Legal
Privacy Policy
Version 2026-11-11 · Effective 11 November 2026
1. Who is responsible
Malcomson Brothers is the controller of personal data processed for motionplot. Contact us about privacy at hi@motionplot.com.
Where you upload material containing other people's personal data, you decide why it is processed and we process it on your behalf.
2. What we collect
- Account data: your email address, name if given, and sign-in records.
- Content: uploads, your styles and building blocks, your requests, messages with our AI, work in progress on your videos, previews and finished videos.
- Billing data: credit purchases, balances and usage. Card details go straight to Stripe; we receive only limited details such as the card brand and last four digits.
- Usage and device data: pages and features used, IP address, browser and device type, and error reports.
- Correspondence: messages you send us.
3. Why we use it, and our lawful basis
| Purpose | Lawful basis (UK GDPR) |
|---|---|
| Providing the Service: accounts, our AI, previews and videos | Contract |
| Selling and accounting for credits | Contract; legal obligation (tax records) |
| Security, abuse prevention and enforcing our policies | Legitimate interests |
| Product analytics to improve the Service | Legitimate interests |
| Service emails, such as sign-in codes and receipts | Contract |
| Marketing emails, if we send any | Consent, which you may withdraw at any time |
We do not sell your personal data and we do not use your content to train AI models. We do not make decisions with legal or similarly significant effects about you solely by automated means.
4. AI processing
When our AI works on your video, your requests, the relevant parts of your content and the AI's working context are sent to the AI model providers below to produce a response. Our AI runs on isolated computers and reaches the model providers only through our own systems, which keep the access keys. We choose providers and settings that do not train on customer data where available.
5. Who we share it with
We use these providers to run the Service. They process data only on our instructions.
| Provider | Purpose | Location |
|---|---|---|
| Cloudflare | Network protection, storing your uploads and videos, and isolated computers that work on your videos | Global network |
| Vercel | Hosting the website and studio | European Union |
| Vast.ai and other cloud computing providers | Cloud computers that put your video together | May be outside the UK |
| Anthropic | AI model provider (Claude) that our AI uses to plan, write and edit your videos | United States |
| OpenAI | AI model provider that our AI uses to plan, write and edit your videos | United States |
| ElevenLabs | AI voice provider that reads your script aloud | United States |
| Stripe | Payments for credits | May be outside the UK |
| Resend | Sign-in and service emails | May be outside the UK |
| PostHog | Product analytics | May be outside the UK |
Our databases and some of the computers that make your videos run on servers we operate. We may also share data with professional advisers, with authorities where the law requires, or with a buyer of our business.
6. International transfers
Some providers process data outside the UK, including in the United States. Where they do, we rely on UK adequacy regulations, the UK Extension to the EU-US Data Privacy Framework, or the UK International Data Transfer Agreement or Addendum.
7. How long we keep it
- Account data: while your account is open, then up to 90 days after it closes.
- Uploads, your styles and building blocks, and finished videos: until you delete them or close your account, then removed from live systems within 30 days and from backups within 90 days. Finished video files you have not kept may expire sooner.
- Work in progress and messages with our AI: while the project they belong to exists.
- Billing records: six years, for tax and accounting.
- Security and server logs: up to 90 days.
- Analytics data: up to 24 months.
A finished video may share stored pieces with your other videos; we keep those pieces until no remaining video needs them.
8. Cookies
We use cookies that are strictly necessary to sign you in and keep the Service secure. In the studio we use PostHog analytics to understand how features are used. This website sets no cookies.
9. Your rights
You have the right to access, correct, delete, restrict or object to the processing of your personal data, and to receive it in a portable form, subject to legal limits. Where we rely on consent you may withdraw it at any time. Contact hi@motionplot.com; we reply within one month. You may also complain to the Information Commissioner's Office (ico.org.uk), though we would like the chance to help first.
10. Security
We encrypt data in transit, keep the isolated computers that work on your videos separate from our systems and from other customers, keep access keys off those computers, and limit staff access to what their work needs. No system is perfectly secure; we will tell you and the ICO about a breach where the law requires.
11. Children
The Service is not for anyone under 18, and we do not knowingly collect their data.
12. Changes
We will post changes here and tell you by email or in the Service when a change is significant.