1. Information We Collect
We collect information you provide directly when you create an account, use the Service,
or contact us. This includes:
-
Account Information:
Name, email address, password, company name, and billing information when you register or subscribe to a paid plan.
-
User Content:
Video compositions, images, text, logos, data files (such as CSV uploads for personalization), and any other content you create or upload to the Service.
-
Personalization Data:
Recipient names, email addresses, company names, and other data fields you provide for batch video personalization. This data is processed solely to render personalized videos on your behalf.
-
Communications:
Messages you send to us through support channels, AI chat interactions within the video editor, and feedback you provide.
We also collect information automatically when you use the Service:
-
Usage Data:
Pages visited, features used, videos created and rendered, API calls made, and interactions with the editor.
-
Device Information:
Browser type, operating system, screen resolution, and device identifiers.
-
Log Data: IP address, access times, referring URLs, and server logs.
-
Video Analytics:
When you distribute videos through our Service, we may collect view counts, watch duration, and click-through data on behalf of you (the video creator).
2. How We Use Your Information
We use the information we collect to:
-
Provide, maintain, and improve the Service, including rendering videos, processing batch jobs, and delivering analytics.
- Process payments and manage your subscription.
-
Send transactional communications such as account confirmations, render completion notifications, and billing receipts.
- Provide customer support and respond to your inquiries.
-
Improve our AI models and video generation capabilities using aggregated, de-identified usage patterns. We do not use your specific User Content to train AI models without your explicit consent.
- Detect, prevent, and address fraud, abuse, and security issues.
- Comply with legal obligations.
3. Information Sharing and Disclosure
We do not sell your personal information. We share information only in the following circumstances:
-
Service Providers:
We share data with third-party providers who help us operate the Service, including cloud infrastructure (AWS/Fly.io), payment processing (Stripe), email delivery, and analytics. These providers are contractually obligated to use your data only to provide services to us.
-
AI Processing:
Video compositions may be processed by third-party AI providers (such as Anthropic or OpenAI) when you use AI-assisted features. We send only the minimum data necessary for the requested operation.
-
Legal Requirements:
We may disclose information if required by law, subpoena, or government request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
-
Business Transfers:
In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.
-
With Your Consent:
We may share information with third parties when you explicitly direct us to do so.
4. Data Security
We implement industry-standard security measures to protect your data, including:
- Encryption of data in transit (TLS 1.2+) and at rest.
- Secure password hashing using bcrypt.
- Regular security audits and vulnerability assessments.
- Access controls limiting employee access to user data on a need-to-know basis.
- Isolated rendering environments for batch video processing.
While we strive to protect your information, no method of electronic transmission or storage
is 100% secure. We cannot guarantee absolute security, and you use the Service at your own risk.
5. Data Retention
We retain your information for as long as your account is active or as needed to provide the Service. Specific retention periods include:
-
Account data:
Retained for the life of your account plus 30 days after deletion.
-
Rendered videos:
Stored for 90 days after rendering unless you delete them sooner. Videos on active paid plans are retained indefinitely.
-
Personalization data (CSV uploads):
Processed during rendering and automatically deleted within 24 hours of batch completion unless you choose to retain it.
-
Usage logs:
Retained for 12 months for analytics and debugging purposes.
-
Billing records:
Retained for 7 years as required by tax and accounting regulations.
You may request deletion of your data at any time by contacting us at privacy@shipmotion.ai
or through your account settings.
6. Cookies and Tracking Technologies
We use the following technologies:
-
Essential Cookies:
Required for authentication, session management, and security. These cannot be disabled.
-
Analytics:
We use privacy-focused analytics to understand how the Service is used. We do not use Google Analytics or other advertising-focused tracking tools.
-
Video Tracking Pixels:
When you distribute videos, we may embed a tracking pixel to collect view and engagement data on your behalf. This data is reported to you (the video creator) through the analytics dashboard.
We do not use third-party advertising cookies or participate in ad networks.
7. Your Rights and Choices
Depending on your location, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
-
Correction: Request correction of inaccurate or incomplete data.
-
Deletion:
Request deletion of your personal data, subject to legal retention requirements.
-
Portability:
Request your data in a structured, machine-readable format.
-
Restriction:
Request that we limit processing of your data in certain circumstances.
-
Objection: Object to processing of your data for specific purposes.
-
Withdrawal of Consent:
Where processing is based on consent, you may withdraw it at any time.
To exercise any of these rights, contact us at privacy@shipmotion.ai. We will respond within
30 days (or sooner where required by applicable law).
8. Third-Party Services
The Service integrates with the following categories of third-party services:
-
Cloud Infrastructure:
We host the Service on Fly.io and use AWS S3 for file storage. Your data is stored in the United States.
-
Payment Processing:
Stripe processes all payments. We do not store your full credit card number. See Stripe's Privacy Policy.
-
AI Providers:
When you use AI-assisted video creation, prompts and composition code may be sent to Anthropic or OpenAI for processing. These providers do not retain your data for training purposes under our agreements.
-
Email Delivery:
Transactional emails are sent through third-party email providers who process recipient email addresses on our behalf.
9. International Data Transfers
The Service is operated from the United States. If you access the Service from outside the
United States, your information will be transferred to and processed in the United States.
We rely on Standard Contractual Clauses and other lawful transfer mechanisms to ensure
adequate protection for data transferred from the European Economic Area, United Kingdom,
or Switzerland. By using the Service, you consent to the transfer of your information to
the United States.
10. Children's Privacy
The Service is not directed to children under 16. We do not knowingly collect personal
information from children under 16. If we learn that we have collected information from
a child under 16, we will promptly delete it. If you believe a child under 16 has provided
us with personal information, please contact us at privacy@shipmotion.ai.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. If we make material changes, we will
notify you by email or by posting a prominent notice on the Service at least 30 days before
the changes take effect. Your continued use of the Service after the effective date
constitutes acceptance of the updated policy. We encourage you to review this page
periodically.
12. Regional Privacy Rights
European Economic Area (GDPR):
If you are in the EEA, our legal bases for
processing your data include: (a) contract performance (providing the Service); (b) legitimate
interests (improving the Service, security); (c) consent (where you opt in to specific features);
and (d) legal compliance. You have the right to lodge a complaint with your local data protection
authority.
California (CCPA/CPRA):
If you are a California resident, you have the right to:
know what personal information we collect; request deletion; opt out of the sale of personal
information (we do not sell personal information); and not be discriminated against for exercising
your rights. To exercise these rights, contact privacy@shipmotion.ai.
Other Jurisdictions:
We comply with applicable data protection laws in all
jurisdictions where we operate. If you have questions about your specific rights, please
contact us.
13. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us at:
Shipmotion, Inc.
Email: privacy@shipmotion.ai
Support: support@shipmotion.ai