Privacy Policy

This policy describes what Motif collects when you use the website and the studio, why, and who else handles it. It covers every account, with a plan or without one.

Motif is a product of Ambitious Machines, Inc., a Delaware corporation with its mailing address at 2810 N Church St, STE 90429, Wilmington, DE 19802, United States. “We” and “us” in this policy mean that company.

What we collect

Account data

Your email address and the times you sign in. You sign in with Google or with your email: we send a link and a six-digit code through Amazon SES. Either way we never receive or store a password. If you sign in with Google, Google also shares your name and the link to your profile picture, which we keep on your profile.

Brand kits and uploads

The logos, product photographs, colours, fonts and text you save to a brand kit. These are the material the product exists to work with, so they are stored for as long as your account is open and used to render your ads.

Ads you make

The images Motif produces for you, the brief and settings that produced each one, and the brand kit it was made with. We keep these so your campaigns and library persist between sessions and so a render can be reproduced.

Credits and billing

A new account starts with no credits. We record every credit bought, granted, spent and refunded, the plan you are on and the packs you buy. Card details, the billing address and any tax id you give at checkout are handled by Stripe; card details never reach our servers.

Technical logs

Standard request logs: paths, times, errors and IP addresses. We use them to keep the service running and to investigate abuse. The limits on how often an account and an address can render are counted with a digest of the address, never the address itself.

Visits to the website

The public pages of motif.team use the Meta Pixel, from Meta Platforms Ireland, and Google Analytics, from Google Ireland, to measure visits and to build advertising audiences. They record the pages you view, clicks on the email links, and your device and browser details, and Meta and Google set cookies of their own to do it.

PostHog, from PostHog, Inc. in the United States, receives the same page views and clicks on the email links (the walkthrough link among them). We use it to see which pages are read and how long a visit lasts. PostHog sets no cookie, stores nothing in your browser and does not record your screen. It receives your IP address and browser details with each request, and uses the address to estimate a rough location.

None of the three loads until you accept the cookie banner, and none loads at all if you decline. Your answer is kept in your browser, and Cookie settings at the foot of every page lets you change it. None of the three is loaded in the studio or on the sign-in pages. To object, write to machine@motif.team.

What we do not do

• We do not train models on your brand kits or your ads. Your uploads are used to render your images and nothing else.
• We do not sell your data, and we do not share it with advertisers.
• We do not publish or reuse your ads as marketing without asking you first.

How a render handles your data

A render has two halves. An image model paints the scene from your brief; then our own code sets your logo, colours and copy on top. Only the scene prompt, the render settings and any reference image the scene needs go to the model provider. Your logo, palette and copy are composited by Motif and are not sent to a model.

Who processes your data

Motif runs on a small set of providers. Each receives only what it needs to do its job:

• Supabase, for the database, sign-in and file storage, in Frankfurt, Germany (EU). It holds your account, brand kits, uploads, campaigns, ads, credit ledger and billing records.
• Amazon Web Services, for hosting the website and the studio (AWS Amplify), sign-in email (Amazon SES) and rendering (AWS Lambda), in Frankfurt, Germany (EU), with pages delivered from the network location nearest to you. Amplify sees each request: your IP address, the page asked for and your browser details. SES receives your email address to send the sign-in link and code. Lambda receives, for each render, the brief and the brand kit files it needs to composite the finished ad.
• Amazon Bedrock, part of Amazon Web Services, for image models from Stability, in US West (Oregon), United States. It receives the scene prompt, the render settings and any reference image the scene needs.
• ElevenLabs, for image models (Nano Banana 2 and GPT Image 2), in the United States. It receives the scene prompt, the render settings and any reference image the scene needs, and runs the model with the company that makes it.
• Replicate, for image models, in the United States. It receives the scene prompt, the render settings and short-lived links to any reference image the scene needs.
• Stripe, for payments, subscriptions and the billing portal, in the United States. It receives your email address, the plan or pack you buy, and the billing address and any tax id you enter at checkout. Card details are entered on Stripe's own pages and never reach us.
• Cloudflare, for the motif.team domain name, on its global network, nearest to you. It answers the lookups that find the site. The pages themselves do not pass through it.
• Google, for Sign in with Google, if you choose it, in the United States. It tells us your email address, name and profile picture link. We never receive your Google password.

Your account data is stored in the European Union. Using Motif means some of it is also processed in the United States, by the providers above that operate there.

How long we keep it

Brand kits, uploads and ads are kept while your account is open. Delete an item and it is removed from the product immediately and from backups within 30 days. Delete your account in Settings and everything above is removed at once, and from backups within 30 days, except the billing records we are required to keep for tax and accounting purposes.

Your rights

You can ask for a copy of your data, ask us to correct it, or ask us to delete it. If you are in the EU, the UK or another jurisdiction with equivalent law, these are rights rather than courtesies, and we will answer within 30 days. Write to machine@motif.team.

Security

Data is encrypted in transit and at rest. Brand kits and ads are isolated per account at the database level, so one account cannot read another's, and stored files are readable only by their owner. Access to production data is limited to what is needed to operate and support the service.

Cookies

Motif sets the cookies required to keep you signed in, and remembers your theme choice in the studio. On the public pages of the website, Meta and Google also set the cookies described under Visits to the website; PostHog sets none. The studio sets no advertising or cross-site tracking cookies.

Changes

If this policy changes in a way that materially affects you, we will email you before the change takes effect. The date at the top always reflects the current version.

Contact

Questions about this policy, or about your data: machine@motif.team. By post: Ambitious Machines, Inc., 2810 N Church St, STE 90429, Wilmington, DE 19802, United States.