← Back to Home

Privacy Policy

Last Updated: November 9, 2026

MOTRA AI ("we," "us," or "the Platform") takes your privacy seriously. This Privacy Policy explains what personal data we collect, how we use it, how long we keep it, and the rights you have over it. By using the Platform, you agree to this Policy.

1. Global Privacy Rights (GDPR, CCPA/CPRA & Other Laws)

We respect your privacy rights worldwide. Depending on where you live, you may have the right to access, correct, delete, restrict, or object to the processing of your personal data, and the right to data portability.

• EU / EEA / UK users: We process your data in accordance with the General Data Protection Regulation (GDPR). Our legal bases for processing are: performance of our contract with you (providing the generation service), our legitimate interests (security, fraud prevention), and your consent (optional communications).
• California / US users: We comply with the California Consumer Privacy Act as amended by the CPRA (CCPA/CPRA). We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
• Other regions: We honor applicable local data protection laws (e.g., Brazil's LGPD, Canada's PIPEDA).

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days (or the shorter period required by your local law). You also have the right to lodge a complaint with your local data protection authority.

2. Data We Collect & How We Use It

• Account information: username, email address, and encrypted (hashed) password — used to create and secure your account.
• Content you provide: images, videos, audio files you upload, and the text prompts you enter — used solely to generate the content you request.
• Transaction information: recharge records, order numbers, and payment method type. We do not store your full card number or payment password; payments are processed by our payment providers.
• Device & log data: IP address, browser type, and access times — used for security auditing, rate limiting, and anti-fraud.

3. Third-Party Processing & Sharing

We do not sell your personal information. We share data only as needed to operate the Service:

• AI generation providers: your uploads and prompts are transmitted to third-party AI inference providers (e.g., RunningHub and the underlying model providers) strictly to process your generation request.
• Payment providers: to process your transactions.
• Email service providers: to send verification codes, password resets, and essential service notices.
• Legal requirements: when disclosure is required by applicable law or valid legal process.

Your data may be processed on servers located outside your country (including Hong Kong and the locations of our AI providers). Where required, we rely on appropriate safeguards for such transfers.

4. Data Retention & Deletion

• Uploaded original files: used only to process your request and deleted from our servers promptly after the generation task completes.
• Generated outputs & task history: your creation history is accessible in your account for 3 days. Generated files are hosted by our AI infrastructure providers and are automatically deleted or become permanently inaccessible after this period.
• Account information: kept while your account is active; deleted or anonymized within 30 days of account deletion, except where retention is required by law (e.g., transaction records).
• Security & audit logs: retained for up to 90 days.

5. Data Security

We protect your data with HTTPS encryption in transit (including HSTS), hashed password storage, rate limiting, and access logging. No internet transmission is perfectly secure, but we work continuously to protect your information.

6. Cookies & Local Storage

We use browser localStorage to store your login token and language preference. We do not use advertising trackers or third-party analytics cookies.

7. Children's Privacy

The Platform is not directed at children under 16 (or the minimum age required by your local law). We do not knowingly collect data from children. If you believe a child has provided us personal data, contact us and we will delete it.

8. Business Compliance (DPA)

For business clients who require a Data Processing Agreement (DPA) for GDPR or other compliance purposes, please contact us at [email protected] to sign a standard DPA.

9. Changes to This Policy

We may update this Policy from time to time. Material changes will be announced on the Platform before they take effect. The "Last Updated" date above shows the current version.

10. Contact Us

For any privacy questions or requests: [email protected]