GDPR

What personal data is processed

MOVON Labs processes: your account email, a device identifier and device name for each machine you connect from, sign-in and session records (including any passkey you add), and a record of each match you run. The MOVON Match plugin sends only the color data needed to build a match to MOVON's servers; that color data on its own does not identify you, and your footage, frames, and project stay on your machine. The beta signup form on movonlabs.com collects first name, last name, email address, country, and occupation, and all five are held against the beta record it creates.

Data controller

MOVON Labs, based in Türkiye, is the data controller for the account and website data described above. Contact for data protection matters: hello@movonlabs.com. A formal DPO is appointed if and when the scale of processing requires one.

Lawful basis

Account data (email, devices, sessions, usage) is processed under contract (Article 6(1)(b)): it is necessary to provide the account and enforce plan limits. Fault reports, install and removal signals, and the daily working signal are processed under legitimate interests (Article 6(1)(f)): keeping MOVON working and supporting the people who use it. You can object to that processing at any time by writing to hello@movonlabs.com. The movonlabs.com signup email, for visitors without an account, is processed on the basis of consent (Article 6(1)(a)) and can be withdrawn at any time.

Right to access

Email hello@movonlabs.com to receive a copy of everything MOVON Labs holds on you: your email address, your devices, your sign-in and session records, your match records, and any fault reports tied to your account. Answered within 30 days.

Right to rectification and erasure

To correct or delete your data, email hello@movonlabs.com. Deletion is completed within 30 days; backup retention is 60 days, after which the data is unrecoverable.

How long data is kept

Account data lives as long as the account, then 30 days to delete and 60 for backups to expire. Usage records last as long as the account, because credits depend on them. Fault reports are kept for 12 months. Color data is not retained: it is computed against and discarded, and never written to a store. The website email list keeps an address until it is removed on request. The Privacy document carries the same schedule.

Right to object

A user may withdraw consent and object to further contact at any time, by writing to hello@movonlabs.com or using the unsubscribe link in any email.

Where your data is held

MOVON Labs is based in Türkiye and stores account data on its own servers there. When you sign up you give that data directly to MOVON Labs, and it is handled under this document wherever it sits: the same rights, the same limits, and the same rule that nothing of yours trains the model.

Türkiye is not covered by an EU adequacy decision, so MOVON Labs does not rely on one. It relies on the commitments written here, on encryption in transit, and on keeping the data footprint deliberately small: your name and email, your devices, your sessions, and a count of your matches.

Email delivery is a separate matter. MOVON Labs uses Resend (Plus Five Five, Inc.), a United States company, to send sign-in links and news emails, so your email address is processed in the United States. Questions about any of this go to hello@movonlabs.com.

Right to lodge a complaint

Users in the EU may file complaints with their local supervisory authority. UK users may contact the ICO. MOVON Labs prefers to resolve issues directly first. Start at hello@movonlabs.com.