes set out in this policy, or for as long as the law requires.

We keep your waitlist email address until you ask us to remove it or withdraw your consent.
We do not retain the images you upload after your session has ended and the result has been produced.
Technical and log data is kept for a limited period by our hosting provider for security and operational purposes.

9. How we protect your data

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, or alteration, including encrypted connections and access controls. No method of transmission or storage is completely secure, so while we work to protect your data we cannot guarantee absolute security.

10. Your rights

Subject to the conditions set out in the GDPR, you have the following rights over your personal data:

Access. The right to be told whether we process your data and to receive a copy of it.
Rectification. The right to have inaccurate data corrected and incomplete data completed.
Erasure. The right to have your data deleted in certain circumstances.
Restriction. The right to ask us to limit how we use your data in certain circumstances.
Portability. The right to receive certain data in a structured, commonly used, machine readable format.
Objection. The right to object to processing based on our legitimate interests.
Withdraw consent. Where we rely on consent, the right to withdraw it at any time.

To exercise any of these rights, email us at hello@somamockups.studio. We will respond within the time limits set by law. You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state where you live or work, if you believe we have not handled your data correctly.

11. Cookies and similar technologies

We use only strictly necessary cookies and local storage to run the Service. We do not use advertising or third party tracking cookies. For a full explanation, please see our Cookie Policy.

12. Children

The Service is not directed to anyone under the age of 16, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

13. Links to other websites

The Service may contain links to websites and services that we do not operate. We are not responsible for the privacy practices of those third parties, and we encourage you to read their privacy policies before providing them with any personal data.

14. Changes to this policy

We may update this policy from time to time to reflect changes in the Service, our practices, or the law. When we do, we will revise the date at the top of this page, and where the changes are significant we will take reasonable steps to bring them to your attention. Your continued use of the Service after an update means you accept the revised policy.

15. How to contact us

If you have any questions about this Privacy Policy or how we handle your personal data, or if you would like to exercise your rights, please contact us at hello@somamockups.studio.