Privacy

Privacy Policy.

How VoolMotion collects, uses, shares and protects your account information, product media and render data.

Last updated: July 8, 2026.

This Privacy Policy explains how VoolMotion (“VoolMotion”, “we”, “us”) processes personal data when you visit voolmotion.com, use the Studio editor at studio.voolmotion.com, or use our rendering API. It applies to visitors, account holders and paying customers worldwide. VoolMotion is currently an independent project and brand, not yet incorporated as a registered company, and is operated by its owner, who acts as the data controller. For any privacy request, contact contact@voolmotion.com.

1. Information we collect

We collect only what the service needs to work:

  • Account data. Your name, email address, and a securely hashed password. If you sign in with Google, we receive your name, email address and profile picture from Google (we never receive your Google password).
  • Content you create and upload. Templates you select or edit, and the product images, video, audio, copy, brand assets and render variables you upload or enter. Customer project media is stored in a private storage bucket; media attached to publicly published library templates is stored on our public CDN.
  • Rendered output. The videos you export and related job metadata (format, duration, status, export history).
  • Billing data. Your subscription plan, status and identifiers. Payments are processed by our merchant of record, LemonSqueezy — we never receive or store your full card number.
  • Technical & usage data. IP address, browser/device information, pages viewed, and diagnostic events, collected to keep the service secure, reliable and rate-limited.
  • Cookies. A first-party vm_session cookie keeps you signed in. We use it for authentication and security, not third-party advertising.

2. How we use your information

  • Create and manage your account and keep you signed in.
  • Store your templates and media and render your videos.
  • Process subscriptions, upgrades, downgrades and renewals.
  • Send transactional email (verification, password reset, receipts, service notices).
  • Secure the service — authentication, abuse prevention, rate limiting and fraud detection.
  • Diagnose errors and improve product performance and reliability.

3. Legal bases (EEA/UK)

Where GDPR/UK GDPR applies, we rely on: performance of a contract (providing the service you signed up for), legitimate interests (securing and improving the service), consent (where required, e.g. optional analytics), and legal obligation (tax and accounting records).

4. Cookies & error/session diagnostics

We use a strictly necessary session cookie to authenticate you. We also use Sentry for error and performance monitoring, which may include session replay that records interactions with the Studio interface to help us reproduce bugs. Replays are used solely for diagnostics; we configure them to mask input where feasible and do not use them for advertising. We do not sell your personal data.

5. Who we share data with (subprocessors)

We do not sell personal data. We share it only with vetted service providers who process it on our behalf to run the service:

  • Supabase — application database (accounts, subscriptions, template metadata).
  • Cloudflare (R2) — storage and delivery of media and rendered videos.
  • Google Cloud (Cloud Run) — hosting of our API and render service.
  • Vercel — hosting of the website and Studio editor.
  • LemonSqueezy — merchant of record for payments and subscription billing.
  • Resend — transactional email delivery.
  • Google — Sign-in with Google (optional) and font delivery.
  • Sentry — error, performance and session-replay diagnostics.

We may also disclose data where required by law, or to protect our rights, users and the security of the service.

6. Data retention

We keep account, template and media data for as long as your account is active. If you delete content or close your account, we delete or anonymize associated personal data within a reasonable period, except where we must retain records (e.g. billing/tax) or as needed to resolve disputes and enforce our agreements. Backups are purged on a rolling basis.

Exported videos. On paid (Pro) plans, we store the most recent exported video per project for up to 30 days so you can re-download it, keeping at most one export per project; a new export replaces the previous one, and stored exports are removed after 30 days or when you delete the project or your account. On the free plan we do not store exported videos — the file is delivered to your browser for download only.

7. International transfers

Our providers may process data in the United States, the European Union and other regions. Where personal data is transferred outside your country, we rely on appropriate safeguards such as Standard Contractual Clauses provided by those subprocessors.

8. Security

We protect data with encryption in transit (TLS), hashed passwords, scoped access tokens, per-IP rate limiting and least-privilege access to production systems. No method of transmission or storage is perfectly secure, but we work to protect your information and to respond promptly to incidents.

9. Your rights

Depending on where you live (e.g. EEA/UK under GDPR, California under CCPA/CPRA), you may have the right to access, correct, delete, export or restrict processing of your personal data, to object to certain processing, and to withdraw consent. To exercise any right, email contact@voolmotion.com. We will not discriminate against you for exercising these rights.

10. Children

VoolMotion is not directed to children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.

11. Changes to this policy

We may update this policy as the service evolves. We will revise the “Last updated” date above and, for material changes, provide additional notice.

12. Contact

Questions or requests about privacy? Email contact@voolmotion.com.