Privacy Policy

This policy explains how Movework ("we") collects, uses, shares, and protects personal data when you use getmovework.com and our app. We aim to comply with the EU/EEA GDPR, the UK GDPR, the California CCPA/CPRA, Canada's PIPEDA, and other applicable privacy laws. Movework is currently operated by an individual (sole proprietor) based in India.

1. Who is the controller

The data controller is Movework, operated by an individual (sole proprietor) based in India. For privacy questions or to exercise your rights, contact privacy@getmovework.com. If an EU/UK representative becomes legally required as Movework grows, we will appoint one and update this page.

2. What we collect

• Account: email address and a hashed password.
• Waitlist: name, email, current country, target role, experience band, target countries, email-verification status, referral attribution, and separate records of privacy and optional marketing choices. Joining the waitlist does not create an account.
• Profile: citizenship/nationality, current country, work-authorisation status, sponsorship needs, target countries and roles, years of experience, expected salary, and the résumé text you choose to provide.
• Job data: job descriptions you import and the verdicts generated.
• Payment: if/when paid plans launch, payments are handled by a third-party payment processor; we store a payment reference id and status, never your card number.
• Technical/usage: authentication cookies, request logs, and (if enabled) privacy-respecting product analytics.

Some fields (e.g. nationality, or details in a résumé) may be sensitive. Please do not upload special-category data you don't want processed. Where required, we rely on your consent to process such data, which you may withdraw at any time.

3. Why we use it & legal bases (GDPR Art. 6)

• To manage verified waitlist interest — your consent.
• To provide the service (accounts, eligibility, tuning) — performance of a contract.
• To secure and improve the product — legitimate interests.
• Payments — contract / legal obligation.
• Optional analytics/marketing — consent.

4. AI processing of your text

To generate verdicts and résumé tuning, the job description and résumé text you provide are sent to a configured third-party AI API provider. Provider selection can change, so the applicable provider and data terms must be reviewed before a production release. Avoid submitting personal data that is not needed for the requested output.

5. Who we share with (sub-processors)

• Cloud hosting and managed database providers.
• A third-party payment processor (only if/when paid plans launch).
• The configured AI API provider for the features above.
• A transactional email provider for verification and operational messages.
• Analytics provider, if/when enabled, under a data-processing agreement.

We do not sell your personal information.

6. International transfers

We may process data in countries other than yours. Where we transfer personal data out of the EEA/UK, we rely on appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.

7. Retention

We keep personal data only while needed for the waitlist or an active account, security, dispute handling, and legal obligations, then delete or anonymise it under the applicable retention schedule. Email-verification links expire and only a one-way digest is stored.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete, port, restrict, or object to processing, and to withdraw consent. California residents have rights to know, delete, correct, and opt out of "sale"/"sharing" (we do neither), without discrimination. To exercise any right, email privacy@getmovework.com. EU/UK users may complain to their local supervisory authority.

9. Cookies

We use strictly-necessary cookies for authentication (including an httpOnly refresh-token cookie). Any analytics cookies are set only with your consent where required.

10. Security

Passwords are hashed (bcrypt), traffic is encrypted in transit, refresh tokens are stored as httpOnly cookies, and access is rate-limited. No system is perfectly secure.

11. Children

Movework is not intended for anyone under 16. We do not knowingly collect their data.

12. Changes

We will update this page and the "last updated" date when this policy changes.

See also our Terms of Service and Disclaimer.