This policy explains what information Moway (“we”, “us”) collects when you use our website and APIs (the “Service”), how we use it, and the choices you have. It works alongside our Terms of Service.
Two kinds of data
Account data is information about you as a Moway user — for example your name and email address. We decide how this is used, as described below.
Customer content is everything you and your team put into your projects: content types, entries, uploaded files and API keys. We store and process it only to provide the Service to you, and it stays isolated within the project it belongs to. If your content includes personal information about other people (for example your own site’s visitors), you are responsible for having the right to collect and store it.
What we collect
- Account information — the name and email address you give us when you request access.
- Customer content — the projects, content, files and settings you create.
- Usage and technical data — request logs such as IP address, browser or client type, and timestamps, used to operate and secure the Service.
- Communications — anything you send us, such as support requests.
How we use it
- To provide, maintain and improve the Service.
- To authenticate you, enforce project access, and prevent fraud and abuse.
- To contact you about your account, security, and important changes to the Service.
- To comply with legal obligations.
We do not sell your personal information, and we do not use your data or customer content for advertising.
Cookies
We use only essential cookies needed to run and secure the Service. We do not use advertising or third-party tracking cookies.
Service providers
We rely on a small number of trusted providers to run the Service. They process data only on our behalf:
- Clerk — sign-in and account management
- MongoDB Atlas — database hosting
- Cloudflare — file storage and content delivery
- Vercel — application hosting
These providers may process data in the United States and other countries.
Uploaded files are public by link
Files uploaded to a project are served from public URLs so your sites and apps can display them. Anyone with a file’s URL can view it. Don’t upload files you need to keep private.
Retention
We keep account data while your account is active. Customer content is kept until you delete it, delete the project, or close your account. Some information may remain in backups and logs for a limited period, or longer where the law requires it.
Security
Data is encrypted in transit, projects are isolated from one another, and API keys are scoped to a single project. No system is perfectly secure, and we can’t guarantee the security of any information you store with us.
Your choices and rights
You can delete your content at any time over the API. You may also ask us to access, correct, export or delete your personal information. Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA. To make a request, contact us at admin@mowa.nyc.
Children
The Service is not directed to children under 16, and we do not knowingly collect their personal information.
Changes to this policy
We may update this policy from time to time. The date at the top shows when it last changed. Continuing to use the Service after an update means you accept the updated policy.
Contact
Questions about this policy or your data? Email us at admin@mowa.nyc.