Privacy Policy

1. Two different roles

Movently handles personal information in two distinct capacities, and your rights differ depending on which one applies.

• As the business responsible: for people who visit usemovently.com, leave their address on the beta waitlist, or run a studio on Movently. We decide what is collected and why.
• As a processor for a studio: for the clients of a studio that uses Movently. The studio decides what is collected and why; we hold and process it on that studio’s documented instructions, under the terms in section 9 of our Terms of Service.

2. Who is responsible for protecting your information

Massimo Faulkner is Movently’s Privacy Officer, responsible for the protection of personal information and for handling access and rectification requests. You can reach them at contact@usemovently.com.

3. What we collect

When you visit this site or run a studio on Movently, we collect:

• Account information: name, email address, studio name, preferred language, and the password hash held by our authentication provider — we never see your password.
• Studio information: your schedule, services, pricing, branding, and the settings you configure.
• Billing information: your plan, invoices and payment status. Card numbers go directly to Stripe and are never stored on our systems.
• Support correspondence: what you write to us, so we can answer and keep track of the issue.
• Beta waitlist: if you ask to be told when Movently opens, your email address, the language you were reading in, which page you asked from, which link brought you to the site if you arrived from one we posted, and when — kept so we can write to you once, when an invite is ready.
• Technical information: IP address, browser and device type, and the pages you visit, recorded in server and error logs so the service can be operated and debugged.
• Analytics: with your consent only, how the site and app are used — pages viewed, features used, and the path through signup.

4. Why we collect it

We use personal information only for these purposes:

• to create and operate your account and provide the service;
• to take payment, issue invoices and manage your subscription;
• to send service messages you need — receipts, booking confirmations, security and billing notices. These are not marketing and cannot be turned off while you have an account;
• to provide support and answer your questions;
• to keep the service secure: detect abuse, investigate incidents, and enforce our Terms;
• to understand how the product is used so we can improve it — with consent, and in aggregate;
• to meet our legal and tax obligations.

5. Consent, cookies and tracking

Cookies strictly necessary to run the site — your session, your language, and your cookie choice itself — are set without consent because the service cannot work without them.

Analytics cookies are set only after you accept them in the banner. Declining is a real choice: nothing is captured, and you are not treated differently. You can change your mind at any time by clearing this site’s cookies, which brings the banner back.

We do not use advertising cookies, we do not sell personal information, and we do not share it with data brokers or ad networks.

Movently makes no decision about you based exclusively on automated processing.

6. Who else handles your information

We use a small number of service providers to run Movently. Each is bound by contract to protect the information, to use it only to provide their service to us, and to hold it under confidentiality obligations. They are:

• Stripe — payment processing and payouts to studios. Ireland / United States.
• Google (Firebase) — database, authentication and file storage. United States.
• Render — application hosting. United States.
• Resend — transactional email delivery. United States.
• Cloudflare Stream — hosting and delivery of studio video, where a studio uses that feature. United States.
• PostHog — product analytics, only where analytics consent has been given. United States.
• Sentry — error and crash reporting, used to diagnose faults. United States.

7. Information held outside Quebec

As the list above shows, information is stored and processed outside Quebec, principally in the United States. Before entrusting information to a provider outside Quebec we assess whether it will receive adequate protection, taking into account the sensitivity of the information, the purposes it is used for, the protections the provider gives it — contractual and technical — and the legal framework where it is held.

Information held in another country may be subject to that country’s laws, including lawful access by its authorities.

8. How long we keep it

• Active accounts: for as long as the account is open.
• Closed accounts: 30 days in live systems, then deleted. Encrypted backups age out within 12 months.
• Invoices, payment records and tax documents: as long as tax and accounting law requires, currently seven years.
• Server and error logs: up to 90 days.
• Analytics: up to 24 months, and never linked to a name or email address for people who have not signed in.
• Support correspondence: up to 24 months after the matter is closed.
• Beta waitlist: until you ask to come off it, or until 12 months after Movently opens to everyone — whichever comes first. Replying to our email takes you off it.

9. How we protect it

• Encryption in transit (HTTPS) and at rest.
• Access limited to staff who need it, under confidentiality obligations.
• Tenant isolation: one studio’s data is not reachable from another studio’s account — enforced in the application, in database security rules, and in the request layer.
• Card data never touches our servers; it goes directly to Stripe.
• Regular dependency updates and error monitoring.
• No security is absolute. If a confidentiality incident presents a risk of serious injury, we will notify the Commission d’accès à l’information and the people concerned, as Law 25 requires, and keep a register of incidents.

10. Your rights

Under Quebec’s Act respecting the protection of personal information in the private sector, you may:

• ask what personal information we hold about you and get a copy;
• have inaccurate or incomplete information corrected;
• withdraw consent to a use that depends on consent, such as analytics;
• receive the computerised information you gave us in a structured, commonly used technical format, or have it sent to another organisation (portability);
• ask that information be de-indexed or that its dissemination stop, where the conditions in the Act are met;
• be informed of the reasons and main factors behind a decision made exclusively by automated processing — we make none;
• complain about how we handled your information.

11. How to exercise them

Write to contact@usemovently.com. We will answer within 30 days. If we refuse a request, we will tell you why, and how to seek a review.

If your information is held by Movently on behalf of a studio — because you are a client of that studio — send your request to the studio directly; they decide what happens with it. If you reach us instead, we will pass the request on to them and tell you we have.

If you are not satisfied with our answer, you may file a complaint with the Commission d’accès à l’information du Québec.

12. Children

Movently is sold to businesses and is not directed at children. Where a studio records a minor as a participant, that information is the studio’s to collect and manage, and consent is theirs to obtain.

13. Changes to this policy

We may update this policy. The date at the top always reflects the current version, and we will give notice of a material change before it takes effect.

14. Contact

Privacy questions and requests: contact@usemovently.com.