Privacy policy

Motaclip is made and run by Mota Software, in Thailand. In this policy “we” and “us” mean Mota Software, and “the app” means Motaclip: this website and the service behind it.

Mota Software decides why and how your personal data is used, which makes it the data controller. To ask anything about this policy or your data, write to vasuphol@vasupholatharyuti.com.

We collect what is needed to run the app for you, and no more.

• Your account. Your email address, and a password. The password is kept by our sign-in provider in a scrambled form that cannot be read back; we never see it.
• What you make. Your workflows, the prompts and settings in them, files you upload (pictures, clips, sound, logos), the files the models make for you, the descriptions and ratings you give them, your brand kits and your video and picture edits.
• Your memories. The words your workflows keep from one run to the next: words you write on the Memory page, and words a Save to memory block keeps when a workflow runs, with when each was kept and which workflow kept it. A memory holds words only.
• Payments. Payments are taken by Stripe. We are told what you bought, how much you paid, and whether it went through. We never receive or keep your card number.
• Connected social accounts. If you connect a YouTube, TikTok or Instagram account, we keep that account’s name, handle, picture and identifier, and a key the platform gives us for that one account. We are never given your password for those services. Section 6 says more.
• How the app is used. A record of each run: which blocks ran, which models, what it cost and when. Technical logs kept by our hosting and database providers, which include IP addresses and are used to keep the service working and secure.

We do not buy data about you from anyone, and we do not build advertising profiles.

• To provide the app: to keep your work, run the models you ask for, and show you the results.
• To work out what a run costs and take that from your credit, and to keep a record of payments.
• To keep the app secure, find faults, and stop misuse.
• To answer you when you write to us, and to tell you about changes that matter to your account.
• To meet legal duties, such as keeping records of payments.

We rely on these grounds: carrying out our agreement with you (the terms of service), our legitimate interest in running a safe and working service, your consent where we ask for it (connecting a social account, for example), and the law where it obliges us.

We do not sell your personal data. We do not show advertising. We do not use what you upload or make to train AI models.

The app does not make pictures, video or sound itself. When you run a block, the prompt for that block, and any picture, clip or sound it is given to work from, is sent to the company that runs the model you chose, which sends back the result. Each block names its model.

Those companies include Anthropic, Google, Runware, DeepSeek, Replicate and fal.ai, depending on the model. Each handles what it is sent under its own terms and privacy policy. We send them only what the block needs, and never your email address, your password or your payment details.

When a block reads a memory, what it reads is sent with that block’s prompt to the model the block uses. Keeping a memory, and reading it, asks no model and sends it to no model provider; it is stored with the rest of your work.

Some things are made on our own server and sent to nobody: joining clips, subtitles, motion graphics, charts, and removing a picture’s background.

We use a small number of companies to run the app. They handle your data on our instructions and only to provide their service to us.

• Supabase keeps the database, the sign-in and your files.
• Stripe takes payments.
• Our hosting provider runs the app’s server.
• The AI model providers in section 4, for the content of the blocks you run.

Some of these companies are outside Thailand, so your data may be handled in other countries. Where the law asks for safeguards for such transfers, we rely on the contract terms those companies offer for that purpose.

We may also disclose data when the law requires it, or to protect someone’s safety or our legal rights.

Connecting a social account is your choice, and you can undo it at any time. You connect on the platform’s own page, where you see exactly what the app is asking to be allowed to do.

• What we are given. The account’s name, handle, picture and identifier; permission to upload videos to it when you ask; and permission to read its figures, such as views, likes and followers, to show them to you.
• What we do with it. We upload only what you tell us to, to the account you choose, and we show you that account’s figures. We do nothing else with the access, and we do not share what we read from a platform with anyone.
• How it is kept. The key for each account is stored encrypted, with an encryption key that is not in the database. Figures read from a platform are not kept longer than 30 days without being read again.
• How to stop. Press Disconnect beside the account on the Social accounts page. The app deletes its key, and tells the platform the key is given back where the platform allows that. You can also remove the app’s access from the platform’s side.

YouTube. Motaclip uses YouTube API Services. By connecting a YouTube channel you agree to be bound by the YouTube Terms of Service, and Google handles your data as its Privacy Policy describes. You can remove the app’s access to your Google account at any time on Google’s security settings page.

Motaclip’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

TikTok and Instagram. What you connect is also handled by TikTok under its Privacy Policy and by Meta under its Privacy Policy. You can remove the app’s access in each app’s own settings.

The app uses only the cookies it needs to work:

• cookies that keep you signed in;
• a cookie that lasts ten minutes while you connect a social account, so that nobody else can finish the connection in your place.

It also remembers a few preferences in your browser, such as whether the menu is folded. There are no advertising cookies and no tracking by other companies.

We keep your account and your work for as long as you have an account. When you delete a file, a workflow or a connected account, it is removed from the app at once. Copies may remain in our providers’ backups for a limited time before they are overwritten.

A memory keeps its entries until you remove them, empty it or delete it, or until a run saves past the number of entries it is set to keep, when the oldest entry a run saved is removed. Entries you wrote yourself are never removed by a run. A memory belongs to one workspace, is never read by another, and is deleted with it.

Records of payments are kept for as long as tax and accounting law requires, even after an account is closed.

You can ask us for a copy of your personal data, to correct it, to delete it, to stop or limit how we use it, to move it elsewhere, and to withdraw a consent you gave. These rights come from the law where you live, such as Thailand’s Personal Data Protection Act and, in Europe, the GDPR.

To use any of them, write to vasuphol@vasupholatharyuti.com. We answer within 30 days. If you are unhappy with our answer you can complain to the data protection authority where you live.

You can remove most things yourself, at any time:

• A connected social account: open Social accounts and press Disconnect beside it.
• A file: open the Gallery and press Delete under it. It is removed from the app and from storage.
• A workflow: press Delete beside it on the Workflows page.
• A memory: open Memory, then Empty or Delete. Each entry can be removed by itself. Deleting a workflow does not delete the memories it saved to, since other workflows may read them.

To delete your whole account and everything in it, write to vasuphol@vasupholatharyuti.com from the email address of the account. We delete the account, your work, your files and any connected accounts’ keys within 30 days, and tell you when it is done. Records of payments are kept as section 8 says.

Motaclip is for people aged 18 and over. We do not knowingly collect data from anyone younger. If you believe a child has made an account, write to us and we will remove it.

Data is encrypted on its way between your browser, the app and our providers. Each workspace’s data is kept apart from every other’s, and the keys for connected social accounts are encrypted on top of that. No service can promise perfect security; if something goes wrong that affects your data, we will tell you and the authorities as the law requires.

When we change this policy we change the date at the top. If a change affects how we use your data in a way that matters, we tell you by email or in the app before it takes effect.

Mota Software, Thailand. Email: vasuphol@vasupholatharyuti.com