Privacy policy

This policy explains what personal data Dijital Mekan Ltd ("we", "us", "our") collects when you visit appmotion.video, create an account, order a video or contact us; why we collect it; who we share it with; and the rights you have. We are the data controller. We are a company registered in England and Wales, so the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 apply to everything we do with your data. If you are in the European Economic Area, the EU GDPR gives you the same rights, and we honor them in the same way.

1. Who we are and how to contact us

Dijital Mekan Ltd, 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. Questions about this policy or your data: hello@appmotion.video. We aim to reply within five business days.

2. The data we collect

When you visit the website

• Technical and security data: your IP address, browser type, the pages requested and the time of the request, kept in server logs to keep the site secure and diagnose faults.
• No analytics or advertising cookies. We do not load analytics or advertising tags at the moment. If we start, we will ask for your consent first and update our cookie policy.

When you create an account

• Account data: your name, e-mail address, password (stored only as a one-way hash), your language and appearance preferences, and whether you turned on two-step verification.
• Security data: sign-in times, IP addresses and the device or browser used, kept in an activity log so we can spot unauthorized access.

When you order a video

• The brief: everything you tell us about your app or website, the options you choose, and the files you upload (logos, fonts, screen recordings, screenshots, reference material). We only use them to make your video.
• Company details for invoices: a company name and, if you enter one at checkout, a tax ID and billing address.
• Payment data: payment is handled by Stripe. We never see or store your full card number. Stripe sends us the payment status, the last four digits and card brand, the amount, the currency you paid in and links to your invoice and receipt.
• Messages: the messages you exchange with our team inside your dashboard, and the scripts and videos we deliver to you.

When you write to us

Your e-mail address, name and whatever you include in the message.

3. Why we use your data and our legal basis

Purpose	Legal basis
Running your account and producing the videos you order	Performance of a contract
Taking payment, issuing invoices and receipts, keeping accounting records	Contract and legal obligation
Sending order updates (order confirmed, script ready, video delivered) and replying to your messages	Contract
Reminding you about an unfinished order once, by e-mail	Legitimate interest (you started the order; you can delete the draft any time)
Occasional tips and offers by e-mail	Consent (the "Tips and offers" switch in your account, off by default)
Keeping the site secure, preventing fraud and abuse	Legitimate interest
Showing a finished video in our portfolio	Consent (the checkbox on the order form; you can withdraw it by messaging us)

4. Who we share data with

We never sell personal data. We share it only with the providers we need to run the service, each bound by a contract that limits what they may do with it:

• Stripe Payments Europe, Ltd. and Stripe, Inc. for payments, invoices, receipts and fraud prevention. Stripe is an independent controller for the payment itself; see Stripe's privacy policy.
• OpenAI, L.L.C. for automated replies in the order messages: when this feature is on, the text of your message and the details of the order it belongs to (brief, status, dates, file names, your first name) are sent to OpenAI's API in the United States to draft an answer. OpenAI does not use data sent through its API to train its models and may keep it for up to 30 days to monitor abuse. Replies written this way are labelled as automated, the team reads every message, and refunds, cancellations and complaints are always handled by a person.
• Telegram for the team's internal notifications: only order numbers and event names, never your name, e-mail address or the text of your messages.
• Our hosting provider in the European Union, where the website, your files and our database live.
• Our e-mail delivery provider, which sends the account and order e-mails described above.
• AI voice and production tools (for example ElevenLabs for voiceovers). They receive the script text and the voice settings, never your account details or your files.
• Professional advisers and authorities where the law requires it, for example HMRC for tax records.

5. International transfers

Some providers process data outside the United Kingdom, mainly in the United States. Where that happens we rely on the UK International Data Transfer Agreement or the EU Standard Contractual Clauses with the UK Addendum, and on the UK Extension to the EU-US Data Privacy Framework where the provider is certified.

6. How long we keep data

• Account data: for as long as your account exists. When you delete your account we remove your name and e-mail address straight away.
• Order records, invoices and payment records: six years after the end of the financial year in which the order was placed, as required by UK tax law.
• Files you upload: deleted 90 days after the order is completed or cancelled.
• Delivered videos: available in your dashboard for 365 days after delivery, then deleted. Download and keep your own copy.
• Unfinished orders (drafts): deleted after 30 days without activity.
• Server and security logs: 90 days.
• Messages with our team: as long as the order record.

7. Your rights

You can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or move it to another provider. Where we rely on consent you can withdraw it at any time. Most of this you can do yourself from your account (edit your profile, switch notifications off, delete your account). For anything else, e-mail hello@appmotion.video. We reply within one month.

If you are unhappy with how we handle your data you can complain to the Information Commissioner's Office (ico.org.uk) or, if you are in the EEA, to your local data protection authority. We would appreciate the chance to sort it out first.

8. Security

The site is served over HTTPS only. Passwords are stored as one-way hashes. Files you upload and the videos we deliver are stored outside the public web root and served only to your signed-in account and our team. You can add two-step verification to your account. Our team accesses order data only to produce your video and support you.

9. Children

Our service is for businesses and professionals. We do not knowingly collect data from anyone under 16.

10. Changes to this policy

We update this page when our practices change and show the date at the top. For significant changes we e-mail account holders.