Last updated: November 3, 2026

Privacy policy

Ghostmotion is operated by Enclave HK Limited. This policy covers the Ghostmotion website, web app and iPhone app, and the Ghostmotion API and MCP server that other apps use when you connect them to Ghostmotion. Contact hello@ghostmotion.ai with questions or requests about your personal data.

Information you provide

We receive account details such as your name, email address and account identifier; team membership and permissions; project briefs, conversations and edit instructions; links and files you choose to upload; brand and style-guide information; and support messages you choose to send. Uploaded files can include photos, video, audio, documents and reference material. You choose which files to provide. The app does not read your entire photo library, address book or email inbox.

How we use it

We use this information to authenticate you, provide your workspace, create and edit films, retain project conversations and versions, apply your sharing permissions, administer credits and purchases, respond to support requests, and protect and operate the service. Account, project and support information can be linked to your identity.

AI services and your choice

Before using AI in the iPhone app, you choose whether to allow AI data sharing. We show the data categories, recipients and purposes in the app before you choose. This permission covers new AI requests from that app and its share extension on that device. The share extension also asks you to confirm before creating from a shared link. Declining lets you browse saved projects and play existing films.

What is sent to AI services

Ghostmotion collects prompts and edit instructions when you send them, relevant project conversations and scene selections from your saved project, brand and style-guide information you provide or select, reference URLs and content retrieved from those URLs, and files you choose to upload through the app, the share sheet or a connected app. Files can include photos, video, audio and documents. These may contain personal information, including faces, voices, names or contact details included in your material. Our backend supplies relevant content to the providers below to fulfil your creation or editing request. Requests from connected apps are handled the same way. The services used depend on the work requested.

Anthropic (Claude)

Anthropic receives instructions, relevant conversation and project context, brand information and reference content to understand your brief, plan scenes and make AI edits.

fal.ai

fal.ai receives generation instructions and selected reference images, video or audio needed to generate media. fal.ai may process requests using the model providers and subprocessors identified in its applicable service terms and subprocessor disclosures.

ElevenLabs

ElevenLabs receives audio for transcription and voice scripts or audio instructions for speech, music and sound-effect generation, when those services are needed for your request.

BytePlus (Seedance and Seedream)

BytePlus receives generation instructions and selected reference images, video or audio when a video or image is made with its Seedance or Seedream models, including requests you send to those models through the Ghostmotion API.

Google (Gemini)

Google receives generation instructions and selected reference images or video when an image or video is made with a Gemini model, including requests you send to those models through the Ghostmotion API. Google also receives short video or audio clips, such as a reference you provide, so the creator can understand how they sound.

Protection by service providers

Third parties receiving personal data from Ghostmotion are required to provide the same or equal protection as described in this policy. For AI processing on our behalf, the providers’ applicable data-processing terms require processing under documented instructions, confidentiality, appropriate technical and organisational security safeguards, assistance with data rights and deletion, and protections for subprocessors and international transfers. We remain responsible for choosing providers and handling your privacy requests. These protections do not mean that data already sent can be recalled instantly or that every provider has identical retention periods.

Withdrawing AI permission

Turn off AI creation in Workspace → AI privacy to block new AI requests and reference submissions from the iPhone app and its share extension on that device. You can still browse existing work. Permission is specific to your account and this disclosure version; a revised disclosure requires a new choice. Turning permission off does not remove information already shared, stop a running job or change choices made on the website or another device. Use Stop in the project to stop an active run. To request deletion of previously shared information, contact hello@ghostmotion.ai; we will handle the request and work with relevant providers, subject to legal retention obligations.

Accounts, hosting, purchases and support

Clerk provides authentication and account management and processes account identifiers, sign-in information and technical information needed for security. Ghostmotion uses Google Cloud to store and serve projects and run creation jobs, and Cloudflare to deliver and protect its websites and API. Infrastructure and authentication providers may process device, browser, network and operational information needed to deliver and protect the service.

Website subscriptions and credit top-ups are processed by Stripe; purchases in the iOS app are processed by Apple through the App Store. Each payment provider processes payment details under its own privacy policy. Ghostmotion receives and retains purchase and subscription references, verified transaction records, renewal and refund status, workspace and payer associations, credit grants, balances and usage records to administer access, storage and billing. If you enable website automatic top-ups, Stripe retains the authorized payment method and Ghostmotion retains its reference and your threshold and purchase preferences. The app does not collect raw card numbers or bank-account credentials.

If you choose to open support chat, Intercom receives your account identity, device information and the messages or files you send. The app asks before opening support chat. You can turn support chat off, although messages already sent remain with support until handled or deleted under the applicable retention process.

Browsing and recording product pages

Browserbase runs the cloud browser that opens product URLs you give us so the creator can explore and record them. It receives those URLs, the pages they load and anything you type or show in that browser, including a sign-in you choose to complete there.

Link and media retrieval

When you share a public link to YouTube, Instagram, TikTok or X, or search for music or references, the link or search terms go to retrieval services that fetch the public post or media for us: Apify, ScrapeCreators and Mindcase, as well as the site that hosts the link. Music catalogue searches also go to Jamendo. These services receive the link or search terms, not your files.

Email and notifications

SendGrid (Twilio) delivers project emails such as sharing and invitation notices, and receives the recipient's email address and the message. Apple's push notification service delivers iPhone notifications you allow, and receives your device's notification token and the notification text.

Connecting Ghostmotion to other apps

You can connect Ghostmotion to AI assistants and developer tools, such as ChatGPT, Claude, Google Gemini, Cursor and other apps that support the Model Context Protocol (MCP), or use an API key in your own scripts. A connected app can start videos, send follow-up messages, upload references, check progress and stop runs in your current team.

What a connected app sends us

Ghostmotion receives only what the connected app sends to Ghostmotion's tools: your brief or instructions, follow-up messages, files you attach or that the assistant passes along, settings such as duration, aspect ratio and a credit limit, and request ids used to avoid duplicate work. The assistant decides what to put in those requests, so a brief can include text from your conversation with it. We do not receive your wider chat history, the assistant's memory or data from its other connectors. Content from a connected app is stored in your project and processed like any other request, including by the providers above.

What we send back

Ghostmotion returns project and run status, project names and links, the creator's replies, credit usage and links to finished videos and images. Media links expire after one hour. The connected app's own handling of this information, including what it keeps in your conversation, is governed by that app's provider and its privacy policy, not this policy.

Authorizing a connection

You authorize an assistant connection by signing in to Ghostmotion and approving the app for your current team, with a credit allowance you choose. You create an API key in Settings → Integrations for your current team, with a per-run credit limit, a total credit allowance and an expiry; the key is shown to you once. We store only hashes of access tokens and API keys, never the secrets themselves. Each request is checked against your current team membership. Ghostmotion does not use content received from connected apps to train AI models.

Disconnecting

Disconnect an app or revoke an API key in Settings → Integrations. Revoking stops new requests and asks runs that connection started to stop. Projects and films it created stay in your team until you delete them. You can also disconnect Ghostmotion in the assistant's own settings; information the assistant already received stays with it under its provider's policy.

Team access and sharing

Workspace members can access project information according to their roles. A film published through a share link may be viewed by people who have that link. Public sharing can make the film accessible outside your team. Manage sharing permissions in the project and revoke links when appropriate. Files shared with recipients or downloaded by them may remain in their possession after a link is revoked.

Storage and deletion

Project information is retained to let you reopen conversations, films and versions. Delete a project from your Library when you no longer need it, or request deletion of account or project data by contacting hello@ghostmotion.ai. Account management is available in Workspace → Edit account. Team-owned projects and records required for security, accounting or legal purposes may need to be retained separately from a deleted sign-in account. Third-party providers may have their own retention obligations. We will explain the scope of a deletion request and any records that must be retained.

Advertising and tracking

Ghostmotion's iPhone app does not request the advertising identifier and does not use the data described here to track you across other companies' apps or websites for targeted advertising. App and project activity is used to provide the service and personalize your own workspace, such as recent projects and saved preferences.

Children

Ghostmotion is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has given us personal information, contact hello@ghostmotion.ai and we will delete it.

International processing

Ghostmotion and its service providers may process information in countries other than where you live. Their applicable privacy terms explain the protections and processing arrangements for their services.

Your choices and contact

Choose what to upload and share; manage project access; turn AI creation or support chat off; disconnect apps and revoke API keys; and use account settings to manage your sign-in profile. For access, correction, deletion or other privacy requests, contact hello@ghostmotion.ai. We may verify your identity before acting on requests involving account or project information.

Policy updates

We may update this policy as the service changes. The published policy will show its current effective date.

Provider processing and privacy terms

Contact Ghostmotion about privacy