Privacy Policy

This Privacy Policy explains how the company that operates Movement OMS ("Movement OMS," "we," "us," or "our") handles information when you use movementoms.com, app.movementoms.com, and related APIs (the "Service").

• For account, billing, and marketing-site data about you as a subscriber or visitor, we act as the business that decides how that information is used
• For business records you enter about your own clients and contacts (names, emails, phones, deal history, and similar), you are the business in control of that data. We process it only to provide the Service to your company
• If you use Movement OMS on behalf of a company, that company is responsible for the instructions it gives us and for notices it owes its own clients

We collect only what we need to run the Service, bill the subscription, and keep the platform secure.

• Account details: name, email, role, and authentication events for people you invite
• Company billing details and payment method tokens handled by Stripe (we do not store full card numbers)
• Business records you enter: clients, inventory, deals, invoices, files, and related notes
• Technical logs: IP address, browser or device type, timestamps, and error traces
• Support messages you send to us
• Marketing site: server logs, plus Google Analytics, Google Tag Manager, and Google Ads when those tags are configured on movementoms.com

We use this information to operate the application, process payments, provide support, and protect the platform. We do not use your dealer records to train public models or to build a marketplace.

• Provide, maintain, and improve the Service
• Authenticate users and manage company access
• Bill subscriptions and send transactional email (sign in links, invoices, billing notices)
• Respond to support requests
• Detect abuse, fraud, and security incidents
• Meet legal, tax, and accounting obligations

We do not sell personal information. We do not share it for cross-context behavioral advertising. We do not expose one company's inventory, clients, or deals to another company. Your records are not aggregated into a public feed or shown to other dealers.

• No sale of personal information as that term is used under California law
• No sharing of one tenant's records with another tenant
• No use of your client list to market Movement OMS to those clients

We use cookies and similar technologies that are needed to run the Service. Session and authentication cookies keep you signed in and protect accounts. Preference cookies remember simple UI choices. On movementoms.com, analytics and advertising cookies run only after you Accept on the cookie banner.

• Essential cookies: sign in and security on the application; load balancing on the marketing site
• Optional cookies on movementoms.com: Google Analytics (GA4), Google Tag Manager, and Google Ads. Consent Mode defaults to denied until you Accept
• Decline keeps limited measurement only. You can also block cookies in your browser. Blocking essential cookies may prevent sign in

We use a short list of vendors to host and operate the Service. Each processes data only to provide their part of the stack. We will update this list when vendors change and aim to give notice before a material change takes effect.

• Google Cloud (United States): application hosting, database, and file storage
• Google Analytics, Tag Manager, and Ads (United States): measurement and advertising tags on movementoms.com when enabled
• Stripe (United States): subscription payments and payment method storage
• SuperSend TX (United States): transactional email such as sign in links, billing notices, and support mail

We protect data with access controls, encryption in transit, private storage for uploaded files, and tenant isolation so one company cannot read another's records through the application. No method of transmission or storage is perfectly secure.

• Production systems run on Google Cloud with restricted staff access
• Data may be processed in the United States. If you access the Service from another country, you understand that information may be transferred to and stored in the United States
• Where a transfer requires a safeguard under applicable law, we use appropriate contractual protections with our vendors

We keep your records while your subscription is active. After cancellation or termination, you have 30 days to export. After that window we delete production data for the company, subject to legal holds and backup cycles.

• Export is available from the application while your account is active and during the grace window
• Production company data is deleted after the 30 day grace window
• Encrypted backups are purged on a rolling cycle of up to 90 days
• We may retain billing records and limited logs as required for tax, accounting, or dispute resolution

Depending on where you live, you may have rights to know what personal information we hold, access it, correct it, delete it, export it, or opt out of sale or sharing. We do not sell or share personal information for advertising, so there is no separate opt-out flow for that today.

• Email legal@movementoms.com to make a privacy request
• We aim to respond within 30 days
• We may need to verify the request and the requester's authority for a company account
• If the request concerns client data your company entered, we may direct you to handle it as the business in control, or we will assist your company admin
• If we decline a request where the law allows, we will say why
• California residents may contact us at the same address for CCPA requests. We will not discriminate against you for exercising privacy rights

The Service is for business use. It is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe we have collected information from a child, contact us and we will delete it.

We will update this policy when our practices change. The effective date and version at the top of the page always reflect the current text. Privacy questions, requests, and legal notices go to legal@movementoms.com.