Privacy Policy

This Privacy Policy explains how Movira Inc. (“Movira”, “we”, “us”, “our”) collects, uses, shares, and protects information when you visit our websites or use our software platform and related services (collectively, the “Services”).

If you use Movira through an organization (for example, your employer, school, club, or facility operator), that organization typically controls how information is entered and used in the Services. In those cases, the organization is the data controller (or equivalent), and Movira is a service provider/data processor acting on the organization’s instructions. European Data Protection Board

1) Who we are

• Company: Movira Inc.

• Location: Toronto, Ontario, Canada

• Contact (privacy + support): [email protected]

2) Information we collect

A) Information you provide

Depending on how the Services are used, we may collect:

• Account & profile data: name, email, job title, organization name, authentication details.

• Scheduling & workforce data: schedules, availability, time logs, shift notes.

• Operational records: facility bookings, program/space details, approvals/workflows.

• Incident/injury reports: reports and details entered by users (these may include sensitive information depending on what your organization inputs).

• Content & resources: documents, SOPs, training videos, links, and other files/content uploaded to the Services.

• Support communications: information you provide when you contact us (messages and attachments).

B) Information collected automatically

We may collect:

• Device and usage data: IP address, browser/device type, operating system, and app/website activity.

• Log and security data: timestamps, actions in the Services, and diagnostic/error logs.

C) Cookies and analytics

We use cookies and similar technologies to operate and understand usage of the Services, including through:

• Google Analytics

• PostHog

Where required by law (e.g., in parts of Europe), we provide cookie choices/consent mechanisms.

D) Advertising and Remarketing

We may use cookies and similar technologies to deliver and measure advertising campaigns and to show Movira ads to people who have visited our website or interacted with our content (“remarketing”). This may involve partners such as:

• Google Ads (including remarketing features)

• Meta (Facebook/Instagram) Ads (if enabled)

These technologies may collect information such as device identifiers, cookie identifiers, IP address, pages visited, and interactions with ads. Where required by law (including in parts of Europe), we will request consent before using non-essential cookies (including advertising cookies), and you can withdraw consent at any time via our cookie settings (where available) or your browser controls.

You can manage ad personalization through the settings provided by Google and Meta, and through industry opt-out mechanisms (where available).

3) How we use information

We use information to:

• Provide, operate, and maintain the Services (accounts, scheduling, logging, reporting, exports).

• Secure the Services (authentication, fraud prevention, monitoring, and debugging).

• Improve performance and user experience (product development and quality assurance).

• Communicate with you (service messages, support, and administrative notices).

• Process billing and subscriptions.

• Comply with legal obligations and enforce agreements.

4) Legal bases for processing (where applicable)

Where laws like the GDPR apply, we process personal data under one or more legal bases such as:

• Contract (to provide the Services),

• Legitimate interests (security, service improvement, fraud prevention),

• Consent (e.g., certain marketing emails and cookies, where required),

• Legal obligation.

5) How we share information

We may share information:

• With your organization and its admins (if your account is managed by an organization, admins may access data based on role permissions).

• With service providers (“subprocessors”) that help us run the Services. These providers are permitted to process personal data only to deliver services to us.

• For legal and safety reasons (to comply with law, respond to lawful requests, protect rights and safety, and prevent fraud/abuse).

• In business transfers (e.g., merger, acquisition, financing, or sale of assets), with appropriate safeguards.

We do not sell personal information for money.

Current key subprocessors (high level)

• AWS (hosting/infrastructure)

• Stripe (payments)

• Google Analytics (website analytics)

• PostHog (product analytics)

• Loops / Mailchimp / Tally (marketing and forms, depending on how you interact with us)

6) International data transfers

Because our customers are in Canada, the United States, and Europe, personal data may be processed in countries other than where you live.

For transfers of personal data from the EEA/UK/Switzerland to other countries, we use recognized safeguards where required, such as the European Commission’s Standard Contractual Clauses (SCCs). European Commission+1

7) Security

We use administrative, technical, and organizational measures designed to protect personal data, including:

• Encryption in transit (TLS) and at rest

• Access controls and role-based permissions

• Monitoring and logging for reliability and security

No system is 100% secure, but we work to protect data using measures appropriate to the risk.

8) Data retention

If you signed up for a free trial or pilot and your trial account is inactive for 12 consecutive months, we may deactivate or close the account after providing reasonable notice to the email address on file. After closure, we will delete or de-identify personal information within a reasonable period, unless retention is required to comply with legal obligations, resolve disputes, enforce agreements, or meet legitimate security and fraud-prevention needs. This inactivity rule does not apply to active paid customer accounts during their paid term.

9) Your rights and choices

Depending on your location, you may have rights to request access, correction, deletion, portability, restriction, or objection to processing. Under the GDPR, these rights are recognized across the EU framework. European Commission+1

If you use Movira through an organization, requests may need to be handled through your organization’s administrator (because the organization controls the data). To submit a request, contact [email protected].

Canada’s federal private-sector privacy framework (PIPEDA) generally requires transparency, appropriate purposes, safeguards, and access rights in commercial activities. Office of the Privacy Commissioner+1

10) Marketing communications

If you opt in where required, we may send product updates and educational content. You can unsubscribe at any time via the link in the email or by contacting [email protected].

11) Children and minors

Movira accounts may include users who are minors when invited or managed by an organization (e.g., a school or program). In those cases, the organization is responsible for ensuring it has the appropriate authority/consent to invite minors and input their information.

If we learn we collected personal information from a child in a way that requires removal under applicable law, we will delete it.

Note: Some jurisdictions have specific rules for minors (for example, Québec’s Law 25 includes requirements related to collecting personal information from a minor under 14 without parental/tutor consent). CFIB

12) Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version and revise the “Last updated” date. If changes are material, we will provide additional notice as required.

13) Contact us

Movira Inc. (Toronto, Ontario, Canada)
Email: [email protected]