← Back to home

Privacy Policy

Last updated: August 9, 2026

1. Information We Collect

When you create an account, our identity provider processes your email address, password credentials, and phone number for verification. When you use our service, we collect the prompts and reference media you submit, generated images and videos, and basic usage metadata such as timestamps, generation settings, and credit transactions.

If you opt in, Google Analytics 4 and PostHog collect optional analytics such as page views, traffic source, device information, general geographic region, and product usage. These tools and marketing-attribution cookies remain off until you consent. You can withdraw that consent at any time in Settings; withdrawing stops future optional analytics and removes the optional analytics and attribution cookies we can access. We do not record user sessions.

When you accept a legal agreement, we create an evidence record containing your account identifier, the document type and version, a cryptographic digest of the accepted document, the server-recorded date and time, locale, authentication session identifier, acceptance method, browser user agent, and the IP address supplied by Cloudflare. We also retain arbitration opt-out messages sent to our support address.

2. How We Use Your Information

We use your information to:

  • Provide and improve our image and video generation service
  • Process credit purchases and manage your account
  • Send transactional notifications (generation complete, low credits, purchase confirmations)
  • Prevent abuse and enforce our terms of service
  • Record and prove agreement acceptance and arbitration choices
  • Comply with legal obligations

We do not sell your personal information to third parties. We do not use your prompts or generated images to train AI models.

To provide generation features, prompts and the reference images, video, or audio you select are sent to AtlasCloud and the applicable MiniMax model infrastructure. OpenAI processes submitted prompt text for moderation, and AWS Rekognition processes selected image frames for safety checks. We share only the material needed for the requested generation, moderation, storage, or support function.

3. Content Storage & Deletion

Generated images and videos are stored on Cloudflare R2 and associated with your account. You can delete individual content or entire projects through available dashboard controls. Deletion removes the content from your active Service views and schedules or attempts cleanup of the related object-storage files. Limited tombstones, safety evidence, short-lived backups, legal holds, and records we must retain may remain where reasonably necessary.

If you delete your account, we first close open payment sessions and any retained legacy billing agreement, remove your sign-in identity, hide the account and its content from the Service, and begin best-effort cleanup of stored images, videos, and reference media. Related database records are disabled or tombstoned. Limited billing, credit, fraud, moderation, security, consent, dispute, and legal-compliance records may remain where retention is reasonably necessary or legally required. Versioned agreement-acceptance records and arbitration opt-out evidence are retained for as long as reasonably necessary to document assent, administer disputes, enforce agreements, satisfy legal obligations, or respond to a legal hold. Limited account and IP security history may be retained as reasonably necessary to detect repeat abuse, protect users, and defend the Service.

4. Third-Party Services

We use the following third-party services to operate Minimax Motion:

  • Clerk — Authentication and identity
  • Supabase — Database hosting
  • Cloudflare R2 — Image and video storage
  • Stripe — Payment processing (we never see or store your full card details)
  • Google Analytics — Web analytics and usage tracking
  • PostHog — Product analytics and traffic-source attribution (US-hosted)
  • Railway — Application hosting
  • AtlasCloud — AI image and video generation infrastructure
  • OpenAI — Content moderation of submitted prompts
  • OpenRouter — Prompt-writing assistance when requested by you
  • Amazon Web Services (Rekognition) — Content moderation of uploaded and generated images
  • Postmark — Transactional and support email delivery
  • Arcjet — Abuse prevention, bot detection, and rate limiting

Each of these services has their own privacy policy. We only share the minimum data necessary for each service to function.

5. Data Security

We implement industry-standard security measures including encrypted connections (TLS), hashed passwords, rate limiting, and access controls. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

6. Your Rights

You may request access to or correction of your personal data, and you can delete your account from account settings. For privacy-related requests, contact us at help@minimaxmotion.com.

Depending on where you live, you may also have rights to restrict or object to processing, receive a portable copy, or appeal a request decision. These rights may be limited where we must preserve records to establish, exercise, or defend legal claims, prevent fraud, or comply with law.

7. Legal-Agreement Evidence

Agreement evidence is used only to administer the Service, demonstrate the version and manner of your assent, enforce our agreements, respond to disputes, and comply with legal obligations. Product analytics events are not treated as authoritative proof of acceptance; the server-recorded agreement record is authoritative.

8. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

Privacy Policy | Minimax Motion