Privacy Policy
GDPR (EU 2016/679) · CCPA (California) · Spanish LOPDGDD
MotionFeeling is a Spanish-Basque initiative operated by AgentFlowing Technologies S.L. (in formation), headquartered in Donostia-San Sebastián, Basque Country, Spain, and governed by EU law.
Last updated: March 5, 2026
1. Data Controller
- Company: AgentFlowing Technologies S.L. (in formation)
- Brand: MotionFeeling
- Address: Donostia-San Sebastián, Gipuzkoa, Spain
- Privacy Contact: privacidad@motionfeeling.com
2. Purposes of Processing
- Service Delivery: managing your account, processing real-estate videos and digital clones.
- Billing: processing payments and invoicing via Stripe.
- Support: handling technical inquiries and support requests.
- Service Improvement: analysing platform usage with anonymised data.
- Marketing: only with your explicit consent (newsletter opt-in).
3. Legal Basis
- Contract performance (Terms & Conditions).
- Consent (non-essential cookies, newsletter, digital clone).
- Legitimate interest (platform security, fraud prevention).
- Legal obligation (financial/tax compliance).
4. Data Processors & Recipients
- Supabase — database infrastructure within the EU/EEA.
- Stripe Inc. — secure payment processing (PCI-DSS Level 1).
- OpenAI, Replicate, ElevenLabs — AI content generation (no public model training with your data).
- Google — authentication via Google Login.
5. International Transfers
Processors outside the EEA operate under the EU-US Data Privacy Framework (DPF) or EU Standard Contractual Clauses (SCC), ensuring an adequate level of data protection.
6. Retention Periods
- Active accounts: for the duration of the account.
- Financial records: 6 years (EU tax-compliance obligations).
- Clone models: until deletion is requested.
- Generated files: 30-day automatic retention policy.
7. Security
We implement TLS 1.3 encryption in transit and AES-256 at rest, OAuth 2.0 authentication, restricted database access, and regular security audits.
8. California Residents (CCPA)
Under the California Consumer Privacy Act (CCPA / CPRA), California residents have the right to know what personal information is collected, to delete it, to opt out of its sale (we do not sell data), and to non-discrimination for exercising these rights. Contact us at privacidad@motionfeeling.com.
9. Your Rights Under GDPR
To exercise your rights, email privacidad@motionfeeling.com. You also have the right to lodge a complaint with the supervisory authority.
Supervisory authority: Spanish Data Protection Agency (AEPD)