This Privacy Policy describes how Motionworks AI, Inc. ("Motionworks," "we," "us") collects, uses, and discloses information in connection with the Motionworks web application (app2.mworks.com), the Motionworks API (api2.mworks.com), the Motionworks marketing website (mworks.com), and any related services (collectively, the "Services").
When you sign up for app2.mworks.com or api2.mworks.com, we collect:
When you use the Services, we collect:
For paid plans, we collect billing information through our payment processor (Stripe), including:
When you communicate with us (support requests, sales inquiries, email correspondence), we retain the content of those communications.
The Motionworks web surfaces use cookies and analogous storage for session management, security, and product analytics. We do not use cookies for advertising tracking. You may control cookie behavior through your browser settings.
If you sign in to the Services using a third-party identity provider (Google, Microsoft, or GitHub), we receive the data described below under each provider's OAuth authorization. We request only the minimum scopes required to authenticate your account and will not request scopes for features that are not yet implemented.
Google. When you authorize Motionworks via Google, we receive your Google account ID, name, email address, and profile picture under the openid, email, and profile scopes. This data is used solely to create or authenticate your Motionworks account. We do not access any other Google data (Gmail, Drive, Calendar, etc.) unless a specific product feature requiring that scope is explicitly requested by you.
Microsoft. When you authorize Motionworks via Microsoft (Entra ID / Microsoft account), we receive your Microsoft account ID, name, and email address under the openid, email, and profile scopes. This data is used solely to create or authenticate your Motionworks account.
GitHub. When you authorize Motionworks via GitHub, we receive your GitHub account ID, username, public email address, and public profile data. This data is used solely to create or authenticate your Motionworks account. We do not read, store, or process the content of your repositories, issues, pull requests, or private data unless a specific product feature requiring that access is explicitly enabled by you.
For all three providers: third-party sign-in data is retained only for as long as your Motionworks account is active or as needed to provide the Services. You may revoke Motionworks' access at any time through your identity provider's connected-apps settings (e.g., Google permissions, Microsoft My Apps, or GitHub Authorized OAuth Apps). Upon revocation or account closure, we delete your third-party identity data from production systems within thirty (30) days, with backup deletion completing within ninety (90) days. To request deletion at any time, contact privacy@mworks.com.
We use the information described in Section 1 to:
We do not sell, rent, or trade your information. We share information only as described below:
We implement appropriate technical and organizational measures to protect information against unauthorized access, loss, destruction, or alteration. These measures are described in detail in our Data Processing Addendum. They include encryption at rest and in transit, role-based access controls, multi-factor authentication, network segmentation, and continuous monitoring.
No system is perfectly secure. If we discover a security breach affecting your information, we will notify you in accordance with applicable law and our DPA.
Depending on your jurisdiction, you may have rights to:
To exercise these rights, contact us at privacy@mworks.com. We will respond within thirty (30) days, or sooner if required by applicable law.
If you are in the European Economic Area, the United Kingdom, or another jurisdiction with comparable data protection law, additional rights and procedures may apply. Contact us for the applicable supplemental notice.
The Services are operated from the United States. If you access the Services from outside the United States, your information may be transferred to, stored in, and processed in the United States.
The Services are not directed to children under the age of 13 (or 16 in jurisdictions where that is the threshold). We do not knowingly collect information from children. If we learn that we have collected information from a child, we will delete it.
We may update this Privacy Policy at any time. Material changes are communicated via email to the address associated with your account at least thirty (30) days prior to the effective date. Continued use of the Services after the effective date constitutes acceptance of the revised Privacy Policy.
Motionworks' use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, Motionworks:
For privacy questions or to exercise your rights, contact us at:
Motionworks AI, Inc.
Attention: Privacy
privacy@mworks.com