Privacy policy

1. Who we are

Motiongist is operated by Emy Labs LLC, a Delaware limited liability company, Delaware, United States (address to be completed). We are the “controller” (GDPR) and the “business” (CCPA) responsible for the personal information described here. For any privacy question, write to contact@emylabs.com. [EU representative under Art. 27 GDPR and UK representative: to be completed.]

2. What we collect

• Account: e-mail address, name and profile picture if you sign in with Google, your role in the workspace, your language.
• Content: topics, briefs, scripts, documents and links you upload, chosen voices, generated videos.
• Billing: plan, currency, country, payment history and invoices. Card details are handled directly by Stripe; we never see them.
• Technical data: IP address, approximate country, sign-in and error logs, used for security and abuse prevention.
• Analytics: pseudonymized usage events via PostHog, only if this tool is enabled.
• Production requests: the information you enter in the form on the done-for-you page.

We don’t sell your personal information, we don’t share it for cross-context behavioral advertising, and we don’t use your content to train AI models.

3. How we use it

The legal bases in the last column apply to users in the European Economic Area, the United Kingdom and Switzerland.

4. Service providers (sub-processors)

We use the following providers, who process data on our behalf and under our instructions:

5. International transfers

Emy Labs LLC is based in the United States, and so are several of our providers. When personal data of users in the EEA, the UK or Switzerland is transferred to the United States or another country without an adequacy decision, the transfer relies on the European Commission’s Standard Contractual Clauses (and the UK addendum), or on the EU-U.S. Data Privacy Framework where the recipient is certified. [Transfer mechanism and Data Privacy Framework status of Emy Labs LLC: to be completed.] You can ask us for a copy of the relevant safeguards.

6. How long we keep it

• Account and content: as long as your account is active. You can delete a video or a project at any time.
• Account deletion: permanent erasure 30 days after the request (grace period to change your mind), except data we must keep by law.
• Technical and security logs: 12 months maximum.
• Accounting records and invoices: as long as required by applicable tax and accounting laws (up to 10 years).
• Production requests: 3 years after the last contact.
• Transactional e-mail logs: 12 months [to be confirmed].

7. Your rights

Self-service: from Settings, you can export all your data (account, projects, scripts, video links) and request the deletion of your account without having to write to us. For anything else, write to contact@emylabs.com. We may need to verify your identity before acting on a request.

If you are in the EEA, the UK or Switzerland (GDPR)

• access to your data and a copy of it;
• rectification of inaccurate data;
• erasure;
• portability, in a structured, machine-readable format;
• objection to processing based on legitimate interests, and withdrawal of consent at any time;
• restriction of processing.

We answer within one month. You can also lodge a complaint with the data protection authority of your country of residence (in France, the CNIL; in the UK, the ICO).

If you are a California resident (CCPA/CPRA)

In the last 12 months, we collected the categories of personal information described in section 2 (identifiers, commercial information, internet activity, approximate geolocation, and the content you provide), from you and from your use of the service, for the purposes in section 3. We disclose it only to the service providers in section 4, for those purposes.

• We do not sell or share personal information (as those terms are defined by the CCPA), and we have not done so in the last 12 months. We also honor Global Privacy Control signals.
• We do not use or disclose sensitive personal information beyond what is needed to provide the service.
• You have the right to know what we collect and how we use it, to access it, to have it deleted, and to have it corrected.
• We won’t discriminate against you for exercising your rights.
• You can exercise your rights yourself from Settings or by writing to contact@emylabs.com, or through an authorized agent. We verify requests by confirming control of the account’s e-mail address.

Residents of other US states with privacy laws can exercise similar rights the same way.

8. Cookies

• Session cookie mg_session: strictly necessary to keep you signed in.
• Preferences: NEXT_LOCALE (your language) and CURRENCY (the currency you chose on the pricing page). Both are functional and last one year.
• Analytics: if PostHog is enabled, its trackers are only set with your consent where the law requires it.
• We use no advertising cookies and no social media trackers.

9. Security

Traffic is encrypted (HTTPS), session tokens and API keys are stored hashed, and internal access is restricted and logged. Uploaded files are checked before processing. No system is foolproof: if a breach puts your data at risk, we notify the competent authorities and the people affected within the legal deadlines.

10. Children

The service is not intended for anyone under 18, and we don’t knowingly collect personal information from children. If you believe a minor has given us data, contact us and we’ll delete it.

11. Changes

We may update this policy. If we make significant changes, we’ll notify you by e-mail or in the app. The date of the last update is shown at the top of this page.

12. Contact

Emy Labs LLC, Delaware, United States (address to be completed). E-mail: contact@emylabs.com.