Movira360 provides software used by activity, entertainment, and experience venues. Depending on the relationship, Movira360 may act as a business responsible for its own website and account data, or as a service provider processing guest, employee, and communication data on behalf of a venue customer.
Email privacy@movira360.com. Do not send passwords, payment card details, access tokens, or sensitive documents by email.
1. Scope and roles
This policy applies to the Movira360 public website, administrative application, booking and guest experiences, support services, CRM and communication features, and integrations that link to this policy.
A venue using Movira360 generally decides why and how its guest and employee information is used. For that information, contact the venue first when practical. Movira360 assists the venue with authorized requests and platform operations.
2. Information we collect
Account and organization information
- Name, business email, phone number, job role, login and account identifiers.
- Organization, venue, location, address, timezone, branding, subscription, and configuration details.
- Role assignments, permissions, authentication events, and security activity.
Venue customer and operational information
- Guest and customer names, email addresses, phone numbers, addresses, dates of birth where configured, tags, preferences, forms, and notes.
- Bookings, attendance, waivers, memberships, vouchers, gift cards, purchases, refunds, capacity, and service history.
- Employee schedules, availability, time records, leave, approvals, and operational documents where the workforce module is used.
Payments
Payment providers process card or bank details through their own secured services. Movira360 may receive and store payment identifiers, amounts, status, method type, refund information, fraud or verification results, and other transaction records needed to operate and reconcile the service.
Communications and integrations
- Email campaign, transactional message, delivery, bounce, complaint, unsubscribe, and engagement events.
- Website chat messages and visitor details submitted to a venue’s chat widget.
- For connected Meta services: Facebook Page and Instagram professional-account identifiers, names, profile details made available by Meta, messages, message events, webhook data, connection status, permissions, and access tokens required to provide the integration.
- Support messages, files, screenshots, and diagnostic information you choose to provide.
Device and usage information
We may collect IP address, browser and device details, timestamps, referring pages, requested URLs, application events, cookies, logs, crash details, and performance information for security, delivery, support, and improvement.
3. How we use information
- Provide, secure, operate, and support Movira360.
- Authenticate users and enforce organization, location, role, and action permissions.
- Process bookings, payments, customer products, messages, campaigns, automations, and workforce operations.
- Connect authorized third-party services and deliver requested communications.
- Detect abuse, investigate incidents, maintain audit history, and protect customers and guests.
- Diagnose failures, improve reliability and usability, and develop features.
- Comply with law, enforce agreements, and protect legal rights.
- Send product or service communications and, where allowed, marketing communications.
4. Legal bases
Where applicable law requires a legal basis, processing may rely on performance of a contract, legitimate interests in providing and securing the service, compliance with legal obligations, and consent. Venue customers are responsible for selecting an appropriate basis for data they collect and for configuring consent and communication preferences.
6. Facebook and Instagram data
Movira360 uses Meta platform data only to connect the Facebook Pages and Instagram professional accounts selected by an authorized customer, receive supported inbound messages and events, display those conversations to authorized venue users, send replies requested by those users, and monitor connection health.
We do not use connected Meta messages to build unrelated advertising profiles or sell Meta platform data. Access remains subject to Meta permissions, provider reply windows, workspace authorization, and the venue’s configuration. See the Meta Integration disclosure and Data Deletion instructions.
7. Retention and deletion
We retain information for as long as needed to provide the service, satisfy the customer’s configuration and instructions, maintain security and audit records, resolve disputes, and meet legal, tax, accounting, or regulatory obligations. Retention periods vary by record type and workspace settings.
Disconnecting an integration stops future authorized collection but does not automatically remove every historical business record. Authorized deletion requests are handled as described on our Data Deletion page. Data may remain temporarily in secured backups until normal backup rotation completes.
8. Security
We use administrative, technical, and organizational safeguards designed for the nature of the service, including access controls, location and role checks, protected credentials, transport encryption, logging, and operational monitoring. No online system can guarantee absolute security. Visit our Security overview for more information.
9. International processing
Movira360 and its service providers may process information in countries other than where it was collected. Where required, we use contractual and organizational measures intended to protect information during international transfers.
10. Your choices and rights
Depending on your location, you may have rights to access, correct, delete, restrict, object to, or receive a copy of personal information, and to withdraw consent. You may also have a right to complain to a privacy regulator.
Venue guests and employees should normally submit requests to the venue that collected the information. Movira360 account holders may contact privacy@movira360.com. We may verify identity and authority before acting.
11. Children and minors
Movira360 is a business platform and is not directed to children for independent use. Venues may use forms or waivers involving minors under their own legal basis and guardian processes. The venue is responsible for required notices, consent, age rules, and collection settings.
12. Changes and contact
We may update this policy as the platform, providers, or legal requirements change. The updated date appears at the top. Material changes may also be communicated through the service or customer contact channels.
Contact: privacy@movira360.com. General support: support@movira360.com.