Privacy Policy

Last updated: October 11, 2026

This policy explains what personal data Total Motion (totalmotion.app and totalmotion.com.br) collects, why, who we share it with, and your rights.

1. Who we are

The data controller is [FULL NAME OR COMPANY NAME], [TAX ID], [ADDRESS]. Privacy contact: [CONTACT EMAIL].

2. Data we collect

• Account: email and password. Passwords are stored only as a cryptographic hash (Argon2id); nobody, including us, can read them.
• Uploaded photo: the image you upload to create a video. It is sent to our AI provider to generate the character sheet and the video and is not stored on our servers.
• Generated content: the character sheet (an image with views of the person in the photo), the video, and the optional text you type.
• Payments: package, amount, date and transaction ID. Card details are handled directly by Stripe or Mercado Pago; we never receive or store card data.
• Technical data: IP address, access date and time, and error logs, used for security and fraud prevention.

3. Why we use it

• To run your account, generate your videos and process payments (performance of a contract).
• To process your facial image to create the character sheet and video, based on the consent you give by ticking the box before generating. We do not use your photo to identify you or to train AI models.
• Security, fraud prevention and access logs (legitimate interest and legal obligations).
• Sales tax records (legal obligation).

4. Who we share it with

Only the providers needed to run the service, acting on our behalf: BytePlus (ModelArk) for image and video generation, Stripe and Mercado Pago for payments, Resend for account emails, and Railway for hosting. Some of them process data outside your country (for example in the United States and Singapore) under contractual safeguards. We do not sell your data.

5. How long we keep it

• Uploaded photo: not stored by us.
• Videos and character sheets: deleted automatically 30 days after creation. Download anything you want to keep.
• Account: until you delete it.
• Access logs: 6 months.
• Payment records: as long as tax law requires, unlinked from your contact data after account deletion.

6. Cookies

We only use essential cookies: one to keep you logged in and one to remember your language. No advertising or tracking cookies.

7. Your rights

You can access, correct, export or delete your data and withdraw consent at any time. To delete your account and all your videos, use "Delete my account" on the site. For anything else, email [CONTACT EMAIL]. You may also complain to your local data protection authority.

8. Minors

Total Motion is for people 18 and older. Uploading photos of children or teenagers is prohibited.

9. Security

We use encrypted connections (HTTPS), hashed passwords, access control so each person only sees their own videos, and logs that never store passwords, tokens or payment data. No system is 100% secure; if a significant incident happens, we will notify you as required by law.

10. Changes

Updates will be posted on this page with a new date. Significant changes will be emailed to you.