Privacy Policy

Novarys Systems, [legal form], [full address], RCS [city] [SIREN]. Contact: support@motioncreator.studio.

• Account, email address, authentication identifier, password (hashed), creation date, and where applicable the linked wallet address (Cronos).
• Usage, submitted prompts, reference images, generation parameters, generated videos, credit balance and history.
• Payment, transaction metadata transmitted by Stripe (amount, currency, session ID). No full payment card details are stored by Novarys Systems.
• Technical, IP address, HTTP headers, browser fingerprint, access logs necessary for security and quota enforcement.

• Providing the Service, executing generations and managing the account, performance of the contract (art. 6.1.b GDPR).
• Invoicing and accounting obligations, legal obligation (art. 6.1.c GDPR).
• Security, fraud prevention, abuse mitigation and enforcement of the Acceptable Use Policy, legitimate interest (art. 6.1.f GDPR).
• User support, performance of the contract.
• Aggregated and anonymized usage analytics, legitimate interest.

• Account data: for the entire duration of the account, then deleted within 30 days after closure.
• Generated videos and credit history: kept as long as the account is active.
• Billing data: 10 years (accounting obligation, art. L123-22 of the French Commercial Code).
• Technical security logs: 12 months maximum.
• Authentication data after closure: deleted within 30 days.

Your data is accessible to authorized Novarys Systems staff and to the following subprocessors, acting on instructions and under a contract compliant with article 28 GDPR:

• Supabase Inc. (Singapore, EU hosting), database, authentication, storage.
• Cloudflare Inc. (United States), edge hosting, network security.
• fal.ai / Seedance (ByteDance), video generation model execution.
• KIE.ai, backup video generation provider (Veo, Seedance).
• Replicate, Inc. (United States), backup video generation provider.
• BytePlus Pte. Ltd. (Singapore), backup video generation provider (ModelArk).
• Stripe Payments Europe Ltd. (Ireland), payment processing.
• Moralis (Sweden), on-chain wallet verification (only if you link a wallet).

Some subprocessors (Cloudflare, fal.ai, KIE.ai, Replicate, BytePlus, Moralis) may process data outside the EU. These transfers are governed by the European Commission's Standard Contractual Clauses (decision 2021/914) and, where applicable, by additional technical measures (encryption, pseudonymization).

At any time, you have the following rights over your data: access, rectification, erasure, restriction, objection, portability, withdrawal of consent, and setting post-mortem directives (art. 15 to 22 GDPR).

To exercise them, write to support@motioncreator.studio attaching proof of identity if necessary. You also have the right to lodge a complaint with the CNIL, 3 place de Fontenoy, 75007 Paris - www.cnil.fr.

Motion Creator only uses cookies and local-storage data strictly necessary for its operation: maintaining the authentication session and storing essential preferences. These trackers do not require prior consent within the meaning of article 82 of the French Data Protection Act.

No advertising tracker or non-exempt third-party audience measurement tool is deployed.

Novarys Systems implements appropriate technical and organizational measures: encryption in transit (HTTPS/TLS), encryption at rest at the database level, access controls through row-level security (RLS), secrets kept out of the client bundle, access logging, and a password policy. As no system is infallible, you are invited to use a strong and unique password.

The Service is not intended for persons under 18 years of age and no data is knowingly collected from minors.

This policy may be updated. Material changes are flagged on this page with a new effective date and, where necessary, by email notification.

Novarys Systems, support@motioncreator.studio. See also the Terms of Service page.