Butter Motion Privacy Policy

Version of 2 November 2026.

This policy explains how we process personal data when you use the site https://buttermotion.com with the personal account area, the Butter Motion extension for Adobe Premiere Pro and the Butter Motion desktop app (together, the "Service"). We follow the EU General Data Protection Regulation (GDPR) and the Law of Georgia on Personal Data Protection.

1. Controller

The controller of your personal data is Denis Leonov, an individual registered as a taxpayer in Georgia (taxpayer ID 100374925) ("we", "us"). Contact for any privacy question: support@buttermotion.com.

The Service's servers are hosted in the European Union (the Netherlands).

2. What data we process

• Email and sign-in data: password (stored only as a hash), one-time sign-in codes.

• Account data: plan, credit balance and history, payment history (amount, currency, date, status, payment ID at the payment provider), applied promo codes, support requests.

• Device data: device ID (a hash computed from the computer's hardware identifier; the hardware identifier itself is not sent), computer name, extension version, last activity time.

• Content: prompt texts, attached images, code of created compositions, saved presets. A shortened prompt text is kept in the operation history.

• Technical data: IP address, browser and device information, server and error logs.

• Advertising measurement data (Google Ads tag, Meta Pixel): the page address, browser and device details, IP address, and a sign-up or plan purchase event with its amount, currency and invoice number: only if you agree on the cookie banner.

• Referral source: the link's UTM tags, a ref code, whether the visit came from an ad, the first page opened and the referring site (the bm_attr cookie, details: https://buttermotion.com/cookies). Saved to the Account at purchase.

• Our own site visit statistics without cookies or a persistent identifier: pages opened, time spent on them and scroll depth, clicks on the site's buttons and links (the button text, never the contents of input fields), the referring site and link tags, browser language, screen width, device type, browser and operating system, country. The IP address is used only at the moment of the visit to determine the country and compute a one-day visitor identifier (a hash with a secret that changes daily), and it is not stored. Visits by the same person on different days cannot be linked. The data is kept for up to 400 days, is not shared with third parties and is not collected if you decline analytics cookies.

The extension does not read your projects or media files: only what you send is transferred to the server (the prompt text and attached images). Rendering happens on your computer, and finished files stay with you.

We do not receive or store card details: they are processed by the payment provider Lava (lava.top) and its bank. We do not process special categories of personal data or biometrics.

• Creating the Account, signing in, linking a device; providing the Service: generation, delivering results, credit accounting, cloud preset library. Legal basis: performance of the contract (Article 6(1)(b) GDPR).

• Accepting payment, auto-renewal, refunds. Legal basis: performance of the contract.

• Emails about sign-in, payments, renewals, and changes to the Service and terms. Legal basis: performance of the contract.

• Support and troubleshooting. Legal basis: performance of the contract.

• Security: protection against password guessing, bots, payment fraud and abuse. Legal basis: our legitimate interest in keeping the Service and its users safe (Article 6(1)(f) GDPR).

• Picking the default currency from the country of the IP address. Legal basis: our legitimate interest in running the Service.

• Understanding which channels bring customers (the referral source cookie). Legal basis: your consent on the cookie banner.

• Site visit statistics and advertising measurement. Legal basis: your consent on the cookie banner (Article 6(1)(a) GDPR), which you can withdraw at any time on https://buttermotion.com/cookies.

• Keeping accounting and tax records. Legal basis: legal obligation (Article 6(1)(c) GDPR).

Where we rely on legitimate interest, you can object to the processing (see section 8).

Providing your email, payment data and device data is necessary to conclude and perform the contract: without it we cannot create the Account or provide the Service. Analytics and advertising data are optional and collected only with your consent.

We do not make decisions about you based solely on automated processing that have legal or similarly significant effects. We do not sell personal data.

4. Who we share data with

Data is shared only to the extent needed for each task, with providers that process it on our instructions:

• Lava (lava.top): accepting payments and payment notifications (email, amount, payment details).

• AI model providers: prompt texts, attached images, composition code and an internal pseudonymous user ID. Your email is not sent to AI providers. A generation is impossible without this transfer.

• Resend: email delivery (email address and message content).

• Email and support mailbox providers: receiving and answering your emails to support@buttermotion.com.

• Google Ireland Limited (Google Ads tag) and Meta Platforms Ireland Limited (Meta Pixel): advertising measurement, only with your consent on the cookie banner. For the collection and transmission of data through the Meta Pixel we and Meta Platforms Ireland Limited are joint controllers; Meta is responsible for its further processing under its own policy.

• An IP-to-country lookup service: the IP address only, to suggest a default currency.

• Hosting provider in the European Union (the Netherlands): hosting the Service's servers.

• Monitoring and notification tools used to oversee how the Service runs.

• Backup storage provider: nightly backups, encrypted before they leave our server; the provider has no key to read them.

• Public authorities: only where required by law.

5. International transfers

Some providers (AI model providers, Resend, Google, Meta Platforms, the backup storage provider and some monitoring tools) process data outside the European Economic Area, including in the United States. For these transfers we rely on the recipient's certification under the EU-U.S. Data Privacy Framework or on the European Commission's Standard Contractual Clauses in the recipient's data processing terms. For users in the United Kingdom we rely on the UK Extension to the Data Privacy Framework or the UK International Data Transfer Addendum.

The controller is located in Georgia and accesses the data stored in the Netherlands from there. Georgia does not have an adequacy decision of the European Commission; the data is protected by encryption in transit and strict access control.

You can obtain a copy of the safeguards (for example, the Standard Contractual Clauses) by emailing support@buttermotion.com.

6. How long we keep data

• Account data is kept while the Account exists.

• When the Account is deleted, the email, password, payment link, devices and presets are erased. Anonymised records of payments and generations (amount, date, model) remain with no link to a person. Erased data stays in encrypted nightly backups for up to 30 days and is then deleted; we do not restore erased data into the live system.

• Records of payments that we must keep for accounting and tax purposes are kept for the period required by the tax law of Georgia.

• Generation results are stored on the server temporarily, until they are delivered to your device.

• Sign-in codes are valid for 15 minutes. Web server logs are kept for 14 days. Support emails are kept for as long as needed to handle the request and for up to 3 years after the last message.

• Retention by providers is governed by their own terms.

7. Security

Connections to the Service are encrypted (HTTPS), passwords are stored only as hashes, the browser session is kept in a secure cookie that page scripts cannot read, and access to data is restricted. Encrypted backups are made every night.

8. Your rights

You have the right to:

• access your personal data and get a copy of it;
• have inaccurate data corrected;
• have your data erased;
• restrict processing;
• receive your data in a structured, machine-readable format and have it transmitted to another controller (data portability);
• object to processing based on legitimate interest;
• withdraw consent at any time, without affecting the lawfulness of processing before the withdrawal;
• lodge a complaint with a data protection supervisory authority, in particular in the EU country where you live or work, with the Information Commissioner's Office if you are in the United Kingdom, or with the Personal Data Protection Service of Georgia.

Send requests to support@buttermotion.com from the address linked to the Account. We reply within one month; for complex requests this may be extended by two more months, and we will tell you why. The Account can also be deleted in the personal account (Account page).

9. Children

The Service is not meant for people under 18, and we do not knowingly collect their data. If we learn that we hold a child's data, we delete it.

10. Cookies and browser storage

The cookies and browser storage entries used by the site are described in the Cookie Policy: https://buttermotion.com/cookies.

11. Changes

The current version is published on this page with its date. We notify Users of material changes by email.