# How your accounts stay yours.

> Motion Reel connects to your accounts on each platform's own login screen and never sees your password. Access tokens are encrypted, each workspace is kept apart, and an AI agent has to show you a preview before anything changes.

Motion Reel (https://motionreel.app). The page: https://motionreel.app/security. Updated November 8, 2026.

## Your social accounts.

- **Official logins only:** You connect Instagram, TikTok and YouTube on each platform's own login screen. Motion Reel never sees your password.
- **Encrypted tokens:** The access tokens the platforms give us are stored encrypted with AES-GCM.
- **Easy to remove:** Disconnect an account and Motion Reel's access to it ends and its data is deleted. You can also remove access from Instagram, TikTok or your Google Account.
- **Nothing added to your video:** Motion Reel posts the file you upload as it is.

## AI agents and keys.

- **You click Allow:** Claude and Codex sign in with your Motion Reel account, and you click Allow. There's no key to copy or leak.
- **Keys kept hashed:** An API key is shown once. Only its SHA-256 hash is stored.
- **Read-only keys:** A key can be read-only, and you can revoke any key or sign-in from the dashboard at any time.
- **A preview first:** Every tool that changes something only previews it until the call says confirm, and your agent is told to show you and wait for your yes.
- **Your workspace only:** An agent only sees your workspace. Connecting accounts stays with you, in the dashboard.

## Your data.

- **Where it lives:** Cloudflare hosts the site, the database and your uploaded videos.
- **Your videos:** An uploaded video is deleted once no post needs it.
- **Comment-to-DM:** For each comment an automation answers, we keep the commenter's username, Instagram ID and comment, so you can see what went out. The privacy policy says for how long.
- **Never sold:** We don't sell your data, share it with advertisers, use it for advertising or use it to train AI.
- **Delete everything:** Deleting your account removes your connected accounts, videos, posts, automations and keys.

## Reporting a problem.

- **Found a security issue?:** Email support@motionreel.app, and we'll look into it.

## Questions

### Does Motion Reel see my Instagram password?

No. You sign in on Instagram's own login screen, and Motion Reel receives an access token, which it stores encrypted.

### Can an AI agent post without me?

Every change comes back as a preview, and Motion Reel tells your agent to show it to you and wait for your yes. A read-only key can't change anything at all.

### Is Motion Reel SOC 2 certified?

No. Motion Reel doesn't hold a SOC 2 or ISO 27001 certificate. This page says how your accounts and data are handled.

### How do I delete my data?

Disconnect an account to delete its data, or delete your whole Motion Reel account in Settings. The data deletion page explains both.

### Who hosts my data?

Cloudflare hosts the site, the database and your uploaded videos.