Privacy Policy

1. Introduction

Codhash Agency Ltd ("we", "us", "our"), Company No. 15446527, registered in England & Wales, operates Motionable (motionable.app). This Privacy Policy explains how we collect, use, and protect your personal data in compliance with UK GDPR and the Data Protection Act 2018.

2. Data We Collect

• Account data: name, email address, and avatar (provided at registration).
• Payment data: processed securely by Stripe. We do not store card numbers.
• Usage data: prompts sent to the AI, generated video code, credit consumption, and feature usage analytics.
• Technical data: IP address, browser type, device information, and cookies for session management.

3. How We Use Your Data

• Provide and operate the Service (account management, video generation, rendering).
• Process payments and manage subscriptions via Stripe.
• Send transactional emails (account confirmation, password reset, billing receipts) via Resend.
• Improve the Service through aggregated, anonymized usage analytics.
• Comply with legal obligations.

4. Legal Basis for Processing

• Contract: processing necessary to provide the Service you signed up for.
• Legitimate interest: analytics, security, and service improvement.
• Consent: optional marketing communications (you can opt out at any time).
• Legal obligation: financial records, fraud prevention.

5. Data Sharing

We do not sell your personal data. We share data only with trusted third-party processors necessary to operate the Service:

• Stripe — payment processing.
• Resend — transactional emails.
• Anthropic — AI model provider (prompts are sent to generate video code).
• Cloudinary — asset storage (uploaded images, videos).
• Vercel — hosting and edge infrastructure.

6. AI & Prompt Data

Prompts you send are processed by third-party AI providers to generate video code. We do not use your prompts to train AI models. Generated code is stored in your project and can be deleted at any time.

7. Data Retention

We retain your account data for as long as your account is active. You can delete your account at any time via Settings — all associated data (projects, assets, prompts) will be permanently deleted within 30 days. Financial records are retained for 7 years as required by law.

8. Your Rights

Under UK GDPR, you have the right to:

• Access your personal data.
• Rectify inaccurate data.
• Erase your data (right to be forgotten).
• Restrict or object to processing.
• Data portability.
• Withdraw consent at any time.

9. Cookies

We use essential cookies for authentication and session management. We do not use third-party advertising or tracking cookies. You can manage cookies through your browser settings.

10. Security

We implement industry-standard security measures including encrypted connections (TLS), secure authentication, and sandboxed code execution. While no system is 100% secure, we take reasonable measures to protect your data.

11. International Transfers

Some of our processors (Stripe, Anthropic, Vercel, Cloudinary) may process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place, including Standard Contractual Clauses.

12. Children

The Service is not intended for children under 16. We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us.

13. Changes

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. The latest version is always available at motionable.app/privacy.

14. Contact

For privacy-related inquiries, data access requests, or complaints, contact us at contact@motionable.app. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).