Privacy Policy

• Account details: your email address, and your password if you sign up with email (stored only as a secure hash).
• Google sign-in: if you sign in with Google, Google shares your name, email address and profile picture with us. We don't receive your Google password or access anything else in your Google account.
• Purchases: when you buy a plan or pack, Stripe processes the payment. We receive your email, what you bought, the amount, the payment status and a Stripe customer reference. We never see or store your card details.
• How you use the site: the prompts and designs you copy, like or save, your plan and usage limits, and the content you create with tools like Restyle.
• Things you send us: messages through the contact form, prompts or designs you submit, and payout details if you join the affiliate program.
• Cookies and similar technologies: analytics and advertising cookies and pixels from Google, Meta and X, plus browser storage that keeps you signed in. See the Cookie Policy for details.
• Technical data: IP address, browser and device type, and pages visited, collected automatically by our hosting and analytics providers.

• To create and secure your account and sign you in (needed to provide the service).
• To process purchases, give you access to what you paid for, and keep records required for tax and accounting (contract and legal obligation).
• To send account emails such as sign-up confirmation, sign-in links and password resets (needed to provide the service).
• To understand how the site is used and improve it, and to measure how our ads perform (legitimate interests, or your consent where the law requires it).
• To answer your messages and pay affiliate commissions.
• To prevent fraud and abuse, such as account sharing or bypassing paid access.

We use the name, email address and profile picture we receive from Google sign-in only to create your account, sign you in and show who is signed in. We don't sell this data, use it for advertising, or share it with anyone except the service providers listed below that run the site. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We don't sell your personal data. We share it only with the service providers that help us run MotionSites, and only as much as each one needs:

• Supabase: our database, sign-in and file storage provider.
• Vercel: hosts the website.
• Stripe: processes payments and manages subscriptions.
• Google: Google sign-in, Google Analytics and Google Ads conversion measurement.
• Meta (Facebook): the Meta pixel, to measure how our ads perform.
• X (Twitter): the X pixel and conversion measurement. When you make a purchase we may send X a hashed (one-way scrambled) version of your email address so it can match the purchase to an ad.
• Resend: sends our account and transactional emails.
• Anthropic, OpenAI and Higgsfield: when you use Restyle, the text and images it works from are sent to these AI providers to generate the result.
• YouTube: plays the videos embedded in Academy lessons and other pages.

We may also disclose data if the law requires it, or to protect our rights or the safety of users.

Several of these providers are based in the United States, so your data may be processed outside your country. Where required, these transfers are covered by safeguards such as the European Commission's Standard Contractual Clauses.

We keep your account data for as long as your account exists. When you delete your account, we delete your personal data within 30 days, except purchase and payment records, which we keep as long as tax and accounting law requires.

To delete your account and personal data, email viktoroddy@gmail.com from the email address on your account (or tell us which address it is). We'll confirm and complete the deletion within 30 days. Cancel any active subscription first so you aren't charged again.

If you signed in with Google, you can also remove MotionSites' access to your Google account at any time at myaccount.google.com/permissions.

You can unsubscribe from marketing emails using the link at the bottom of any email.

Depending on where you live, you can ask us to access, correct, delete or export your personal data, or object to or restrict how we use it. Where we rely on your consent, you can withdraw it at any time. To make a request, email viktoroddy@gmail.com. If you're in the EU or UK, you can also complain to your local data protection authority.

Data is sent over encrypted connections (HTTPS), passwords are stored only as secure hashes, and access to account data is restricted by database access rules. No system is perfectly secure, but we work to protect your data.

MotionSites isn't intended for children under 16, and we don't knowingly collect their personal data. If you believe a child has given us personal data, contact us and we'll delete it.

We may update this policy as the site changes. The current version is always on this page, and the date at the top shows when it last changed.

Questions about privacy or your data? Email viktoroddy@gmail.com or reach us through the contact page.