Draft. This version is not yet in effect; it takes effect on the date shown here once published.

Privacy Policy

This policy explains what personal information Motionscript LLC ("Motionscript", "we", "us") collects, why, who else processes it, how long we keep it, and the choices and rights you have. It covers the Motionscript web app at app.motionscript.dev, the desktop app, and the website at motionscript.dev including its online tools.

When you use a workspace someone else owns, such as a business's, its owner (or the organization behind it) decides what goes into it and is responsible for that content. We process it for them under our Data Processing Agreement.

The short version

• Local workspaces stay on your computer. A local workspace is a folder on your disk that the desktop app opens, with or without an account. We don't receive its contents, except for what you choose to send. For example, using the Motionscript assistant sends your messages and the scene you're working on (details below).
• Cloud workspaces are stored with us so you can open them anywhere and share them. That requires an account.
• We don't sell your personal information, share it for targeted advertising, or use your content to train AI models.
• There are no ads, no advertising trackers and no analytics cookies.

Who we are

Motionscript LLC, 82 Wendell Ave., STE 100, Pittsfield, MA 01201, USA, is responsible for the personal information described here. Contact us about privacy at legal@motionscript.dev.

What we collect

Account information. When you sign up, you give us:

• your email address and a password (we store only a secure hash of it);
• a display name;
• your language;
• if you choose, an avatar image.

We record which version of the Terms of Service you accepted, and when. If you turn on two-factor authentication, we store the factor's details needed to verify your codes.

Cloud workspace content. In a cloud workspace we store everything you put there:

• projects, scenes and the data that makes them up;
• uploaded images, video, audio and fonts;
• templates and library items;
• your exports, if you save them to the workspace.

Workspace information. For each workspace, we keep:

• its name and plan;
• its members, their roles and when they joined;
• the invitations it sends (the invitee's email address and role).

Billing information. When you buy a plan, Stripe collects your payment details directly. We never receive or store your full card number. From Stripe we receive:

• your plan and billing period;
• the status of your subscription;
• the last four digits and expiry of your card;
• your billing address and, if you give one, a business name and tax ID.

We use these for invoices and tax.

Usage information. To run your plan's limits and keep the Service reliable, we record:

• counts of projects and videos;
• storage used;
• AI credits used;
• estimated download volume;
• the times of requests (for rate limits).

Error reports. When the app hits an error, it may send a report to Sentry, our error-monitoring provider. A report contains:

• the error message and code location;
• the app version and whether you were in the web or desktop app;
• your browser or operating system;
• the page you were on, with identifiers removed.

Before a report leaves your device, we strip email addresses, access tokens, file-link signatures and your computer's user-folder names from it.

Feedback. If you send feedback from the app, we receive what you write plus:

• whether you're in the web or desktop app;
• the kind of workspace;
• the page you were on;
• your language and browser.

Help form. If you use the form on the website's help page, we receive your email address, what you write, the page you sent it from, and your browser and language. To limit how many reports one network can send in an hour, we also keep a salted hash of your IP address, which can't be turned back into the address.

Beta waitlist. If you join the waitlist at motionscript.dev/beta, we receive your email address, which parts of the beta you're interested in, the role you give us if you give one, the page on our website that sent you there, and when you agreed to be emailed and confirmed your address. Waitlist and beta below has the details.

Bot checks. The help form and the waitlist use Cloudflare Turnstile to tell people from bots. Turnstile runs a check in your browser and sends Cloudflare information about your browser and device, and your IP address, to decide whether to pass it. We receive only whether the check passed. Cloudflare doesn't use it for advertising.

Website visits. The website uses Cloudflare Web Analytics to count page views. It uses no cookies, doesn't fingerprint your device, and doesn't track you across sites. Like any web server, our hosting providers briefly log requests (IP address, time, the page requested) for security and operations.

Emails. We send account and service emails through Resend, our email provider: sign-up confirmation, password resets, invitations, billing notices and policy updates, and, if you join the waitlist, beta emails. We don't send marketing emails unless you opt in, and we don't use tracking pixels or click tracking.

Cloud workspaces and local workspaces

How your work is handled depends on where it lives.

Local workspaces (desktop app)

A local workspace is a folder on your computer. Projects, assets and renders are files in that folder. We don't receive copies of them, a list of them, or anything else about them, except in the cases below, each of which you choose:

• The Motionscript assistant. When you ask the assistant something, your message is sent through our servers to our AI provider, Anthropic, along with the project information it needs to answer. That can include scene data, a screenshot of the canvas, and any files you attach. This happens in local workspaces as well as cloud ones. It is how the assistant works.
• Your own AI tool. If you connect the desktop app to an AI tool installed on your computer, such as Claude Code, that tool talks to its provider directly from your computer under your own account and that provider's privacy policy. It doesn't pass through our servers, and we never see your credentials for it.
• Uploading to the cloud. If you upload a local workspace to a cloud workspace, the copy you upload becomes cloud workspace content.
• Error reports and feedback, as described above.

What the desktop app downloads. To keep itself current, the desktop app downloads its own updates every few hours from downloads.motionscript.dev (served by Cloudflare), and, when a project needs one, another version of the Motionscript engine from the npm registry. Those servers see your IP address, as with any download, and the requests don't carry any account information.

Assistant conversations are kept on your device. In both the web and desktop apps, your assistant chat history is stored in the app's storage on your device. It isn't stored on our servers.

Cloud workspaces

Cloud workspace content is stored in our database and file storage, hosted by Supabase on Amazon Web Services in the United States (US East, N. Virginia).

• Files are private. They are reached only through short-lived signed links issued to members of the workspace.
• Your browser keeps a working copy of recently used cloud content so the app stays fast and works offline. You can clear it with your browser's site data.

Moving between cloud and local

The desktop app can download a cloud workspace as a local workspace, and upload a local workspace to the cloud.

• Downloading copies the content to your computer. The cloud copy stays until you delete it.
• Uploading copies the content into our systems, where this policy applies to it as cloud content.

Waitlist and beta

Motionscript is in an invite-only beta. Joining the waitlist works like this:

• What we collect. Your email address, the parts of the beta you're interested in (the web app, cloud workspaces, the Windows app or a team workspace), an optional role, the page that sent you, and when you consented and confirmed.
• Why. To check the address is yours, to invite you when there's a place, and to send you occasional emails about the beta. We use your interests and role to decide who to invite and what to build next. We don't share them, sell them or use them for advertising.
• Confirming. We email a link to the address you give. Until you open it, we send nothing else to that address. An address that is never confirmed is deleted after 30 days.
• Where it's kept. In our database at Supabase. The emails go through Resend.
• How long. Until you unsubscribe or ask us to delete it, and no later than 90 days after the beta ends.
• Unsubscribing and deleting. Every waitlist email has an unsubscribe link, which removes you from the waitlist. You can also email legal@motionscript.dev from the address you signed up with and we'll delete the entry.

Using the beta itself, once you're invited, is covered by the rest of this policy in the same way as using Motionscript after the beta.

How we use information

We use personal information to:

• Provide the Service. Run your account and workspaces, sync your work, run the features you use, and send the emails the Service needs.
• Bill you. Process payments, calculate and collect tax, issue invoices, and enforce plan limits.
• Keep the Service secure. Authenticate you, prevent fraud and abuse, enforce our Terms and Acceptable Use Policy, and investigate incidents.
• Fix and improve the Service. Diagnose errors and understand reliability and capacity. We use aggregated usage counts and error reports for this, not your content.
• Support you. Answer your questions and requests.
• Meet legal obligations. Keep tax and accounting records and respond to lawful requests.

We never use your content to train AI models. Our agreements with the providers that process it for us don't allow them to train on it either.

Who we share it with

We don't sell personal information and don't share it for cross-context behavioral advertising. We share it only:

• With our service providers (subprocessors). They process it on our behalf and under contract, only to provide their service to us. The full list, with what each one does and where, is under Subprocessors below:
  • Supabase (database, sign-in, file storage)
  • Cloudflare (website, downloads and site analytics)
  • Stripe (payments and tax)
    • Anthropic (the Motionscript assistant)
  • Resend (email)
  • Sentry (error reports)
• Within your workspaces. People you share a workspace with can see your name, email address, role and what you contribute there. Workspace owners and admins can also see whether members have turned on two-factor authentication.
• When you direct us to. For example, when you connect a third-party tool.
• For legal reasons. To comply with a valid legal process, to protect the rights, safety or property of our users, the public or Motionscript, or to enforce our Terms.
• In a business transfer. If Motionscript is involved in a merger, acquisition or sale of assets, subject to this policy.

Subprocessors

Motionscript LLC uses the service providers below to run the Service. Each one processes personal data only to provide its service to us, under a contract with data protection terms. This list is also part of our Data Processing Agreement.

Not our subprocessors

These services are involved in some uses of Motionscript, but you choose them, or they only serve downloads. They aren't processing personal data on our behalf:

• Your own AI tool provider, such as Anthropic for Claude Code, when you connect a tool you've installed to the desktop app. That connection runs under your own account and the provider's terms.
• The npm registry. The desktop app downloads other versions of the open-source Motionscript engine from it. They see your IP address as with any download, and the requests don't carry account information.

Changes to this list

We update this page at least 30 days before a new subprocessor starts processing personal data. Business customers can ask to be emailed about changes by writing to legal@motionscript.dev.

Cookies and similar storage

We use only the cookies and browser storage needed to run the Service and remember your settings: your sign-in session, interface preferences, and Stripe's fraud-prevention cookies when you pay. We don't use advertising or analytics cookies.

Cookies we set

Stripe may also set cookies on its own domains while you pay, under Stripe's cookie policy.

Browser storage

The web app also stores information in your browser's local storage and IndexedDB. It stays on your device and isn't sent to us as a cookie.

• Preferences. Theme, language, panel sizes, recently used fonts, and whether you've seen the introduction.
• Assistant conversations. Your chat history with the Motionscript assistant, kept only on your device.
• Working copy of cloud content. Recently used cloud workspace data and media, kept so the app is fast and works offline.

The website stores only your light or dark theme choice.

You can remove all of this by clearing the site data for motionscript.dev and app.motionscript.dev in your browser. You'll be signed out and your preferences reset.

The desktop app

The desktop app keeps the same kinds of information in its own data folder on your computer instead of in cookies. That includes your session, preferences, assistant conversations, and the list of local workspaces you've opened. Uninstalling the app and deleting its data folder removes them.

Analytics and error reports

• Website. We count page views with Cloudflare Web Analytics, which uses no cookies or local storage and doesn't fingerprint your device or track you across sites.
• App. Error reports go to Sentry without cookies (see the Privacy Policy).

How long we keep it

We may keep information longer when we must, such as for a legal claim, an investigation of abuse, or a legal hold.

Your choices and rights

In the app, you can:

• edit your profile;
• download an export of your account data (Settings → Security);
• download your files and your cloud workspaces;
• delete projects, assets, workspaces and your account;
• turn on two-factor authentication.

Your privacy rights. Depending on where you live, you may have the right to:

• know what personal information we have about you and get a copy, in a portable format;
• correct it;
• delete it;
• opt out of the sale or sharing of your personal information, targeted advertising, and profiling. We don't do any of these.

California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon and several other U.S. states give their residents these rights. We honor these requests for all users wherever they live.

To make a request, email legal@motionscript.dev from the email address on your account.

• Verification. We may ask you to confirm details to verify your identity.
• Authorized agents. An authorized agent may make a request for you with your signed permission.
• Response time. We respond within 45 days. If we need more time, we'll tell you why, and we may take up to 45 more days.
• Appeals. If we turn down your request, you can appeal by replying to our decision. If you aren't satisfied with the result of an appeal, you may contact your state attorney general.

We won't treat you differently for using your rights.

Global Privacy Control. We honor browser Global Privacy Control signals as an opt-out of sale and sharing, though we don't sell or share personal information in the first place.

California details. In the past 12 months we have collected the following categories of personal information, for the purposes and from the sources described above:

We don't use sensitive personal information for anything other than providing the Service. We don't sell or share personal information, including that of users under 16.

Children

Motionscript isn't directed to children under 13, and we don't knowingly collect personal information from them. Users from 13 to 17 need a parent or guardian's permission. If you believe a child under 13 has given us personal information, email legal@motionscript.dev and we will delete it.

Security

We protect your information with:

• encryption in transit and at rest;
• access controls enforced by the database for every workspace;
• private file storage;
• optional two-factor authentication;
• daily backups.

Our Security page has the details. No system is perfectly secure. If a breach affects your personal information, we'll notify you and the authorities as the law requires.

Where your data is processed

Motionscript is based in the United States, and we process and store information in the United States. Some of our providers have servers in other countries. They protect the data under their contracts with us.

Visitors from the EEA, the UK and Switzerland

We don't currently direct the Service at people in the European Economic Area, the United Kingdom or Switzerland, and paid plans aren't available there. If the GDPR or UK GDPR applies to our processing of your personal information anyway:

• Who is responsible. Motionscript LLC is the controller.
• Legal bases. We rely on:
  • performance of our contract with you, to provide the Service;
  • our legitimate interests, to secure, maintain and improve the Service and prevent abuse;
  • legal obligations, for tax records;
  • your consent, where we ask for it.
• Your rights. You can ask to access, correct, erase, restrict or receive a copy of your data, object to processing, and withdraw consent. Email legal@motionscript.dev.
• Complaints. You may complain to your data protection authority.
• Transfers. Your information is processed in the United States. Where the law requires it, transfers to our providers rely on the European Commission's Standard Contractual Clauses or an equivalent safeguard.

Changes to this policy

When what we do changes, we update this page and its version and date. If a change materially affects your rights or how we use your information, we'll tell account holders by email and in the app at least 30 days before it takes effect.

Contact

Motionscript LLC, 82 Wendell Ave., STE 100, Pittsfield, MA 01201, USA legal@motionscript.dev