Privacy Policy

Effective date: March 19, 2026

This Privacy Policy describes how ANGKEL G.P. (“we,” “us,” or “our”) collects, uses, stores, and protects your personal data when you use Motionbun (“the Service”). We are committed to protecting your privacy in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable Greek data protection legislation.

By using the Service, you acknowledge that you have read and understood this Privacy Policy.

1. Data Controller

The data controller responsible for your personal data is:

ANGKEL G.P.
Email: support@motionbun.com

2. Personal Data We Collect

2.1 Data you provide directly

When you register for an account, we may collect the following information depending on the registration method used:

• Full name
• Email address
• Profile photograph (where provided by a third-party authentication provider)
• Country of residence

The specific data collected may vary depending on the authentication method you choose and the information made available by third-party providers.

2.2 Data generated through your use of the Service

• Content you create using the Service, which is stored on our servers and content delivery network.
• Account activity, including creation dates, usage frequency, and feature usage.
• Payment and billing information if you subscribe to a paid plan. Payment processing is handled by our third-party payment provider; we do not store your full credit card details on our servers.

2.3 Data collected automatically

We use analytics services, which may include Google Analytics, to collect aggregated usage data, including:

• Pages visited and interactions with the Service
• Browser type, operating system, and device information
• Referring URLs and session duration
• Approximate geographic location (derived from IP address)

These analytics services may use cookies or similar tracking technologies. For more information about how Google processes data, please refer to Google’s privacy policy at policies.google.com/privacy.

3. Legal Basis for Processing

We process your personal data on the following legal bases under Article 6(1) of the GDPR:

4. How We Use Your Data

We use the personal data we collect for the following purposes:

1. To create and manage your account.
2. To provide, operate, and maintain the Service, including the storage and delivery of content you create.
3. To process payments and manage subscriptions.
4. To communicate with you regarding your account, service changes, or support requests.
5. To analyse usage patterns and improve the Service.
6. To detect and prevent fraud, abuse, and violations of our Terms of Service.
7. To comply with applicable legal obligations.

5. Data Sharing and Third Parties

We do not sell your personal data. We may share your data with the following categories of third-party service providers, solely for the purposes described in this Policy:

• Hosting and infrastructure: Cloud infrastructure providers with servers located in the European Union.
• Content delivery and storage: Content delivery networks and cloud storage providers used for serving and backing up user content.
• Analytics: Analytics service providers used to collect aggregated usage data.
• Payment processing: Our designated payment processor, which processes transactions in compliance with PCI-DSS standards.
• Authentication: Third-party authentication providers used to facilitate account registration and login.

Where data is transferred to processors outside the European Economic Area, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

6. Data Retention

We retain your personal data for as long as your account remains active or as necessary to provide the Service. Specifically:

• Account data: Retained for the duration of your account. Upon account deletion, your personal data will be removed within thirty (30) days, except where retention is required by law.
• User-generated content: Retained for the duration of your account. Content may be deleted following account closure or extended inactivity, subject to reasonable notice.
• Payment records: Retained for the period required by applicable tax and accounting legislation.
• Analytics data: Retained in aggregated form as configured in our analytics platform settings.

7. Your Rights Under the GDPR

As a data subject, you have the following rights with respect to your personal data:

1. Right of access — You have the right to request a copy of the personal data we hold about you.
2. Right to rectification — You have the right to request correction of inaccurate or incomplete data.
3. Right to erasure — You have the right to request deletion of your personal data, subject to legal retention requirements.
4. Right to restriction of processing — You have the right to request that we limit the processing of your data in certain circumstances.
5. Right to data portability — You have the right to receive your data in a structured, commonly used, and machine-readable format.
6. Right to object — You have the right to object to processing based on legitimate interest.
7. Right to withdraw consent — Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact us at support@motionbun.com. We will respond to your request within thirty (30) days.

You also have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA) at www.dpa.gr.

8. Cookies

The Service uses cookies and similar technologies for the following purposes:

• Essential cookies: Required for authentication and core functionality of the Service.
• Analytics cookies: Used by analytics services to collect usage data as described in Section 2.3.

You may manage your cookie preferences through your browser settings. Please note that disabling essential cookies may impair the functionality of the Service.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encrypted connections (TLS/SSL), access controls, and regular security reviews. However, no method of transmission over the Internet or electronic storage is entirely secure, and we cannot guarantee absolute security.

10. Children’s Privacy

The Service is not directed at children under the age of sixteen (16). We do not knowingly collect personal data from children under this age. If we become aware that we have collected data from a child under sixteen, we will take steps to delete such data promptly.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. If we make material changes, we will notify you by email or by posting a notice on the Service prior to the changes taking effect. We encourage you to review this Policy periodically.