Privacy Policy

How MoveLoL collects, uses, and shares information

Last updated: June 22, 2026

This Privacy Policy must be reviewed by qualified privacy counsel before launch, especially for CPRA, state privacy laws, and payment/verification data handling.

1. Scope and Data Controller

HZ Tech ("we," "us") operates the MoveLoL marketplace in the United States. This Privacy Policy describes how we collect, use, disclose, and retain personal information when you use our website, apps, and related services (the "Services").

For privacy inquiries or requests, contact legal@movelol.com. For account support, contact support@movelol.com.

2. Information We Collect

We collect information you provide directly, automatically through your use of the Services, and from third parties such as Stripe, Supabase Auth, and identity/compliance vendors.

  • Account data: name, email, phone, password hash, role (customer or mover), language preferences.
  • Profile and business data: business name, description, specialties, service area, metro, hours, website, logo, ratings.
  • Job data: addresses, schedules, categories, descriptions, photos, notes, scope, access details (floor, elevator).
  • Bid and transaction data: bid amounts, messages, time windows, tip flags, job status, payment status, Stripe IDs, platform fees, payout amounts, completion PIN hashes.
  • Verification documents: licenses, COIs, W-9, registrations, and related metadata; AI review outputs.
  • Location data: optional driver GPS coordinates when a mover shares live location.
  • Communications: emails, SMS, in-app messages, support tickets.
  • Peek usage and marketplace activity logs.
  • Device and log data: IP address, browser type, pages viewed, timestamps, cookies, and similar analytics.

3. Sources of Information

Directly from you when you register, post jobs, bid, upload documents, pay, or contact support.

Automatically through cookies, logs, and similar technologies when you interact with the Services.

From payment processors (e.g., payment confirmation, last four digits of card, billing country).

From other users (e.g., reviews, job invitations).

4. How We Use Information

We may use de-identified or aggregated data for analytics and product development.

  • Provide, operate, and improve the marketplace and matching features.
  • Process payments, payouts, refunds, and fraud prevention through Stripe.
  • Verify mover eligibility and compliance documentation.
  • Send transactional notifications (email, SMS, push).
  • Display ratings, job feeds, and distance-based matching.
  • Provide optional AI-assisted photo analysis and document pre-review.
  • Enforce Terms, investigate abuse, and comply with law.
  • Analyze usage trends and develop new features.

5. How We Share Information

We do not sell your personal information for money. We do not share personal information for cross-context behavioral advertising as defined under the California Privacy Rights Act (CPRA) without offering required opt-outs.

  • Other users: job details visible per Platform rules; mover profiles; bids; reviews.
  • Stripe: payment processing, Connect onboarding, payouts, disputes.
  • Twilio: SMS delivery.
  • Email providers (e.g., Resend): transactional email.
  • Supabase and hosting providers: database, authentication, file storage.
  • OpenAI or similar: optional AI features on photos/documents (subject to vendor terms).
  • Administrators and reviewers: verification queue access for authorized staff.
  • Legal and safety: courts, regulators, law enforcement when required or to protect rights and safety.
  • Business transfers: merger, acquisition, or asset sale.

6. Data Retention

We retain personal information as long as needed to provide the Services, comply with legal obligations, resolve disputes, enforce agreements, and maintain business records.

Verification documents and transaction records may be retained for extended periods for compliance, tax, and fraud prevention.

You may request deletion subject to exceptions (e.g., open transactions, legal holds, chargeback windows).

7. Security

We implement reasonable administrative, technical, and organizational measures designed to protect personal information, including encryption in transit, access controls, and row-level security in our database.

No method of transmission or storage is 100% secure. You are responsible for safeguarding your credentials.

8. Children's Privacy

The Services are not directed to children under 13. We do not knowingly collect personal information from children under 13. Contact us if you believe we have collected such information.

9. California Privacy Rights (CPRA/CCPA)

California residents may have the right to know, access, correct, delete, and obtain a portable copy of personal information, and to limit use of sensitive personal information where applicable.

To exercise rights, email legal@movelol.com with "California Privacy Request" in the subject. We will verify your identity before responding.

We will not discriminate against you for exercising privacy rights.

Authorized agents may submit requests with proof of authorization.

10. Other U.S. State Privacy Rights

Residents of Colorado, Connecticut, Virginia, Utah, and other states with comprehensive privacy laws may have similar rights to access, delete, correct, and opt out of certain processing. Contact legal@movelol.com to exercise applicable rights.

11. Location Information

When movers share live location, coordinates may be visible to the customer for that job. Location sharing is optional and can be stopped in the app.

You may control device-level location permissions through your OS settings.

12. Artificial Intelligence

We may send photos or document text to AI service providers to suggest job details or assist human verification reviewers. Outputs are not guaranteed accurate.

Do not upload documents containing unnecessary sensitive data (e.g., full SSN beyond what compliance requires).

13. Cookies and Similar Technologies

We use cookies and local storage for authentication, preferences, analytics, and security. You may control cookies through browser settings; disabling cookies may limit functionality.

We may use privacy-friendly analytics to understand feature usage.

14. International Users

The Services are intended for U.S. users. If you access the Services from outside the United States, you consent to processing and storage in the United States, which may have different data protection laws than your country.

16. Changes to This Policy

We may update this Privacy Policy. We will post the revised policy and update the "Last updated" date. Material changes may be communicated by email or in-app notice.

17. Contact Us

Privacy: legal@movelol.com

Support: support@movelol.com