Privacy policy

FlatMotion ('we') provides an AI ad video studio. This policy explains what personal data we process when you use the Service, why, and the rights you have under the GDPR and similar laws. For any privacy request, contact privacy@flatmotion.io.

• Account data: name, email, company name, avatar, language preference, and plan.
• Content data: the URLs, logos, colors and text you submit, and the brand kits and videos generated from them.
• Usage data: a minimal activity log (video generation, brand scrape, login) with a timestamp, and privacy-friendly product analytics (page and vitals metrics via Vercel).
• Technical data: IP address and browser information, used for security, rate limiting and abuse prevention.

• To provide the Service (contract): accounts, generation, billing, sharing.
• Legitimate interest: security, fraud and abuse prevention, product improvement.
• Consent: non-essential cookies and marketing communications, where required.

We share data only with the processors needed to run the Service: Supabase (database, authentication, storage), Vercel (hosting and analytics), Anthropic and Firecrawl (brand extraction), and, once enabled, Stripe (payments) and Resend (transactional emails). Each processes data under its own agreement and only on our instructions.

We keep account and content data while your account is active. When you delete your account we remove your profile, brands, videos and stored assets, and anonymise or delete associated logs, except where we must keep records for legal or accounting reasons.

You can access, correct, export or delete your data at any time. From your account settings you can export your data and permanently delete your account. You may also object to or restrict certain processing, and lodge a complaint with your local data protection authority.

Data is protected with row-level security, encrypted transport, private storage with signed access, strict HTTP security headers and rate limiting. No system is perfectly secure, but we work to protect your data and to disclose incidents responsibly.

We will update this policy as the Service evolves and post the new effective date at the top of this page.