Privacy Policy

• Account data: your email address, and (if you sign in with Google) basic Google profile info such as your name and email.
• Content you provide: the photos and videos you upload or import, the text prompts you enter, and the swapped videos and AI avatars you generate.
• Usage & account records: your generation history (status and timestamps), credit balance, and credit transactions.
• Payment data: if you subscribe, payment is handled by Whop(whop.com), our payment provider and merchant of record. You enter your card details into Whop's checkout — motionswap never receives or stores your card number at all. We receive from Whop the transaction outcome, the plan purchased, and the payer email, so we can add credits to the right account.
• Technical & analytics data: log data such as IP address, device/browser type, and pages visited, and privacy-friendly, aggregated analytics about how the site is used.

We use your information to:

• provide the Service — sign you in, run face swaps, store and show your results, and manage credits;
• keep the Service secure, prevent abuse, and enforce our Terms;
• process payments and provide support;
• understand and improve the Service using aggregated analytics;
• comply with legal obligations and respond to lawful requests.

Where the GDPR or UK GDPR applies, we process your data on these bases: performance of our contract with you (providing the Service and processing your subscription), our legitimate interests (securing and improving the Service and preventing abuse), your consent where required, and compliance with legal obligations (for example, keeping financial and audit records).

We share data with trusted providers only as needed to run the Service. We do not sell your personal data or your media. Our key providers are:

• Supabase — authentication, database, and storage of your account, history, and result videos.
• fal.ai — AI processing of your images and videos to generate swaps and avatars.
• Apify — fetching a video when you import one from a TikTok or Instagram link.
• Vercel — website hosting, content delivery, and privacy-friendly analytics.
• Google — optional "Sign in with Google" authentication.
• Whop— payment processing for subscriptions. When you buy a plan, Whop receives your email, billing details, and card data (handled by Whop and its financial partners only — never by us), plus an internal motionswap user ID and your plan name, which we attach to the checkout so renewal payments credit the right account. Buying a plan also creates a Whop account for you; Whop processes payment data as an independent company under its own privacy policy (whop.com/privacy), not merely on our instructions. If a payment can't be matched to an account, we keep the payment ID, payer email, and payment details until we resolve it manually.

We use strictly necessary cookies to keep you signed in and to operate the Service. We use privacy-friendly, aggregated analytics to understand traffic and performance; these do not use your media or sell your data. You can control cookies through your browser settings.

We keep your account data while your account is active. Your generated result videos and their history records are automatically deleted after 90 days, and you can delete results sooner from your account. Financial records — credit transactions and payment reconciliation records — are kept for audit and legal purposes beyond the 90-day media deletion. Whop also keeps its own transaction records under its own retention rules; we cannot delete Whop's copies for you.

Depending on where you live (including under the GDPR/UK GDPR and the CCPA), you may have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise any of these rights — including deleting your account and associated content — email us at iammuneebrafi@gmail.com and we will respond within the time the law requires. We will not discriminate against you for exercising your rights. Note: deleting your motionswap account does not cancel a Whop subscription by itself. Cancel your plan on whop.com (or ask us to help) before or when you delete your account, or billing will continue.

The Service is intended only for users aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us data, contact us and we will delete it.

Your data is processed in the United States (Whop, Supabase, Vercel, fal.ai), the UK/EU (Whop's regional entities), and Pakistan (where motionswap's operator is based). For personal data of EU/UK users transferred to countries without an adequacy decision, we rely on our providers' Standard Contractual Clauses and safeguards, and on the necessity of the transfer to provide the Service you request.

We use reasonable technical and organisational measures to protect your data, including encryption in transit (HTTPS), row-level access controls on our database, time-limited signed links for your private videos, and restricted server-side access to secrets. No system is perfectly secure, but we work to protect your information and to limit what we collect.

We may update this policy; material changes will be reflected by the "Last updated" date. For any privacy request or question, email us at iammuneebrafi@gmail.com.