Privacy Policy

Who we are and what this policy covers

Movia Technologies, Inc. (“Movia,” “we,” “us,” or “our”) operates moviatech.ai, www.moviatech.ai, and account.moviatech.ai. This policy explains how we handle personal information through these websites, our customer center, booking and rental administration, customer communications, and pickup and return inspections.

Movia does not store full card numbers, card security codes or identity-document images. Stripe handles and protects them directly, and they do not pass through Movia's servers.

Our contact address is 780 Roosevelt, #127, Irvine, CA 92620, United States. You can contact us at [email protected] or +1 (626) 390-4721.

This policy describes information practices. It is not a rental agreement, a payment authorization, or consent to biometric verification. Separate notices or authorizations apply when those are required. It does not replace the privacy notices of third parties acting independently of Movia.

Information we collect

We collect information you provide, information generated while providing our services, information from the service providers described below, and technical information associated with use of our websites.

Some information, such as identity, payment, signature, or account-access information, may be considered sensitive under applicable law. A requested field may be necessary to verify eligibility, provide a quote, complete a rental, or protect an account. Optional fields are identified as such where collected. Not providing necessary information may prevent us from completing the relevant service.

Please do not send full payment-card details, security codes, passwords, or identity-document images through ordinary email, chat, or general attachments unless we direct you to an appropriate secure verification process. Information you voluntarily send through those general channels becomes part of the communication records we receive.

Payments and identity verification through Stripe

In our standard payment and verification flows, full card numbers, card security codes, identity-document images, and selfies are submitted directly to Stripe rather than to Movia’s application servers. Movia’s application stores the identifiers, results, and summaries described above. This is not a statement that card security codes are retained after authorization.

Depending on Stripe permissions and the verification workflow, authorized Movia personnel may be able to review information in Stripe to resolve verification, payment, or fraud issues. Keeping images out of our own database does not mean that no authorized person can access them through Stripe.

Where the verification flow includes a selfie comparison, Stripe may use facial characteristics derived from the selfie and identity document to assess whether they depict the same person. Review the notices and consent choices presented in that flow before proceeding. Contact us before submitting the verification if you have questions or need to discuss an available alternative; alternative methods depend on the applicable requirements and the options available for your case.

Stripe may process information both on our behalf and for its own purposes described in its notices. Requests concerning information processed on our behalf can be sent to Movia. We will assess whether deletion or redaction should be requested from Stripe. Information Stripe handles independently may also require a request to Stripe. Deleting a Movia account or a local reference does not by itself delete all information held by Stripe.

How we use information

We use relevant information to respond to inquiries; create and secure accounts; verify identity and rental eligibility; prepare, confirm, and administer bookings; process authorized payments, holds, and refunds; execute and retain agreements; coordinate pickup and return; document vehicle condition; handle messages, changes, disputes, and claims; maintain business records; and meet applicable legal obligations.

We use technical information and activity records to operate the websites, detect misuse, investigate security issues, prevent fraud, troubleshoot errors, and understand how visitors use our services. Internal service notes and eligibility flags support those activities. You may contact us to ask for review of an apparent factual error affecting your account or booking.

We also use feedback to improve service and contact details to send communications consistent with your preferences and applicable law. Submitting a rating, photo, or message does not itself authorize us to publish it as a named marketing testimonial. We seek appropriate permission separately for that use.

Our automated assistant

Our website assistant is automated, not a human representative. It processes the messages you submit to generate responses and help route requests. Avoid entering sensitive information that is unnecessary for your question.

The current application keeps the pre-escalation conversation in Movia’s website server memory, along with a conversation identifier used in the browser session. A redeployment clears that in-memory application copy; closing a browser does not necessarily do so. When a conversation is transferred to staff, up to the 20 most recent messages are copied into our support inbox and retained with the support record. Staff handling the request can review that record. Messages you send in the chat after the transfer are delivered directly to that support record and retained with it.

This describes the application’s own storage only. It is not a representation that an external model provider, security service, or infrastructure provider has no separate processing or logs.

The assistant's replies are generated on Movia's own servers by matching your message against our published FAQ and policy content. We do not send assistant conversations to an external AI model or language-model provider. Messages travel through our hosting and network providers (Amazon Web Services and Cloudflare) as ordinary website traffic, and after a transfer to staff they are stored in our support inbox as described above.

Who receives information

Access within Movia is for personnel who need information for assigned service, operational, financial, or security responsibilities. We use the following providers for the activities described in this policy:

Information shared with a provider depends on its function; providers do not necessarily receive all categories in Section 2. Some providers also process information under their own privacy notices.

Where necessary and legally permitted, relevant records may be disclosed to advisers, insurers or claims participants, payment-dispute participants, authorities responding to valid legal requirements, or others needed to establish or protect legal rights. These are purpose-limited disclosures, not permission for unrestricted access to rental or location records. We may also disclose information in a legally permitted business transaction, such as a merger or asset transfer, subject to applicable protections and notice requirements.

The legal characterization of analytics-related disclosures, including any “sale” or “sharing” under applicable privacy law, is addressed in Section 7 and must not be inferred solely from whether money changes hands.

Cookies, analytics, and tracking choices

Our websites use language-preference cookies (NEXT_LOCALE on the website, kept for the browser session, and movia_locale in the customer center, kept for about one year) and Google Analytics cookies. Google Analytics collects information such as pages visited, referral sources, device information, approximate region, and events such as viewing a vehicle or selecting a booking action. Cookie duration and analytics retention also depend on the deployed settings and the provider’s operation.

We also use Cloudflare Web Analytics and Cloudflare services for delivery, security, and bot prevention. These are different services with different processing activities; the privacy characteristics of one should not be assumed to describe all Cloudflare processing.

You can use browser controls to delete or restrict cookies. Those controls may affect language preferences or other functionality, do not delete information already collected, and do not prevent every form of operational or security processing. Google provides additional information and controls concerning Google Analytics, including its browser opt-out add-on.

Browser “Do Not Track” (DNT) preferences and opt-out preference signals such as Global Privacy Control (GPC) are distinct. Third-party analytics providers may, depending on their configuration, receive information about online activity across services.

Our websites do not currently respond to browser Do Not Track (DNT) signals or Global Privacy Control (GPC) signals, and we do not currently offer an on-site cookie-preference control; browser settings and the Google Analytics opt-out add-on remain available. We configure Google Analytics with Google signals and ads-personalization signals turned off, and we do not use analytics data for targeted advertising. Google may still collect information about your activity over time and across websites in accordance with its own policies. We do not sell personal information for money; whether any analytics data flow constitutes “sharing” under applicable California law is being assessed, and we will update this section if that assessment changes our practices.

Where information is processed

Movia’s application hosting and Supabase database and file-storage region are configured in Oregon, United States. This does not mean that every service provider processes every record only in Oregon or only in the United States. Depending on the service and its arrangements, information may be processed or accessed in other locations.

Where applicable law requires safeguards for a transfer, those requirements apply. Use of the website alone is not a substitute for a legally required transfer mechanism or consent.

Retention and deletion

Our current systems do not automatically delete business records on a fixed schedule. Account, inquiry, reservation, agreement, inspection, message, attachment, and audit records generally remain stored unless deliberately removed through a manual process. Audit records are protected against ordinary editing and deletion. That technical protection is not, by itself, a legal reason to reject a valid privacy request.

In deciding whether information should be retained or deleted, we consider the purpose of the record, whether an account or rental is active, unresolved payments or disputes, required business or tax records, applicable limitation periods, fraud and security needs, and the sensitivity and amount of the information. Retention must remain subject to applicable legal limits; information need not be kept in full merely because another part of a record must be retained.

The assistant’s in-memory application copy and the language cookie have the different handling described in Sections 5 and 7. Analytics and other providers maintain information according to the relevant settings, contracts, and their own applicable obligations.

Deletion and access requests are currently handled manually; the customer center does not provide self-service account deletion or data export. A request may require review of connected provider records, including available Stripe redaction procedures. Some information may be retained where a legal exception applies, such as records needed to complete a transaction, meet a legal obligation, protect security, or address a dispute. We will explain applicable limitations when responding. Closing an account is not the same as immediately erasing every record relating to it.

Your choices and privacy requests

You may update available profile and notification settings in the customer center. To request access, a copy, correction, or deletion of your personal information, or to ask a privacy question, email [email protected] with the subject “Privacy Request.” You may also contact us at the address or phone number in Section 1.

Describe the request and provide enough information to locate the relevant account or interaction. Do not include full card details or identity-document images in the initial email. We may need to verify your identity or an agent’s authority using information appropriate to the request. We will apply the rights, verification requirements, exceptions, and response periods required by applicable law.

Where the California Consumer Privacy Act applies to Movia and your information, applicable rights may include knowing the categories and specific pieces of information collected, obtaining a copy, correction, deletion, information about disclosures, opting out of sale or sharing, limiting certain uses of sensitive personal information, and protection against unlawful discrimination for exercising rights. The right to limit sensitive information does not apply to every use of sensitive information. An authorized agent may submit a request where the law permits. Additional rights may apply under other applicable laws.

These rights are not unconditional guarantees that every record can be disclosed or deleted. For example, we must protect other people’s information and account-security credentials. The collection of an email address or phone number does not itself consent to every type of marketing.

Email and communication preferences

We send account-security, verification, booking, payment, signature, support, and other service messages needed to administer your relationship with us. We also send feedback invitations and, when permitted, updates or offers consistent with your preferences.

You may change available preferences or use the unsubscribe instructions in marketing emails. You may also contact us to stop marketing messages. Opting out of marketing does not necessarily stop necessary service or security communications. A message’s treatment depends on its content and purpose, not merely its label.

Security

Our systems use measures including password hashing, account authentication, staff access roles, and activity logging. Staff account records also include security configuration information. These measures do not make every transmission or system completely secure. Please protect your sign-in credentials and notify us promptly of suspected unauthorized account use.

Nothing in this policy limits any security, breach-notification, or other responsibility that applicable law places on Movia.

Children and other people’s information

Our account and rental services are intended for adults and are not directed to children under 13. Rental eligibility is separate from the age at which someone may use an account. Please do not submit a child’s personal information unless necessary for a legitimate service request. Contact us if you believe information from a child has been submitted inappropriately.

If you provide another driver’s or another person’s information, provide only what is necessary and ensure that you are entitled to provide it. Incidental information in inspection photos or attachments is handled as part of those records, not as permission to use it for unrelated publicity.

Staff accounts

For staff who use our systems, we maintain account contact information, authentication and two-factor security configuration, name, position, role, employment status, recent-login information, and records of administrative actions, including timestamps, IP addresses, and browser information. These records support access administration, operational accountability, and security.

This section addresses the staff-system information described here. It does not replace any separate employment or applicant privacy notice covering other HR records.

Changes and contact

We may update this policy when our practices or applicable requirements change. The updated version will identify its revision date. We will provide additional notice and obtain consent where required for a material change or a new use. Merely continuing to browse is not consent to a use that legally requires separate consent.

Movia Technologies, Inc. 780 Roosevelt, #127, Irvine, CA 92620, United States Email: [email protected] Phone: +1 (626) 390-4721