Privacy Policy

GDPR (EU 2016/679) · CCPA (California) · Spanish LOPDGDD

MotionFeeling is a Spanish-Basque initiative operated by AgentFlowing Technologies S.L. (in formation), headquartered in Donostia-San Sebastián, Basque Country, Spain, and governed by EU law.

Last updated: March 5, 2026

1. Data Controller

  • Company: AgentFlowing Technologies S.L. (in formation)
  • Brand: MotionFeeling
  • Address: Donostia-San Sebastián, Gipuzkoa, Spain
  • Privacy Contact: privacidad@motionfeeling.com

2. Purposes of Processing

  • Service Delivery: managing your account, processing real-estate videos and digital clones.
  • Billing: processing payments and invoicing via Stripe.
  • Support: handling technical inquiries and support requests.
  • Service Improvement: analysing platform usage with anonymised data.
  • Marketing: only with your explicit consent (newsletter opt-in).

3. Legal Basis

  • Contract performance (Terms & Conditions).
  • Consent (non-essential cookies, newsletter, digital clone).
  • Legitimate interest (platform security, fraud prevention).
  • Legal obligation (financial/tax compliance).

4. Data Processors & Recipients

  • Supabase — database infrastructure within the EU/EEA.
  • Stripe Inc. — secure payment processing (PCI-DSS Level 1).
  • OpenAI, Replicate, ElevenLabs — AI content generation (no public model training with your data).
  • Google — authentication via Google Login.

5. International Transfers

Processors outside the EEA operate under the EU-US Data Privacy Framework (DPF) or EU Standard Contractual Clauses (SCC), ensuring an adequate level of data protection.

6. Retention Periods

  • Active accounts: for the duration of the account.
  • Financial records: 6 years (EU tax-compliance obligations).
  • Clone models: until deletion is requested.
  • Generated files: 30-day automatic retention policy.

7. Security

We implement TLS 1.3 encryption in transit and AES-256 at rest, OAuth 2.0 authentication, restricted database access, and regular security audits.

8. California Residents (CCPA)

Under the California Consumer Privacy Act (CCPA / CPRA), California residents have the right to know what personal information is collected, to delete it, to opt out of its sale (we do not sell data), and to non-discrimination for exercising these rights. Contact us at privacidad@motionfeeling.com.

9. Your Rights Under GDPR

Access
Rectification
Erasure
Objection
Restriction
Portability

To exercise your rights, email privacidad@motionfeeling.com. You also have the right to lodge a complaint with the supervisory authority.

Supervisory authority: Spanish Data Protection Agency (AEPD)