Privacy policy

1.Who we are

NovaMotions AI is operated by the operator of NovaMotions AI, the controller of the personal data described here. You can reach us about privacy at support@novamotions.com. Our company details are at the end of this page.

2.Information we collect

• Account information. Your name, email address, password (stored only as a secure hash), language and, if you sign in with Google, your Google account identifier and profile picture.
• Billing information. Your plan, orders, country and the limited payment details our payment partner shares with us, such as the card brand and last digits. We never receive your full card number.
• Creative content. Your prompts, lyrics, uploaded references (images, video clips and audio), the settings you choose and the outputs we generate, plus favorites, folders and share links.
• API information. A secure hash and a short prefix of each API key, and a log of API requests with their status and credits used.
• Usage and device information. Pages you visit, actions in the studio, IP address, browser and device type, and error logs that help us keep the service running.
• Messages. What you send us through the contact form, refund requests and email.
• Invites. If you sign up through an invite link, the code that tells us who invited you.

3.How we use your information

• To create and secure your account and keep you signed in.
• To generate your videos, images and songs and keep them in your history.
• To charge you, grant and track credits, refund failed generations and send receipts.
• To answer your messages and review refund requests.
• To prevent fraud and abuse, enforce our Acceptable use policy and keep the service secure.
• To understand how the service is used and improve it.
• To send service emails, such as password resets, trial reminders and payment notices.

4.Legal bases

Where the GDPR or similar laws apply, we rely on these legal bases: performing our contract with you (running your account, generations and billing), our legitimate interests (security, fraud prevention and improving the service), legal obligations (tax and accounting records) and your consent where we ask for it, which you can withdraw at any time.

5.How AI processing works

When you press generate, your prompt, your settings and the references you attached are sent to the model infrastructure that runs that model. Those providers process the data only to produce your result, under agreements that limit how they may use it. The output is returned to us and stored in your history.

If you use a prompt helper, such as improving or translating a prompt, the text you choose to send is processed by a language model for that purpose only.

Automated safety checks may review prompts, references and outputs to block content our Acceptable use policy forbids.

6.When we share information

We don't sell your personal data. We share it only with:

• Service providers that host the service, store files, deliver email, run generations, process payments and, where enabled, measure usage. They act on our instructions.
• Our payment partner, which processes payments as the merchant of record and has its own privacy policy.
• People you choose. If you make a creation public, anyone with the link can see it and its prompt.
• Authorities when the law requires it, or to protect the rights and safety of users and the public.
• A buyer or successor if our business is reorganized or sold, under the protections of this policy.

7.International transfers

Our providers may process data outside your country. When personal data leaves the European Economic Area, the United Kingdom or Switzerland, we use safeguards such as the European Commission's standard contractual clauses.

8.How long we keep data

• Account data is kept while your account is open.
• Generations and uploads stay in your history until you delete them or close your account.
• After you close your account, we delete or anonymize your personal data within 30 days, except what we must keep by law.
• Orders, invoices and payment records are kept as long as tax and accounting laws require.
• Security and server logs are kept for a short period, usually no longer than 90 days.

9.Security

We use encryption in transit, hashed passwords and API keys, access controls and monitoring to protect your data. No system is perfectly secure, so please use a strong password and keep your API keys private.

10.Your rights

Depending on where you live, you can ask us to access, correct, export or delete your personal data, to restrict or object to some processing, and to withdraw consent. California residents can also ask what personal information we collect and how we use it, and we don't sell or share personal information for cross-context behavioral advertising.

You can delete your account and your data at any time from your account settings, or email support@novamotions.com. We answer requests within 30 days. You also have the right to complain to your local data protection authority.

11.Children

NovaMotions AI is not meant for anyone under 18 and we don't knowingly collect data from children. If you believe a child has given us personal data, contact us and we will delete it.

12.Cookies

We use a small number of cookies and browser storage items to keep you signed in and remember your preferences. Our Cookie policy lists each one.

13.Changes to this policy

We will update this policy when our practices change and show the new date at the top. If a change is significant, we will tell you by email or in the studio.