1. Who we are
MotionMRR (“MotionMRR”, “we”) is the data controller for the personal data described below.
Contact for anything privacy-related: hello@motionmrr.com.
2. What we collect
Account data
- Email address and, if you use Google sign-in, your name and profile picture.
- A hashed password if you sign up with email (we never see or store it in plain text).
Payment provider connection
- The API key you paste for your payment provider (Stripe, Lemon Squeezy, Paddle, Polar, Dodo Payments or RevenueCat), read-only wherever the provider allows it. It is encrypted at rest and never displayed again.
- Revenue data read through that key: subscription amounts, currencies, billing intervals, and dates, used to compute your MRR over time.
- We do not keep your customers’ names, emails or payment details. If the provider returns them, they are discarded and not stored.
Content you create
- Rendered videos, their privacy settings, and your public page if you publish it.
Billing
- Subscriptions are processed by Polar, acting as merchant of record. We receive your plan, billing status and country, never your full card number.
Technical data
- Logs needed to run and secure the service (IP address, browser, timestamps).
3. Why we use it, and on what legal basis
| Purpose | Legal basis (GDPR art. 6) |
|---|---|
| Creating your account and rendering your videos | Performance of our contract with you |
| Billing and invoices | Contract, and legal obligations (accounting) |
| Security, fraud prevention, debugging | Our legitimate interest in running a safe service |
| Product emails (e.g. “your new record is ready”) | Contract; you can turn them off in settings |
| Marketing emails | Your consent, which you can withdraw anytime |
4. What is public
Nothing, by default. A video or public page becomes visible only when you publish it, and only with the figures you chose to show (exact MRR, growth only, or curve only). You can unpublish at any time.
5. Who we share it with
We use a small number of processors, bound by data processing agreements:
- Supabase — authentication and database
- Cloudflare — hosting, delivery and video storage (R2)
- Contabo — the server that renders videos
- Polar — payments, as merchant of record
- Resend — transactional emails
- Google (Google Analytics) — site usage statistics, only if you accept analytics cookies
We never sell your data or your revenue figures.
6. International transfers
Some processors may store data outside the European Economic Area. When they do, transfers are covered by the European Commission’s Standard Contractual Clauses or an adequacy decision.
7. How long we keep it
- Account and videos: while your account is open.
- API key: until you disconnect the provider or delete your account, then deleted immediately.
- Billing records: as long as tax law requires. Polar, our merchant of record, keeps the invoices.
- Technical logs: 12 months maximum.
Deleting your account removes your data and every render within 30 days, backups included.
8. Your rights
You can access, correct, export or delete your data, object to or restrict its use, and withdraw consent at any time. Most of this is one click in your dashboard; for anything else, email hello@motionmrr.com. We answer within one month.
If you think we got something wrong, tell us first. You can also complain to your local data protection authority.
9. Security
Keys are encrypted at rest, traffic is encrypted in transit, and access to production data is limited to people who need it. We only ever request read-only permissions.
10. Changes
If we change this policy in a way that matters, we’ll email you before it takes effect. The date at the top always shows the latest version.