Your work stays yours.

A plain-language summary of what we store and why. Have this reviewed by counsel before a public launch.

Projects and media

Projects save in your browser as you edit. When you sign in they also sync to your account so they are available on your devices and to the agents you connect. Images and audio you upload are stored so they can be rendered into your videos. Delete a project and its cloud copy is removed.

Account

Sign-in is handled by Google Firebase Authentication (email and password, or your Google account). We never see your password. We store your email, an optional name, your plan and the personal API tokens you create (only their hashes). Your session is a secure, httpOnly cookie that lasts up to 14 days, and signing out ends it on every device. Account data, projects and media are stored in Google Cloud (Firestore and Cloud Storage, United States).

AI requests

When you run the motion agent, your brief, the project document, reference images you attach and the content of links you supply are sent to the model provider you chose (via OpenRouter for plan credits, or directly to Anthropic, OpenAI or OpenRouter with your own key). AI audio requests go to ElevenLabs. Providers process this data under their own terms.

Your API keys

Keys you add in Connections stay in your browser (in memory, or on this device if you choose "remember"). They are sent only with your own requests, used for that request, and never stored on our servers.

Payments

Card payments are handled by Stripe. We store your plan, credit balance and a ledger of credit activity. We never see or store your card details.

Links you provide

Reference links are fetched only when the agent reads them, from our servers, with protections against internal-network access. Their content is used as creative reference only.

Analytics

We use Google Analytics for Firebase to understand which pages and features are used (pages viewed, approximate location, device and browser). It does not receive your projects, prompts or API keys.