Who we are

Moviqo is an operations CRM made by Mega Move India Private Limited, Mumbai, India ("Mega Move India", "we", "us"). This policy covers the website at moviqo.in, the Moviqo app at app.moviqo.in, the sign-up form, and the connectors described below.

For the personal data we collect for our own purposes (for example your user account, or a sign-up request) we decide why and how it is used. Under India's Digital Personal Data Protection Act, 2023 (the "DPDP Act") we are the Data Fiduciary for that data.

This policy is written to meet the Information Technology Act, 2000 and its Reasonable Security Practices and Procedures and Sensitive Personal Data or Information Rules, 2011, and the Digital Personal Data Protection Act, 2023 and its Rules as they come into force.

Today Moviqo is used by Mega Move India's own team. If you are a customer, vendor, agent, driver or other contact of Mega Move India, we are the Data Fiduciary for your details: write to info@megamoveindia.com.

When other companies use Moviqo (company accounts open soon). A company using Moviqo stores records about its own customers, vendors, drivers and contacts. For that data the company is responsible for using it lawfully, and we process it on the company's behalf and on its instructions. If your details appear in that company's records and you want to use your rights, contact that company first; we will help them answer you.

What we collect

Account and profile data

Your name, work email, phone number and job title; your role and the workspaces you can open; your password, stored only as a one-way hash; and your sign-in sessions, including the IP address and browser of the device you used.

Business records you enter

Customers and contacts, leads, vendors, RFQs, vendor pricing, rate sheets, quotations, jobs, trips and other transport records, vehicles, drivers, tasks, notes and social media posts. These can contain personal data about the people your company deals with, such as names, email addresses and phone numbers.

Driver and vehicle records

Driver records can include date of birth, blood group, address and emergency contact, driving licence details, the last four digits of Aadhaar, copies of identity, licence, medical, police-verification and bank documents, and pay rates and advances. Vehicle records can include GPS location, speed and ignition data from a connected tracker, which can show where a driver was. This data is used only to run trips, meet transport and labour law and pay drivers, and only people whose work needs it can see it.

Files you upload

For example cargo photos, packing lists, original rate sheets, vendor documents (GST, PAN, MSME certificates, cancelled cheques) and images or videos for social posts.

Sign-up form

When you register interest on moviqo.in: company, your name, work email, phone, country, city, business type, team size, your message, your consent and the time you sent it. To block spam and repeat requests, we also store your browser type and a scrambled (one-way hashed) form of your IP address.

Technical logs and audit trail

IP address, browser, date and time, the pages and functions requested, and errors, used to keep Moviqo secure and to fix problems. Inside the app, an audit trail records who changed which record, what changed and when, and whether the change came from a person or from the Claude connector.

Cookies

The Moviqo app at app.moviqo.in uses only essential first-party cookies, all needed for the app to work:

sign-in session cookies, which keep you logged in until you sign out or the session expires;
moviqo_workspace, which remembers the workspace you last opened (30 days);
sidebar_state, which remembers whether the side menu is open (7 days).

There are no advertising or analytics cookies and no tracking pixels.

This website, moviqo.in, sets no cookies. It loads its fonts from Google Fonts, so your browser connects to Google's servers to fetch them, and Google receives your IP address as part of that request.

In the Moviqo Social workspace, an admin of your company can connect your company's Facebook, Instagram, LinkedIn, X and YouTube accounts through each network's own sign-in. When that happens:

we store the access tokens the network issues, encrypted;
we use them only to publish, edit or delete the posts your team schedules and approves; to reply to, hide or delete comments on those posts; and to read your company's own pages, channels, posts, comments and statistics (such as followers, reach and engagement), so your team can reply and see results;
to reach your Facebook Page and Instagram account through your Meta business portfolio, Moviqo also reads the portfolio's basic details; it does not read or change ads;
on LinkedIn, connecting also stores the personal profile of the admin who connects, so they can post as themselves if they choose; on X, the connected account is the one that person signs in with;
when people comment on your posts, Moviqo stores their public name or handle, their network ID and the comment text so your team can reply. LinkedIn commenters' names are not stored, and comment text read from LinkedIn is deleted after 48 hours, as LinkedIn requires;
we do not read accounts that were not connected, do not use this data for advertising, and do not sell it.

YouTube. Moviqo uses YouTube API Services to publish to and read your channel. By connecting YouTube you agree to the YouTube Terms of Service, and Google's use of data is covered by the Google Privacy Policy. You can revoke Moviqo's access at any time at myaccount.google.com/permissions. Moviqo's use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.

An admin can disconnect an account at any time in Moviqo → Social → Accounts, which deletes its stored tokens straight away. You can also remove the app in the network's own settings. See Delete your data for how to have everything we fetched removed.

Claude connector (Anthropic)

Moviqo can be connected to Claude, the AI assistant made by Anthropic, through an MCP connector. This happens only when a user connects Claude and signs in with their own Moviqo account.

When you ask Claude to act in Moviqo, the data it reads or writes for that request is processed by Anthropic, outside India, under your Anthropic account terms and Anthropic's privacy policy, including any choice you make there about model training.
Claude has the same access as your role and workspaces, never more.
Every change it makes is recorded in the audit trail as made by Claude.
Moviqo's connector cannot send email. If Claude drafts an email with your own mail tools, it is sent only when you approve it there.
Admins can see and revoke every connection in Moviqo → Settings → Claude connector.

If nobody in your company connects Claude, no Moviqo data goes to Anthropic.

Moviqo AI

Moviqo AI runs an open-source language model on Moviqo's own server. Text and files you give it are processed there and are not sent to an outside AI provider. It drafts RFQs, rate lines and vendor routes for a person to review, and answers questions from Moviqo's records with your access, without changing them; nothing it drafts is saved until someone checks it and saves it. Mega Move India does not use your data to train AI models.

How we use data

To run Moviqo for you: signing you in, showing your workspaces, storing and displaying your records and files, publishing the social posts you approve.
To keep it secure: access control, the audit trail, preventing abuse, investigating incidents and making backups.
To support you: answering your questions and service emails such as password resets.
To answer sign-up requests: contacting you about Moviqo and setting up your company's account.
To meet legal obligations, such as tax and accounting rules or lawful requests from authorities.

We process personal data with your consent (for example, the sign-up form, which you can withdraw at any time) or for the legitimate uses the DPDP Act allows, such as data you give us voluntarily for a specific purpose, employment purposes for our own staff, or compliance with the law. We do not sell personal data, show ads or build advertising profiles.

Where data is stored

Moviqo is hosted in India, on a server in a Mumbai data centre run by our hosting provider, Hostinger. Your records, files and nightly backups are stored there.

Some data does leave India:

when your company connects Claude (Anthropic) or publishes to a social network, the data needed for that action goes to that provider;
service emails, such as password resets, are sent through the email service set up for Moviqo, which may route and store them outside India;
this website loads its fonts from Google Fonts (see Cookies), so your browser sends your IP address to Google;
our hosting provider's support staff, who may be outside India, may be able to reach the server for support or maintenance.

Service providers who help us run Moviqo and may use the data only to provide their service to us: Hostinger (hosting, Mumbai) and the email service that delivers Moviqo's service emails.
Services your company connects: Anthropic for Claude, only when Claude is connected; Meta, LinkedIn, X and Google (YouTube) for Social, only for the social actions you ask for.
People in your company who have the right role see the records in their workspaces.
Authorities, when the law requires it, or to protect the rights and safety of people or of Moviqo.

We never sell or rent personal data. If Moviqo or Mega Move India is merged or sold, your data may pass to the new owner, who will have to protect it as this policy describes; we will tell you before that happens where the law allows.

How long we keep it

Account and profile data: while your account is active. When an account is closed or you ask us to delete it, we deactivate it at once and delete it within 30 days, except what we must keep (see below). Older entries in the audit trail can still show your name next to changes you made.
Business records and files: for as long as your company uses Moviqo. When the company's account closes, we delete them within 30 days.
Sign-up requests: we review and delete requests we no longer need, at the latest after 12 months, unless you become a customer.
Data fetched from social networks: while the account stays connected. When an account is disconnected, we delete the comments and statistics fetched from it within 30 days (LinkedIn comment text after 48 hours; YouTube data as YouTube's policies require).
Technical and security logs: kept for at least 180 days, and up to one year where Indian law requires, then deleted; longer only while we investigate a security incident.
Backups: nightly backups are kept for about 15 days and then deleted, so deleted data also leaves the backups within about 15 days.
Records the law requires us to keep, such as invoices and accounting records, are kept for the period the law sets, and used only for that purpose.

Security

HTTPS for all traffic to moviqo.in and app.moviqo.in.
Passwords stored only as one-way hashes; Claude connector tokens stored only as hashes and revocable at any time.
Social account tokens encrypted.
An admin chooses which workspaces each person can open, and their role decides what they can do there. Only admins can delete customers, vendors, RFQs, rate sheets, quotations and leads.
An audit trail of every change.
For staff other than admins, copying, printing and saving pages are turned off in the browser. A browser cannot block a screenshot, so every screen carries a faint watermark with the person's name, email and the time.
Nightly backups.

No system is perfectly secure. We report cyber security incidents to CERT-In and, where personal data is affected, to the Data Protection Board of India and the people affected, within the times the law sets.

Your rights

Under the DPDP Act, 2023, you have the right to:

Access a summary of the personal data we hold about you, how we use it, and who we have shared it with;
Correction: have it corrected, completed or updated. You can change much of your profile yourself in Moviqo → Account;
Erasure: have it deleted when it is no longer needed or you withdraw consent. See Delete your data;
Withdraw consent as easily as you gave it, for example for follow-ups on a sign-up request;
Grievance redressal: complain to our grievance officer (below) and, if you are not satisfied with the answer, to the Data Protection Board of India;
Nomination: nominate another person to use these rights for you if you die or become unable to.

To use any of these rights, email info@megamoveindia.com from the email address we know you by. We may ask you to confirm your identity. We aim to answer within 30 days.

You can ask us for this policy in English or in any language listed in the Eighth Schedule to the Constitution of India.

Children

Moviqo is a business tool for adults. It is not meant for anyone under 18, and we do not knowingly collect children's personal data. If you believe a child has given us personal data, write to us and we will delete it.

Changes to this policy

If we change this policy, we will publish the new version on this page with a new date. For significant changes, we will also tell the admins of company accounts by email or in the app before the changes take effect.

Contact and grievances

Data Fiduciary Mega Move India Private Limited, Mumbai, Maharashtra, India info@megamoveindia.com

Grievance officer Hitesh Kaswan, Founder & Managing Director info@megamoveindia.com

Effective date: 27 October 2026.