Privacy Policy

Who we are

Moove Gestão ("Moove") is a business management platform headquartered in Brazil. For website visitors, leads and account holders, Moove is the controller. For content customers store in their workspace (contacts, deals, employees, documents), the customer is the controller and Moove acts as processor under the Data Processing Agreement.

Data we collect

Account data: name, email, phone, company, role and password (stored hashed).

Usage data: logs, device and browser, IP address, approximate location, pages and features used.

Billing data: plan, invoices and tax details. Card data is collected and stored by our payment provider (Stripe, PCI DSS Level 1); Moove never stores card numbers or CVV.

Communications: support requests, emails and form submissions you send us.

Workspace content: data customers upload or create in the platform, processed only on their instructions.

How we use data

To provide, secure and support the service; process payments; send service notices; improve features; prevent fraud and abuse; comply with legal obligations; and, with consent where required, send marketing. We do not use workspace content to train third-party AI models.

Legal bases (EU/UK GDPR)

Performance of a contract, legitimate interests (security, product improvement, B2B marketing balanced against your rights), consent (non-essential cookies and marketing where required) and compliance with legal obligations.

Artificial intelligence

AI features are optional support tools. Inputs are processed by AI providers acting as sub-processors only to return the requested result. AI outputs may be inaccurate and must be reviewed by a human; no decision with legal or similarly significant effects is made solely by automated means.

Sharing

We share data only with sub-processors that help run the service (hosting, email delivery, messaging, payments, AI, support), with authorities when legally required, or in a merger or acquisition with equivalent protections. We do not sell personal data and do not share it for cross-context behavioral advertising.

Your rights

Depending on where you live, you may request access, correction, deletion, portability, restriction, objection and withdrawal of consent, and you may object to direct marketing at any time.

California (CCPA/CPRA) and other US state laws: right to know, delete, correct, opt out of sale/sharing and of targeted advertising, limit use of sensitive data, and not to be discriminated against for exercising rights. Authorized agents may submit requests with proof of authorization.

We respond within the period required by law (generally 30 days under GDPR, 45 days under CCPA) and may verify your identity first. If your data belongs to a customer workspace, we will forward the request to that customer.

International transfers

Data may be processed in Brazil, the United States and other countries. Transfers from the EEA, UK and Switzerland rely on adequacy decisions, the EU Standard Contractual Clauses, the UK Addendum or equivalent safeguards.

Retention

Personal data is retained only for as long as necessary for the stated purposes and applicable legal obligations. Retention depends on the data category, customer instructions, contractual requirements and any legal hold. Deletion requests and backup retention are assessed under the applicable policy; a single retention period does not apply to every feature. Contact us for the policy applicable to your workspace.

Security

Encryption in transit (TLS 1.2+) and at rest, tenant isolation between organizations, granular permissions, IP restrictions, audit logs and incident response procedures. Confirmed personal data breaches are notified to authorities and affected persons as required by law (72 hours under GDPR).

Children

The service is intended for businesses and is not directed at children under 16. We do not knowingly collect their data.

Changes

We may update this policy and will notify account holders of material changes by email or in the app before they take effect.

Contact and complaints

Privacy requests: privacidade@moovesales.com.br. Data Protection Officer: dpo@moovesales.com.br. You may also complain to your local supervisory authority (e.g. an EU data protection authority, the UK ICO or the California Privacy Protection Agency).