Mannequin Privacy Policy

Last updated October 19, 2026

10951811 Canada Inc. operates Mannequin at getmannequin.com and app.getmannequin.com. This policy explains how we handle personal information in the browser studio and its online services. Your work is private in our service; you choose what to export or share.

Accounts and private work

Supabase handles your email address and password for authentication. Resend handles the recipient address and account confirmation or password recovery message. We require email confirmation before account access. We do not receive your password through support emails.

We store account identifiers, selected uploaded photos, generated images, references, settings, instructions, work and collection details, generation status and credit records to provide your studio. Images, notes and descriptions can contain personal information, so include only what you need. Private photo storage and the database use a dedicated Supabase project in Canada. Google Cloud runs request handling and private job processing; Cloudflare delivers and protects the website and browser gateway.

Cookies and browser storage

Essential Secure, HttpOnly session cookies keep you signed in. Browser storage holds account-scoped drafts, favourites, branding, watermark logos, captions and saved request identities. Some of this remains only in the current browser. Saving a photo reference or backdrop uploads that selected image to the private service. Importing a watermark logo and rendering export layouts happen in the browser. Uploads may retain embedded source metadata; the server normalizes images used for AI processing without that metadata. Visible information in an image remains.

The website and providers process ordinary connection information such as IP address, browser information, requested pages and request times to deliver and protect the service. We have not installed advertising pixels or optional advertising analytics in Mannequin. We do not sell personal information or use private photos in public marketing without separate permission.

AI image processing

When you submit an AI request, OpenAI receives the selected images, references and instructions needed for that feature. This can include a garment original, selected backdrop, display or style references, staging guidance, written brief and saved work details. Caption requests can include the chosen image, name, notes, pictured size and caption voice. Optional public shop profile details are included only when you choose that option. Prices typed into notes or visible in photos can still be included.

AI output can reproduce information in the inputs. Avoid unnecessary client names, contact details, sensitive personal information, confidential records or payment details. Obtain any required permission from people whose information appears in a photo or request. Review results before sharing.

OpenAI API content is excluded from model training by default unless the customer opts in. Provider safety monitoring and other retention can still apply; disabling response storage does not establish zero retention. See OpenAI API data controls for current handling and exceptions. You can decline future processing by not submitting another AI request and continue using available saved work and local export tools.

Purchases and support

Stripe processes payment details and billing address, email and tax information entered in hosted Checkout and the billing portal. We receive account-linked customer, checkout, payment, invoice and subscription identifiers, amounts, billing periods, payment status, refunds and disputes to verify credit grants and manage billing. We do not receive complete card details. Stripe's Privacy Policy applies to information handled on its pages.

If you contact support, we receive your address, correspondence and information or attachments you provide to respond and investigate. Never send passwords, authentication tokens or full card details.

Why we use information

We use information to provide requested features, authenticate access, keep private work available, sync eligible content, manage purchases and credits, answer support, recover interrupted requests, diagnose failures, prevent abuse and meet legal obligations. Our providers receive information necessary for their roles and may use subprocessors under their applicable agreements.

Access by us is limited to people who need it to operate the service or handle a request. We may disclose information to comply with law, protect rights or safety, investigate fraud or security incidents, or in a business transfer subject to applicable protections and required notices.

Processing outside Canada

Some information may be processed or stored outside Quebec or Canada, including in the United States. Foreign law can permit authorities in those jurisdictions to access it. We remain responsible for personal information entrusted to providers and apply safeguards required by applicable law. A Canadian storage region does not mean all processing stays in Canada.

Retention and deletion

We keep hosted photos, requests and library records as needed for saved work and associated services. Use Work to delete individual photos or versions. Deletion removes library access and initiates removal of eligible files. Content still used by another work item, collection or accepted request can remain until no longer needed. Removing a collection does not delete its work; removing a local favourite does not delete a source photo or request.

Use Your studio → Account & help → Delete my account to close access and schedule removal of private photos, submitted personal content and the authentication profile. Cleanup runs in the background and retries temporary failures. Previously accepted upload links can remain valid briefly; later cleanup also removes files received through them. The studio clears this account's local library, branding and session credentials. Export copies and information you have shared elsewhere are not recalled.

Limited purchase, credit-consumption, cost, security and dispute records can remain as needed to fulfil purchase rights, handle refunds, prevent duplicate grants and meet legal obligations. Backups and provider safety records can take longer to expire than active files. We do not promise immediate erasure from every system. Account deletion does not refill free credits or guarantee restoration of deleted content. Confirm subscription cancellation separately if it remains pending.

Security and your choices

We use HTTPS, account-scoped access controls, private photo buckets and temporary signed viewing links. No storage or transmission method is completely secure. Protect your account and device, and contact us promptly if you suspect unauthorized access.

Depending on applicable law, you may request access, correction, deletion, withdrawal of consent or a portable copy of eligible information. Other rights, including objection, restriction or de-indexing, can apply. We do not use AI alone to make decisions with legal or similarly significant effects about you. Withdrawal applies to future processing where consent is the legal basis and cannot recall information already shared or cancel a subscription.

Privacy contact

Contact the person responsible for privacy at 10951811canadainc@gmail.com with “Mannequin privacy” in the subject. We may request proportionate information to verify your authority. We respond within applicable legal deadlines and explain any lawful refusal or review rights. You can raise concerns with Quebec's Commission d’accès à l’information or the Office of the Privacy Commissioner of Canada, as applicable.

Operator: 10951811 Canada Inc., 1502 Rue Noel Lareau, Chambly, Quebec J3L 5M7, Canada. We update this policy's date and provide notice or seek consent for material changes where required.