Privacy policy

movl lets you run agents on computers you own and talk to them from anywhere. This policy explains what movl’s account server keeps about you, what it never keeps, and who else sees your data. movl runs the hosted service at https://app.movl.ai and is the controller of the data described here.

The short version

• Your agents, instructions, conversations, jobs and files live on your own machines (the hosts). Our server does not store them.
• The server keeps your email address and what it needs to sign you in and connect you to your hosts.
• We do not run analytics or advertising trackers.
• Messages pass through our relay to reach your host. Today they are not end-to-end encrypted through the relay, so the relay could technically read them while they pass. We do not store them.

What the server keeps

• Account. Your email address, as you typed it and in a normalised form, and when the account was created.
• Sign-in codes. The code we email you is stored only as a keyed hash, expires after 10 minutes and is limited to five attempts. We also keep a keyed hash of the network address the request came from, to detect abuse. We do not keep the address itself for this.
• Sessions. A record of each device you are signed in on and when it was last used, so you can see and sign out of them.
• Hosts. The name, picture, time zone and public key of each host you enroll, whether it is online, and when it was last seen. Enrollment codes are stored only as hashes.
• Sharing. Who you share a host with, their role (viewer or editor), and open invitations, which include the email address invited.
• Phone pairing. A one-time code that lets a phone sign in from a QR code. It works once and is valid for two minutes.
• Security log. Events such as sign-in, sign-out, host enrollment and revocation, and role changes. They hold identifiers, not message content, codes or addresses, and are kept for 180 days by default.
• Rate-limit counters that stop repeated requests, kept briefly.

What stays on your hosts

Agents and their instructions, conversations, jobs and their output, and files stay on the host that owns them. The server never stores agent configuration, messages, job input or output, or file contents. If you share a host, people you invite can see what the host holds according to their role. A viewer sees everything an editor sees, including past conversations, so do not share a host whose history should stay private.

Your own AI provider

An agent can answer through the chat runner, which sends the agent’s instructions and conversation to an HTTP service chosen by whoever runs the host. What you write to such an agent leaves the host for that service and is governed by that service’s terms and privacy policy, not this one. The key for that service stays on the host and never passes through our server.

Who else is involved

• Email delivery. Sign-in codes and invitations are sent through Resend, which processes your email address for that purpose.
• Hosting. The server runs on Linode in Frankfurt, Germany.
• This website. The marketing site serves its fonts from its own host, so your browser does not contact Google to load them.

We do not sell your data and we do not share it for advertising.

Cookies and storage

The web app uses a session cookie to keep you signed in and local storage for preferences such as language. Both are strictly necessary. The apps store a session token in the platform’s secure storage. We set no tracking cookies.

How long we keep it

Account, sessions and host records are kept while your account exists. Sign-in codes expire within minutes and are removed after use or expiry. Security log entries are kept for 180 days by default. When you delete your account, we remove your account, sessions, hosts and sharing records from the server; copies in encrypted backups age out within 90 days. Data on your own hosts is yours to delete.

Your rights

Depending on where you live, you may have the right to access, correct, export or delete your data, to object to or restrict processing, and to complain to a data protection authority. Write to support@movl.ai and we will reply within [30 days]. Because conversations live on your hosts, you can export or delete them there directly.

If you run your own server

movl can be run entirely on your own hardware. If you run your own server, you decide what it keeps and you are responsible for the people who use it. This policy covers only the service operated by movl.

Children

movl is not directed at children under [16]. If you believe a child has created an account, contact us and we will remove it.

Changes

If we change this policy in a way that matters, we will tell signed-in users by email or in the app before it takes effect. The date at the top shows the latest version.

Contact

movl, [postal address], support@movl.ai.