Skip to content
Legal

Privacy Policy

Last updated: 13 July 2026 · Mochic LTD (company no. 12405063)

This Privacy Policy explains how Mochic LTD ("SpecForm OS", "we", "us", or "our") collects, uses, stores, and protects your personal data when you use the SpecForm OS platform, website, and related services. We comply with the UK GDPR, the Data Protection Act 2018, and, where applicable, the EU GDPR.

This policy should be read alongside our Terms of Service and, for enterprise customers, our Data Processing Addendum (DPA).

1. Who We Are

Mochic LTD is the data controller for your personal data. Registered in England and Wales, company number 12405063. Registered office: 3 Rowland Way, Letchworth Garden City, Hertfordshire, SG6 3DZ. Contact: morchen@specform.pro.

2. Data We Collect

  • Account data: your name, email address, and login credentials.
  • Billing data: payment and subscription information processed via Stripe. We do not store full card details on our systems.
  • Design and workflow data: sketches, images, measurements, materials, BOMs, TechPacks, and other assets you upload or generate.
  • Usage and technical data: IP address, device and browser info, log data, and platform interactions.
  • Communications: messages, support requests, or feedback you send us.

3. How We Use Your Data

  • Provide, operate, and maintain the SpecForm OS platform.
  • Generate your TechPacks, BOMs, pattern logic, and technical assets.
  • Manage your account, subscription, and billing.
  • Provide customer support and respond to enquiries.
  • Secure the Service, prevent fraud, and comply with legal obligations.
  • Improve the accuracy of our fashion engineering models - subject to Section 4 below.

4. AI Model Improvement & Your Rights

We may use anonymised technical patterns derived from generated assets to improve the accuracy of our AI models. This is designed to protect your intellectual property:

  • Data used is anonymised and distilled into technical patterns - for example, construction logic and measurement relationships.
  • We do not use your proprietary creative sketches, brand-specific identifiers, or personal information as training material in any form that could be reconstructed or attributed to you.

Free-plan users. Where you are on the free plan, anonymised technical patterns derived from your generated assets may be used to improve model accuracy. This is limited to abstract construction logic and measurement relationships - never your creative designs, brand identifiers, sketches, or any content that could be attributed to you. You can opt out at any time without losing access to the Service.

Paid subscribers (individual and enterprise) are not subject to this use by default - their data is processed solely to deliver the Service.

AI provider restrictions. Our AI providers (including Google and OpenAI) are contractually prohibited from using your submitted content - designs, sketches, prompts, or generated outputs - to train, fine-tune, or improve their own models. They process your data solely to generate your requested output.

Opt out: All users can opt out at any time via account settings or by emailing morchen@specform.pro. Opting out does not affect your access.

5. Human Access to Creative Content

Our team does not access, read, or review your uploaded designs, sketches, prompts, or generated outputs as part of routine operations, quality control, or system maintenance. Access to your files is handled by automated systems.

In the limited case where a team member must access a specific file to investigate a technical issue you have reported, this will take place only with your prior consent and will be logged.

6. How We Share Your Data

We do not sell your personal data. We share data only with trusted sub-processors who help run the Service:

  • Stripe - payment processing
  • Supabase - database and authentication
  • Google Cloud Platform (GCP) - hosting and storage
  • Google (Gemini) and OpenAI - AI generation, under contractual confidentiality and data-protection terms (see Section 4)

We may also disclose data where required by law, court order, or to protect our legal rights.

7. International Transfers

Where providers process data outside the UK or EEA, we ensure appropriate safeguards are in place - including the UK IDTA or Addendum, EU Standard Contractual Clauses (SCCs), or an adequacy decision.

8. Data Retention

  • Account data: deleted within 30–60 days of account closure.
  • Generated assets (designs, TechPacks, BOMs): retained until deleted by you.
  • Billing records: retained for 6 years (HMRC requirement).
  • Usage and security logs: 90 days.
  • Support communications: up to 24 months after your query is resolved.

Deletion and backup purge. When you delete a file from your dashboard, it is removed from active storage immediately. Automated backup copies held in our infrastructure (Supabase / GCP) are fully purged within 30 days of deletion. We do not retain deleted creative content beyond this window except where legally required.

9. Security

We use industry-standard measures to protect your data: encryption in transit and at rest, access controls, and secure production-grade environments (Supabase / GCP). No system is entirely immune to risk, but we work continuously to safeguard your information.

10. Your Rights

Under UK/EU GDPR, you have the right to access, correct, erase, restrict, port, and object to processing of your personal data - including AI model improvement (see Section 4). Contact us at morchen@specform.pro. You can also lodge a complaint with the UK ICO.

11. Cookies

We use strictly necessary cookies (always on - required for authentication and security) and, with your consent, functional and analytics cookies. You can manage preferences via our cookie banner.

12. Contact

For any privacy-related enquiry or to exercise your rights: morchen@specform.pro.