Privacy Policy

MoVO CRM is operated by MoVO Media Marketing, LLC (“MoVO”, “we”, “us”), a company based in Spokane Valley, Washington, USA. This policy explains what personal data we collect when you use MoVO CRM, why we collect it, and how we protect it.

We collect only what we need to run the service:

• Account information — name, work email, company, industry.
• Billing information — handled by Stripe; we never see full card numbers.
• Content you create — contacts, deals, messages, notes, files, and other CRM data you enter.
• Usage data — pages visited, features used, and diagnostic events to improve the product.
• Cookies — session cookies from Clerk (auth) and analytics cookies from our first-party observability tools.

• To provide the CRM (store your contacts, run your workflows, deliver notifications).
• To bill you (via Stripe).
• To improve the product (understand which features are used).
• To keep the service secure (fraud detection, rate limiting, session integrity).
• To respond when you contact us.

We do not sell your data. We share limited data with sub-processors who help us run the service:

• Clerk — authentication and session management.
• Supabase — database and file metadata storage.
• Cloudflare R2 — encrypted file storage.
• GoHighLevel — customer contact + conversation sync (only when you connect it).
• Stripe — billing and subscription management.
• Resend — transactional email delivery.
• Vercel — hosting and edge caching.
• Sentry — error monitoring (scrubs personal fields).

Each sub-processor is bound by a data processing agreement. We disclose your data to law enforcement only when required by valid legal process.

• SOC 2 Type II compliant.
• Data encrypted at rest and in transit (TLS 1.2+).
• Every admin action is logged in an audit trail; sessions can be revoked and impersonation is fully accountable.
• Files are stored in Cloudflare R2 with per-workspace access scoping.

You can, at any time:

• Access and export all your data (Settings → Data → Export).
• Correct or delete any contact, deal, or document.
• Delete your account — email us and we'll wipe your workspace within 30 days.
• Object to processing or request a copy of the data we hold on you.

EU/UK users have additional rights under GDPR — contact us to exercise them.

While your account is active, we keep your workspace data indefinitely. If you cancel, your data is retained for 30 days in case you change your mind, then permanently deleted from primary systems within 60 days. Backups are purged within 90 days.

We use first-party cookies for authentication (Clerk), preference persistence, and product analytics. We do not run third-party ad-tracking cookies. You can disable cookies in your browser, but the app requires session cookies to function.

MoVO CRM is a business tool. We do not knowingly collect data from anyone under 16. If you believe a child has provided us data, contact us and we'll delete it.

When we make material changes, we'll email account admins and post a notice at the top of this page at least 14 days before the change takes effect.

For any privacy question or to exercise your rights, send us a message. We aim to respond within 5 business days.