Your data, handled with care

What we store, and for how long

To make your videos we keep your account (e-mail, name, language), the briefs, scripts, documents and links you give us, and the videos we generate. Billing data stays with Stripe; we never see card numbers.

You can delete any video or project at any time. Deleting your account erases it for good 30 days after the request (a grace period in case you change your mind), except what the law makes us keep, such as invoices. The full list of retention periods is in the privacy policy.

Encryption and access

How the platform protects data today:

• In transit: HTTPS everywhere, certificates renewed automatically.
• Secrets: session tokens and API keys are stored as hashes; an API key is shown once, when you create it.
• Files: private bucket, downloads through signed links that expire.
• Webhooks: every delivery is signed (HMAC) so your server can check it comes from us.
• At rest: database and file storage encrypted at rest by the hosting providers [to be confirmed at go-live].
• Internal access: limited to the people who run the service; admin actions are logged.

Where data is stored

We plan to keep the database and video storage in the European Union (Paris region). Final regions will be listed here at go-live [to be confirmed at go-live].

Emy Labs LLC is a US company and some providers below are based in the United States. Transfers of personal data from the EEA, the UK or Switzerland rely on the European Commission’s Standard Contractual Clauses or the EU-U.S. Data Privacy Framework, as explained in the privacy policy.

AI Act: videos are labelled

Motiongist videos use synthetic voices and generated visuals. Article 50 of the EU AI Act asks that such content be marked, so:

• every MP4 file carries a machine-readable “AI-generated” mark in its metadata;
• the video page in your studio shows that the video was generated by AI;
• videos made on the free plan also carry a visible watermark;
• when you publish, we ask you to disclose it too; most platforms require it as well (see the terms).

Your GDPR rights

Wherever you are, you can:

• access your data and get a copy;
• correct what is inaccurate;
• delete your account and data;
• take your data elsewhere (portability);
• object to processing based on legitimate interests, and withdraw consent at any time (for cookies: the “Cookie settings” link in the footer);
• restrict processing while a request is handled.

Export your data or delete your account yourself from Settings. For anything else, write to contact@emylabs.com: we answer within one month. If you're in the EU, you can also complain to your data protection authority (the CNIL in France). Details in the privacy policy.