Your data, in plain words.

Draft — not approved for publication. This text is waiting for final legal review. The operator details are confirmed.

MockAllies is run by AVEN STUDIOS računalniško programiranje Marko Vodopivec s.p., a sole proprietor registered in Slovenia, at Potok pri Dornberku 6, 5294 Dornberk, Slovenia. We decide how your personal data is used, which makes us the controller under the EU General Data Protection Regulation (GDPR).

For anything about your data, email support@mockallies.com. We may ask you to confirm you own the account before we act on a request. Never send us a password or card number.

• We collect what the service needs.Your account, your practice calls and feedback, what you tell Selly about your offer, and your billing records.
• Recordings and transcripts are deleted after 30 days.Scores and progress stay while your account is open.
• On individual plans, practice data helps improve Selly.We remove your name and contact details first. You can switch this off at any time, for free.
• Business and team plans are never used for training.
• No ads and no data sales.The website counts visits and a few clicks as plain totals, with no cookies. If you accept, an analytics provider also records how you move through our pages, with typing hidden. The app uses cookies only to keep you signed in.

We only collect what we need to run MockAllies, bill you and keep the service safe.

• AccountYour email address, a securely hashed password, your name if you give it, and your plan.
• Practice callsYour voice while a call is running, the recording and transcript of the call, the settings you chose, and the feedback and scores the call produced.
• What you tell SellyThe details you enter about what you sell, your prices, your openers and your objection answers, plus your messages to the Sales AI Assistant.
• Prospect researchThe company name and website you enter, your answers about the call, and the research file made from that company's own public website. It sits in your project, and it is exported and deleted with your account.
• ProgressWhich lessons and calls you completed, your minutes used and your results over time.
• BillingYour plan, amounts, dates, country and invoice details. Card payments are handled by our payment provider; we never see or store your full card number.
• Messages to usSupport emails, reports sent through the contact form, and withdrawal or refund requests.
• Website useVisits, plans-page views and pre-order clicks, as plain totals with nothing that identifies you. If you accept cookies: recordings of how you use our pages with typed text hidden, plus your browser, device and rough location.
• Technical dataIP address, browser and device type, and server logs we need for security and to fix errors.

The GDPR requires a legal basis for each use of your data. These are ours.

• To run the service you signed up for (contract)Practice calls, feedback, progress, your account, the Assistant, and support.
• To bill you and keep records (contract and legal obligation)Payments, invoices and the records tax law requires us to keep.
• To keep MockAllies safe (legitimate interest)Preventing abuse and fraud, securing accounts and fixing errors.
• To improve Selly and train our AI (legitimate interest)On individual plans only, as explained in the next section. You can object at any time, for free.
• To research a prospect before a call (legitimate interest)When you ask for research, we read public business information about the company you name: its own website and, if a web search runs, public search results. Research covers companies only. We refuse requests about a named person, and for a sole trader we keep business facts only (their trade, business address and business reviews), never anything about family, health, home or private life. A person's name is kept only where the company's own website names them in their business role; other names are left out of the file. Anyone whose business appears in a research file can object by writing to support@mockallies.com.
• To understand and improve the website (legitimate interest and consent)Cookie-free totals of visits and clicks rest on our legitimate interest. Page recordings and analytics cookies are used only with your consent, which you can withdraw at any time with Cookie settings at the bottom of every page.
• Service emails (contract)Account, billing, security and important changes. Optional reminders are sent only if you turn them on, and you can turn them off at any time.

On individual plans, we use practice data to make Selly a better buyer and a better coach. That includes training and testing AI models, our own among them.

What we use: transcripts of practice calls, the feedback and scores they produced, and your conversations with the Sales AI Assistant. Before we use them, we remove your name, email address and other contact details. We don't use your voice to identify you.

What we never use: anything from a business or team plan, your payment details, or messages you send to support.

Switching it off: email support@mockallies.com with the subject “Training opt-out”. It's free, open to every plan including the trial, and changes nothing about your plan, price or features. From then on, your data isn't added to training sets. Copies we haven't used yet are deleted. A model that has already been trained can't unlearn individual examples, but no new data from you goes into it.

We don't sell your data and we don't use it for advertising.

We use a small number of service providers. Each one processes data only on our instructions, under a data processing agreement, and only for its own job.

• Hosting and databaseOur servers, database and file storage in the EU.
• AI model providersThey run the voice buyer, the call feedback and the Sales AI Assistant. They receive the content of a call or message while it is being processed.
• Web search providerRuns the web search in prospect research. It receives the company name, its website and your answers about the call. This one call uses the provider's global service, so it may be processed outside the EU. Its results are shown only to you and are not sent to any other AI provider.
• Payment providerHandles checkout, cards, invoices and fraud checks.
• Email deliverySends account, billing and confirmation emails.
• Website hostingServes this website.
• Website analytics and recordingRecords how the website is used, only if you accept. Hosted in the EU; its parent company is outside the EU, and the safeguards below apply.

If you ask us, we'll tell you exactly which companies received your data. Write to support@mockallies.com. We also share data when the law requires it, for example with tax authorities or a court.

Some of our providers, mainly AI model and email providers, process data outside the European Economic Area, for example in the United States.

We only allow this where the GDPR does. That means either a country the European Commission has found adequate (for the United States, a company certified under the EU-US Data Privacy Framework) or the Commission's Standard Contractual Clauses. Ask us and we'll send you a copy of the safeguards that apply.

Our website analytics provider keeps its data in the EU, but its parent company is outside the EU, so the same safeguards apply.

We keep each kind of data only as long as it is needed. After that it is deleted automatically.

• Call recordings and transcripts30 days, then deleted automatically.
• Scores, feedback and progressWhile your account is open.
• Account and profileUntil you delete your account.
• In-app notifications8 weeks.
• BackupsRolling backups are overwritten within 14 days.
• Sign-in cookie30 days, or until you sign out.
• Website recordings (only if you accept)30 days, then deleted automatically.
• Analytics cookies (only if you accept)12 months.
• Website visit totalsKept as totals only, with nothing that identifies you.
• Your cookie choice12 months, then we ask again.
• Invoices and payment records10 years, as Slovenian tax law requires.
• Withdrawal and refund requestsKept with your billing records.
• Support messages and site reportsAs long as needed to answer and follow up.
• Training copies (individual plans)Without your name or contact details, for as long as they are useful for improving Selly. We review this at least once a year, and they are deleted if you opt out before they are used.

This website uses analytics cookies and page recordings only if you click Accept on the cookie banner. If you decline, or don't choose, it sets no analytics cookies and loads no analytics script. Our website host still counts page views in a way that uses no cookies and does not identify you. Our own server also counts visits, plans-page views and pre-order clicks as plain totals, with no cookie and nothing that identifies you or your device.

If you accept, an analytics provider hosted in the EU records how you move through our pages, including a replay of the page with everything you type hidden, so we can fix what confuses people. Its cookies last 12 months and recordings are kept for 30 days. It receives your IP address and browser details. We don't use it for advertising. You can change your choice at any time with Cookie settings at the bottom of every page.

The app sets one essential cookie that keeps you signed in, for 30 days or until you sign out, and a 10-minute cookie while you sign in with Google. Because they are strictly necessary, they don't need a consent banner. We don't use pixels, fingerprinting or advertising trackers.

Every cookie and storage item, with what it does and how long it lasts, is listed in our Cookie Policy.

Selly and every buyer in a practice call are AI. The Sales AI Assistant is AI too. Feedback and scores are generated automatically.

Scores exist to help you practise. We never use them to make decisions about you that have legal or similarly significant effects. They are not an assessment for an employer, and not a psychological or medical evaluation.

Under the GDPR, you can ask us to:

• See your dataGet a copy of the personal data we hold about you.
• Correct itFix anything that is wrong or incomplete.
• Delete itDelete your account and data, except records the law makes us keep, such as invoices.
• Restrict itPause some uses while a question about them is being resolved.
• Take it with youGet your data in a machine-readable file.
• ObjectStop uses based on our legitimate interest, including AI training.

Email support@mockallies.com. Using your rights is free, and we answer within one month. Doing so will never cost you a feature or a better price.

You can also complain to a data protection authority. In Slovenia, that is the Information Commissioner (Informacijski pooblaščenec), Dunajska cesta 22, 1000 Ljubljana, www.ip-rs.si. You can also complain to the authority in the country where you live.

MockAllies is for people aged 18 and over. We don't knowingly collect data from anyone younger. If you think a minor has an account, tell us at support@mockallies.com and we will delete it.

Every connection to MockAllies is encrypted with HTTPS. Access to data is limited to what each part of the service needs, and recordings expire automatically.

No system is perfectly secure. If something ever puts your personal data at risk, we will tell you and the authorities as the law requires. To report a security issue, see Security.

If we make an important change, we'll email you before it applies and update the date at the top. Smaller changes, such as clearer wording, only update the date.