Privacy Policy

1. Summary in one paragraph

We do not collect names, email addresses, phone numbers, or any other directly identifying information. We assign you a random access code stored in your browser, optionally remember a wallet address you enter as your identifier, log your usage tied to that code, and process payments through a third-party crypto payment processor. We do not sell or share your data with advertisers.

2. What we collect

2.1 Identifiers you create

• Access code — generated in your browser the first time you visit, stored in your browser’s localStorage. We never see your real identity tied to it.
• Wallet address — if you choose to attach an EVM, Solana, or Bitcoin wallet, we store its public address and treat that address as your identifier.

2.2 Usage records

• Credit ledger — every credit purchase and consumption tied to your access code or wallet address, including timestamps and provider attribution.
• API usage events — per-call records of which endpoint was called, which AI provider it routed to, token counts, and computed cost. We use these to bill credits and detect abuse.
• Payment records — for each crypto top-up: the chain, asset, amount in native units, amount in USD at confirmation, transaction hash, and your access code. We need these for accounting and dispute resolution.

2.3 Technical data

• Request logs — IP address, user-agent string, request path, timing. Retained 30 days, used for abuse prevention.
• Error and performance telemetry — backend metrics.

3. What we do not collect

We do not collect: your name, email, phone, postal address, date of birth, government ID, KYC data, biometrics, precise location, browsing history outside our Service, or any data from third-party advertising networks. We do not run advertising trackers, fingerprinting scripts, or session-replay tools.

4. Why we process the data

• To provide the Service: identify your credit balance and serve metered API responses.
• To accept payment: process crypto via NOWPayments and credit your balance.
• To prevent abuse: detect rate-limit violations and protect infrastructure.
• To comply with legal obligations: respond to lawful requests, preserve transaction records.

5. Sub-processors

We rely on third parties to operate the Service. Each receives only the data necessary for its function:

• NOWPayments — processes crypto transactions and delivers signed webhook confirmations. They see the chain, amount, and transaction hash. They do not receive your access code.
• DigitalOcean — hosts our servers and managed database.
• Cloudflare — serves the dashboard and provides DDoS protection. May see IP addresses.
• OpenAI, Anthropic, Voyage AI — receive the text or image content of social signals being analyzed, never your identifiers.

6. How long we keep your data

• Credit ledger and payment records: retained for the life of the Service (accounting / dispute resolution).
• Usage events: retained 12 months, then aggregated and deleted at the per-record level.
• Request logs: 30 days.

7. Your rights

Because we do not collect directly identifying information, most data-subject rights (access, deletion, portability under GDPR, CCPA, etc.) are technically limited — we cannot link a request to data unless you provide the access code or wallet address tied to it.

To exercise your rights:

• Access: email us with your access code or wallet address; we will return the associated ledger entries and usage records.
• Deletion: email us with your access code or wallet address; we will redact the associated rows where legally permitted. We may retain payment records as required by law.
• Portability: we will return your records in JSON.
• Email privacy@motionscreener.com for any of the above.

If you are in California, you also have the right not to be discriminated against for exercising these rights. We do not discriminate.

8. Cookies and similar technologies

We do not use HTTP cookies for the Service’s functionality. We do use your browser’s localStorage to remember your access code and cache the last API response so the dashboard works when you’re out of credits. See our Cookie Policy for the full breakdown.

9. International transfers

Our servers are in the United States. If you access the Service from elsewhere, your data crosses borders. By using the Service, you consent to this transfer.

10. Children

The Service is not directed to children under 13. We do not knowingly collect data from them.

11. Security

We use industry-standard transport encryption (HTTPS), enforce idempotent webhook verification with HMAC-SHA512, and segregate secrets in environment-only configuration. No system is perfect; we do not warrant against unauthorized access.

12. Changes to this Policy

We will indicate a new effective date when this Policy changes. Continued use after the new date constitutes acceptance.

13. Contact

Privacy questions: privacy@motionscreener.com.