motionsmooth.com
MOTIONSMOOTH / PRIVACY

Privacy Policy

This policy describes the information the current MotionSmooth service processes, why it is needed and how to contact us about it.

Last updated 2026-09-25 ยท English

Who to contact

MotionSmooth is the service brand of the operator responsible for the account and service information described here. The service operates from Thailand. Our business address and support@motionsmooth.com are listed on the Contact page; use that email for privacy requests and questions about the operator or handling of your information.

Information we process

Language preference may be stored in first-party localStorage as motionsmooth-language until you change it or clear site data. Automatic language selection may use the approximate country supplied by Cloudflare for your connection, or your browser language if unavailable. The locale feature uses only the country code; it does not retain the raw IP from the same-origin trace response or add it to advertising or analytics event payloads. A language parameter or your explicit choice takes precedence. This preference does not determine account rights, prices or payment eligibility.

Optional Google sign-in is offered when configured by the operator. When enabled and chosen, Google provides your verified email, name and account identifier so we can create or authenticate your account. We store a hashed Google identifier linked to your account. We request only openid, email and profile permissions, not access to your Gmail messages or Google Drive. Authorization codes and tokens are used for sign-in and are not stored as ongoing access credentials.

Account information includes your name, email address, password hash, account status and credit balances. Generation information includes prompts, uploaded references, selected models and settings, provider task identifiers, generated files, job status and credit transactions. Avoid uploading sensitive information or information about someone else without an appropriate basis.

Director project data includes creative briefs, shot specifications, locks, versions, AI proposals, prompt packages, uploaded start frames, generated takes, review notes and credit/cost records. Text requests are sent to BytePlus Seed 2.0 Lite for planning; image and video requests use the selected generation model. The current Director text planner does not inspect reference images or generated videos. Project text stays available until you delete the project or request account deletion. Deleting a project removes its active creative text and schedules uploaded references for removal; generated jobs remain in your library under their existing retention period. Financial, security and provider reconciliation records can remain under the retention rules below. Director recovery drafts are stored separately on our server for up to seven days after the last save. Optional take feedback records your usable/needs-work choice and a selected reason for up to 90 days; it is not sent to advertising or analytics tags. Uploaded Director references expire after 90 days; importing a library image does not extend its expiry.

Welcome-offer records include a hash of your normalized email, eligibility and grant status, and the linked credit transaction. This prevents repeat grants to equivalent mailbox addresses. We do not send this identifier or your smart-form fields to advertising or analytics providers.

We also process technical and security information needed to run the site, such as session identifiers, request and error records, download-session records and security-rate-limit identifiers. Support correspondence includes what you choose to send us. Stripe processes payment details on its hosted checkout and billing portal. We store customer and payment references, order amounts and payment status; we do not store full card numbers.

Why we use information

We use information to create and secure accounts, deliver requested AI generations, maintain credit records, provide downloads, answer requests, troubleshoot problems, prevent abuse and comply with legal duties. Where data-protection law requires a lawful basis, service delivery relies on the relevant contract or steps you request before a contract; proportionate security and service administration may rely on legitimate interests; legal recordkeeping relies on applicable obligations. Optional marketing or tracking that requires consent must use that consent.

When enabled, Google Ads can measure public page visits and confirmed purchases before you choose an advertising preference, using denied consent states and measurements without advertising cookies. This can still disclose network and device information and event details to Google; it is not a guarantee of anonymous processing. Advertising cookies, Meta Pixel and the OpenAI Measurement Pixel require your permission. Providers may process browser and advertising-click identifiers, IP address, device information, page addresses and event details under their own policies. The application does not add your name, email, password, prompts, uploads or generated files to event payloads, or supply customer identifiers for advanced matching. OpenAI events request opt-out from future user-level personalization. Choose Essential only in Cookie preferences in the website footer to stop advertising measurement, or change your choice there.

With separate analytics permission, Google Analytics 4 measures public page visits, campaign labels, scroll depth, selected site actions, email signups and checkout events. Confirmed initial live payments can include an opaque transaction identifier, plan, USD value and currency. Statcounter measures public page paths and technical visit information. These providers receive network information such as your IP address and browser details. Our configured event payloads exclude names, email addresses, passwords, prompts, uploaded references and generated files. When enabled with analytics permission, Microsoft Clarity records masked interactions on signed-out public pages for heatmaps and session replay. All page content is masked, and the recorder is excluded from member workspaces and admin pages. Optional GA4 Director milestones record fixed creation stages without creative text, asset URLs or account/project identifiers. These client events are incomplete when users decline consent or close the page. Private page views and admin activity remain excluded. You can decline or withdraw analytics through Cookie preferences without losing service access.

Your uploads and outputs are not automatically public, and we do not add private customer work to our marketing showcase without permission. We do not train our own AI models on your content. That statement does not replace the model provider's data terms.

Service providers and international processing

Generation requests and necessary inputs are transmitted to BytePlus for the selected Seedance or Seedream model. The configured API endpoint is in Singapore; an endpoint region alone is not a guarantee that all provider processing or support occurs only there. Providers process data under their applicable terms and privacy notices.

The hosted service uses Hostinger for website hosting and account email delivery, Cloudflare R2 for generated media storage, and Stripe for checkout and billing. Google handles the Google sign-in option when you choose it. Support correspondence is handled through our support mailbox. Fonts are hosted with the site. Providers may separately process information for their own security, legal or service-administration purposes under their privacy notices.

Our operator is in Thailand and our generation API endpoint is in Singapore. Hosting, storage, payment and sign-in providers can process information in other countries, so using the service may involve cross-border processing. The countries and safeguards depend on the provider and service involved; we do not promise that all information stays in your country. Contact support@motionsmooth.com for information about the providers, processing locations and safeguards applicable to your request. We may disclose relevant information where legally required or necessary to protect rights and security.

Retention

Generated media is available in the library for the configured retention period, currently 90 days after a successful job. Expired files are removed by the cleanup worker; a delay in cleanup does not extend download availability. This media expiry does not automatically delete your account, prompt history, reference uploads, job records, support messages or credit records.

Account details and credit records are kept while needed to provide your account, honor unexpired credits and paid subscription installments, and resolve account requests. Order and billing records may need to remain after account closure for accounting obligations, payment disputes or fraud investigation. The period depends on the applicable obligation or unresolved issue; keeping a billing record does not require keeping the generated media itself.

Prompts, job settings and audit records support your generation history, credit reconciliation and troubleshooting. Reference files used by a job are removed from our working storage after successful delivery or a confirmed provider failure; files for an unresolved job may remain while it is investigated. Support correspondence is kept while needed to resolve the request and any related dispute. Deletion of these records and accounts is handled through a verified support request, with any necessary retention explained to you; it is not an automatic 90-day deletion of every category.

Backup copies and provider records follow their separate retention and recovery processes, so removing data from the active account does not necessarily erase every copy immediately. Backups are not used to restore a closed account for normal service without addressing its deletion request. Contact support for the scope of deletion, any remaining legal hold, and information about relevant provider procedures.

Your choices and rights

Depending on your location, you may request access, correction, deletion, restriction, objection or portability of personal information, withdraw a consent where processing relies on it, or complain to a relevant data-protection authority. Withdrawal does not affect prior lawful processing. You may contact us even if your jurisdiction is not listed here.

Email support@motionsmooth.com with the subject Privacy request. Identify the account and request; we may verify ownership using proportionate information. We will respond within applicable legal deadlines and explain any lawful reason we cannot fully fulfill a request. Deleting an account may remove access to files and balances; we will explain consequences before processing a deletion, without removing any mandatory remedy.

Security, children and changes

We use server-side credentials, password hashing, access checks and other reasonable safeguards. No system is guaranteed secure. The service is intended for adults aged 18 or over and is not directed to children. Contact us if you believe a child has provided personal information.

The updated date appears on this page. Material changes will be notified as required. Optional analytics, advertising tags or new providers must be disclosed before they are introduced, with consent where required.

Still have a question?support@motionsmooth.com โ†—