Data processing addendum

Scope

MotionVideo is a set of files that you run with your own coding agent on your own machines. We don’t host your code, your components, or the videos you render, and we never receive them. The only personal data this addendum covers is the small amount needed to sell and deliver the pack: mainly the email addresses, GitHub usernames, and sign-in sessions of the people at your organization who use it.

Who is responsible for what

• For data collected through motionvideo.xyz itself (sessions, sign-in tokens, request counts, contact messages), we act as the controller.
• Where a purchase involves data about your staff, such as the address a colleague uses to sign in or the GitHub account they link, we use it only to deliver and support the purchase you made, and for no other purpose.
• Polar is the merchant of record and handles payment and billing data under its own terms as an independent party.

Subprocessors

We rely on the following providers:

• Polar: checkout, payments, invoicing, tax, refunds, and repository invites.
• Cloudflare: hosting, database, DNS, and email forwarding.
• Resend: transactional email.
• GitHub: hosting of the private repository.

If we add or swap a subprocessor, this list is updated and the date at the top of the page changes.

How the data is protected

• All traffic to the site is encrypted with HTTPS.
• Session cookies are HttpOnly and Secure, sessions end after 7 days, and sign-in links expire after 15 minutes.
• Access to the production systems, the database, and the repository settings is limited to Aniket Pawar.
• We collect as little as possible: no passwords, no payment card data, no analytics, and no copy of the work you create.

Transfers across borders

We operate from India, and our subprocessors run infrastructure in multiple regions, including the United States. Data may therefore be processed outside your country. We use providers that offer recognized transfer safeguards, such as the EU Standard Contractual Clauses, where these are required.

Security incidents

If we become aware of a breach affecting personal data related to your organization, we will notify you without undue delay, tell you what we know, and keep you updated on the steps we take in response.

Requests from individuals

Your staff, or you on their behalf, can ask for access, correction, or deletion of their data by writing to hello@motionvideo.xyz. If a request reaches us that concerns your organization, we will help you respond to it.

Deletion

On request, we delete the user records and sessions linked to your organization and remove the associated GitHub accounts from the repository, which ends their access. Billing records held by Polar are kept for as long as tax law requires.

Getting a signed copy

If your procurement process needs a countersigned version of this addendum, email hello@motionvideo.xyz with your organization’s legal name, address, and the email used for the order. We will send back a copy for signature.