SOH Motion
Privacy Policy
Last updated 28 October 2026.
1.Who we are
SOH Motion is made by SOH Studio, founded by Jagmohan “Romie” Bajwa and Francisco Javier Martinez. It is operated by Jagmohan Bajwa in Luxembourg City, Luxembourg, who decides how the information described on this page is handled, which under European data protection law (the GDPR) makes him the controller of it.
To ask anything about this page, or to exercise any of the rights in it, write to hello@soh.studio and a person will answer.
2.The short version
The editor runs in your browser. Your pictures and clips are read, drawn and encoded into a video on your own machine, and none of that requires sending them to us. Without an account, nothing you make is sent to us at all.
An account adds three things: your work saves to a library, so it is there on your next visit and on another machine; you can export; and you can buy templates or Lifetime. Each needs us to hold some information, and the rest of this page is about exactly which.
3.What we collect
Signed out, nothing you make is sent to us. The editor keeps your current draft in your own browser's storage so that a refresh does not lose it, and that draft is never sent anywhere.
Signed in or out, if the site or the editor hits an error, your browser sends us a short report so that we can fix it: the error, the page it happened on, and which browser you use. It carries no pictures, clips or projects, is not tied to your account or to anything else about you. It stays in our hosting provider's logs for a short time, and a copy is kept by PostHog, in the European Union, where errors are grouped so that we can find them.
Signed in, we hold:
- Your email address, and a password we never see in readable form. If you sign in with Google instead, Google tells our sign-in provider your name, your email address, your Google account identifier and the link to your profile picture, and nothing else: not your contacts, not your files, nothing beyond confirming who you are.
- The files and projects you save: the template, every setting, any text you add, and the arrangement of it all.
- The pictures and clips used by a saved project, and a small still of each file so that the library has something to show.
- If you buy a template or Lifetime, a record of what you bought and when, and the identifiers Stripe gives us so that we can recognise the purchase later. The purchase itself is made with Stripe, not with us: see “Who else touches it”.
- Ordinary server logs kept by our hosting and database providers, which include IP addresses, for keeping the service up and secure.
4.People in your pictures and clips
The pictures and clips you save may show other people. You decide what to save and why, so under data protection law you are the one responsible for the personal information inside your media, including having those people's permission where it is needed.
We only store that media for you and show it back to you in the editor. We do not use it for anything of our own.
5.How we see what to improve
If you agree to it, we measure how the product is used, so that we know which templates and controls are worth the work and where people get stuck. We ask before any of it is collected, and if you say no, none of it is. You can change your mind here at any time, and the switch below is the whole of it.
What is collected is which templates are opened and exported, which controls are touched, which export sizes are chosen, how long an export takes and whether it failed, and where in the product somebody stopped. It is counts, choices and timings.
What is never collected: your text, your pictures and clips, the names of any of them, your project and file names, your email address, and anything you type into a form. The one exception is what you type into the template search, because a search that finds nothing is how we learn what to build, and it is never attached to you.
This runs on PostHog, in the European Union. There is no advertising network, no tracking pixel, and nothing about you is sold or shared for marketing.
Apart from that, and without asking, we count page views: which page was opened, the site that linked to it, roughly where in the world the visit came from, and the kind of device and browser. We also measure how quickly each page loaded, in the same way. Our hosting provider, Vercel, does the counting. It sets no cookie and keeps nothing in your browser. Visits are told apart by a code worked out from the request and discarded within a day, so the counts cannot identify you or follow you to another site. The switch below does not change this.
Analytics is off for this browser.
6.What we do not collect
We do not use cookies for tracking, and nothing profiles you. What your browser keeps for the site is listed in the next section.
To show a price in your own currency, the pages that quote one ask our hosting provider which country your connection comes from, which it works out from your IP address. The answer is used to pick the currency and is not stored.
We never see your card number. Payments are taken by Stripe on their own pages, and what returns to us is confirmation that a payment happened.
7.What your browser keeps
Your browser keeps a few things for the site, and this is the whole list. Clearing your browser storage removes all of them.
- A sign-in session, so that you stay signed in.
- Your choice of light or dark, and whether the editor shows safe zones and a grid.
- Your answer to the analytics question, so that you are asked once. If you said yes, PostHog also keeps a random identifier so that two visits can be counted as one person; saying no here removes it.
- The addresses you asked us to email a sign-in link to in the last day, so that the link can be recognised when it comes back.
- A note of when unused pictures and clips were last cleared from your account.
- Your export settings while you are away paying or confirming a new account, for a day at most.
- Signed out, your current draft, with its pictures and clips.
- Signed in, a copy of the pictures and clips in your saved work, up to 750 MB, so that they open faster. It is emptied when you sign out.
8.Why we are allowed to hold it
Your account, your saved work and your purchases are held because there is no way to give you an account, a library or a purchase without them. The law calls that performing a contract with you.
Server logs, error reports and the security measures around your data are held because a service that cannot tell a fault from an attack cannot be run safely. The law calls that a legitimate interest, and we have weighed it against your privacy in deciding to keep those logs short.
Page views are counted because we need to know whether anybody is visiting and which pages they read. That is a legitimate interest as well, and the counts are kept to what cannot identify you.
We do not send marketing email. The only email we send is what the service itself requires: confirming an address, resetting a password, and a code to confirm a password change. Receipts and invoices for a purchase come from Link, the Stripe service that sells it.
9.Who else touches it
A small number of companies help run the service. Each acts on our instructions, and none may use your information for anything of its own:
- Supabase: the database and file storage holding your account, your saved work and your media. Your data sits in their London region.
- Vercel: hosting for the site and the editor, and the page view counts.
- Stripe, through its Link service: the seller of templates and Lifetime. Stripe takes the payment, works out and charges any tax, and emails your receipt and invoice. For that it holds your name, email address, billing address and payment details as a controller in its own right, under its own privacy policy, and not on our instructions. It tells us what was bought and by which account, your billing country, and the kind of card and its last four digits, which Settings shows you. We never see the full card number.
- Resend: delivery of confirmation and password-reset email, and of the code that confirms a password change.
- Google: the sign-in pages and the editor's sign-in box load Google's sign-in button, so Google sees that visit. It confirms who you are only if you choose to sign in with Google.
- PostHog: error reports, and how the product is used if you agreed to that. Their European servers, and set up so that no IP address is recorded at all.
- Cloudflare: the check that a sign-up, a log in or a password reset is asked for by a person and not a script. Their Turnstile service loads on the sign-in pages and in the editor's sign-in box, and sees your IP address and details of your browser to decide.
10.Where it is stored, and where it travels
Your account, your projects and your media are stored in the United Kingdom. Error reports, and analytics if you agreed to it, are held separately, in the European Union.
Some of the companies above are based in the United States or operate globally, so parts of the service (hosting and its page view counts, payments, email delivery) may involve your information being processed outside the European Union. The United Kingdom is recognised by the EU as protecting personal data adequately. Anywhere else, it is covered by the safeguards European data protection law requires for international transfers, such as standard contractual clauses.
11.How long we keep it
What How long Your account and the work saved in it Until you delete them or ask us to close the account Work in an account nobody has signed in to for 24 months May be deleted, after an email to the account's address at least 30 days before Pictures and clips no file of yours uses any more Removed the next time you use your library, or sooner if you ask Records of a purchase As long as tax and accounting law requires, which may be longer than the account lasts Error reports, and analytics if you agreed to it Up to a year Page view counts Up to two years Deleting a project removes the project and the files in it. It does not delete the pictures and clips it used straight away, because another of your projects may still use them.
12.How it is kept safe
Every row and every file belongs to one account, and the database enforces that rather than trusting the application to remember. An account can only ever reach its own. Files live in a private area that is not publicly reachable.
Traffic is encrypted in transit. Passwords are stored hashed, so nobody here can read yours, which is also why we can only ever reset a password rather than tell you what it was.
13.Your rights
You can ask us for a copy of what we hold about you, to correct it, to delete it, to restrict what we do with it, or to object to our holding it. You can also ask for it in a portable form, though the editor already does that one for you: your projects download as folders of ordinary files that you keep, one at a time or all at once from Settings.
Ask at hello@soh.studio. We will answer within a month.
If you think we have handled your information badly you can complain to Luxembourg's data protection authority, the CNPD, at cnpd.public.lu, or to the authority in your own country. We would rather you told us first, but you do not have to.
14.Children
SOH Motion is not intended for children, and an account should not be created by anyone under 18. If you believe a child has created one, tell us and we will remove it.
15.Changes to this page
If what we do with your information changes, this page changes with it, and the date at the top changes too. When a change matters rather than merely tidying the wording, we will tell account holders by email instead of quietly editing the page.