Privacy Policy

1. Who we are

CiptaMotion is operated by CiptaMotion, Malaysia, which is the controller of your personal data. For any privacy question or request, email [to be confirmed].

2. Data we collect

• Account details: your name, email address, password (stored only as a secure hash by our authentication provider), date of birth and country. If you sign in with Google, we receive your name, email and profile picture from Google.
• Content you upload: product photos, scene descriptions and the settings you choose for each video.
• Generated videos: the videos we create for you and their generation history.
• Billing records: your plan, credit balance, credit transactions and payment references. Card and bank details are entered on our payment providers' pages and are never stored by us.
• Technical data: sign-in cookies that keep you logged in, your theme preference stored in your browser, your approximate country (used to show the right prices and policies), and server logs such as IP address and request times, kept for security and troubleshooting.

3. How we use your data

• To create and run your account, including checking that you are 18 or older.
• To generate videos from your photos and settings, and to let you download them.
• To process payments, grant and track credits, and return credits for failed generations.
• To send service messages such as account confirmation, password reset and payment receipts.
• To keep the service secure, prevent abuse and fix problems.

Legal bases (GDPR)

• Contract: running your account, generating videos and processing payments.
• Legitimate interests: security, fraud prevention and improving the service.
• Legal obligation: keeping billing and tax records.
• Consent: optional features that ask for it, such as marketing emails. You can withdraw consent at any time.

We do not sell your personal data or share it for cross-context behavioural advertising. We do not use your uploaded photos or videos to advertise our service without your permission.

4. Who we share data with

We share data only with service providers that help us run CiptaMotion, and only what each one needs:

• Supabase — database, sign-in and file storage.
• Vercel — website hosting.
• AI video providers (currently KIE.ai) — receive your product photos and video settings in order to generate your video.
• Stripe — processes your payments.
• Google — only if you choose to sign in with Google.

We are based in Malaysia and our providers may process data in other countries, including the United States. Where the GDPR applies, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses. We may also disclose data where the law requires it.

5. How long we keep data

• Generated videos are available to download for your plan's retention period: 1 day on the free trial, 7 days on Starter and Creator, and 14 days on Studio and Pro. After that the video file is no longer available.
• Uploaded photos are kept only as long as needed to generate your videos and provide your history.
• Account and billing records are kept while your account is open, and billing records afterwards for as long as tax and accounting law requires.

6. Your rights

Depending on where you live, you may have the right to access, correct, delete or receive a portable copy of your personal data, to restrict or object to how we use it, and to withdraw consent. California residents may also ask what personal information we collect and how we use it, and will not be treated differently for exercising these rights.

You can update your details in Settings. For anything else, email [to be confirmed] from your account's email address. We will reply within 30 days. If you are in the EU or UK, you can also complain to your local data protection authority.

7. Security

Your data is stored with access controls so that each account can only see its own photos, videos and billing records. Connections to CiptaMotion are encrypted. No system is perfectly secure, so please use a strong, unique password and tell us straight away if you suspect your account has been accessed without permission.

8. Age requirement

CiptaMotion is only for people aged 18 and over. We do not knowingly collect data from anyone younger.

9. Changes to this policy

If we change this policy we will update the date at the top of this page, and tell you by email or in the app if the change is significant.