Privacy Policy
Last updated: March 23, 2026
This Privacy Policy explains how Movesia ("we," "us," or "our") collects, uses, shares, and protects your personal information when you use the Movesia desktop application, website, and related services (collectively, the "Service"). Movesia is an AI-powered desktop application that connects to your Unity Editor to assist with game development through natural-language conversation.
By using the Service, you agree to the collection and use of information as described in this policy. This policy should be read alongside our Terms of Service.
1. Who We Are
Movesia is operated by Movesia. We build an AI-powered desktop application for Unity game development that connects to your local Unity Editor over WebSocket and provides an AI assistant to help you build games faster.
For any privacy-related questions, you can reach us at [email protected].
2. What Data We Collect
Data you provide directly
- Account information — name and email address when you create an account
- Payment information — processed by Stripe; we do not store credit card numbers or payment card details on our servers
- Support communications — messages you send to [email protected]
Data collected automatically
- Usage data — features used, session duration, and credit consumption
- Device information — operating system and application version
- Conversation metadata — timestamps, token counts, and model used; this does not include the content of your conversations
- Website analytics — page views and navigation on movesia.com
Data processed through third parties
- Conversation content — your messages and Unity scene context are sent to Anthropic (via OpenRouter) in real time to generate AI responses. This data is processed transiently and is not stored by Movesia beyond the active session.
Data we do NOT collect
- Unity project files — these stay on your local machine
- Scene files, assets, or source code — not uploaded to Movesia servers
- Payment card numbers — handled entirely by Stripe
3. How We Use Your Data
- Account information — to provide the Service, manage your subscription, and communicate with you about your account
- Payment information — to process billing and prevent fraud
- Conversation messages — sent to LLM providers to generate AI responses; processed in real time and not stored long-term by Movesia
- Usage and analytics data — to improve the Service, monitor performance, and track credit usage
- Conversation metadata — for analytics, service improvement, and cost tracking
4. Legal Basis for Processing
If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal data under the following legal bases:
- Contractual necessity — processing your account data, payment information, and conversation messages is necessary to provide the Service you signed up for
- Legitimate interest — analytics, service improvement, performance monitoring, and fraud prevention
- Consent— marketing communications, if you opt in to receive them
- Legal obligation — tax records, responding to lawful requests from authorities
6. No Training on Your Data
Movesia does not use your conversations, project data, Unity scene information, or any other user-generated content to train, fine-tune, or improve AI models.
Your data is processed in real time solely to provide the Service to you. Conversation content is transmitted to LLM providers for the purpose of generating responses and is not retained or repurposed for model development by Movesia.
This is a core commitment. We believe your creative work belongs to you, and we will never use it to build or improve AI systems.
7. Data Retention & Deletion
- Account data — retained while your account is active; deleted within 30 days of account closure
- Conversation metadata — retained for up to 12 months for analytics, then deleted
- Conversation content — not stored by Movesia beyond the active session; processed in real time by LLM providers
- Payment records — retained as required by tax and accounting law
To request deletion of your data, email us at [email protected]. We will process deletion requests within 30 days. Account deletion will also be available through your account settings in a future update.
8. Your Privacy Rights
All users
- Right to access your personal data
- Right to correct inaccurate data
- Right to delete your data
- Right to export or download your data
EU/EEA residents (GDPR)
- Right to restrict processing
- Right to data portability
- Right to object to processing
- Right to withdraw consent at any time
- Right to lodge a complaint with a supervisory authority
California residents (CCPA/CPRA)
- Right to know what personal data is collected and how it is used
- Right to delete your personal data
- Right to opt out of the sale or sharing of personal data — we do not sell your personal data
- Right to non-discrimination for exercising your privacy rights
Other US state residents
If you reside in Virginia, Colorado, Connecticut, or another US state with a comprehensive privacy law, you may have additional rights under applicable state legislation. To exercise any of your rights, contact us at [email protected].
We will respond to privacy rights requests within 30 days, or within the timeframe required by applicable law.
10. Data Security
We implement commercially reasonable technical and organizational measures to protect your personal data, including:
- Encryption in transit using HTTPS and WSS (WebSocket Secure)
- Hashed authentication tokens (SHA-256)
- Encrypted token storage in the desktop application
- Access controls and secure infrastructure hosting
No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
11. Children’s Privacy
The Service is not directed to children under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under 16 without parental consent, we will take steps to delete that information promptly.
If you believe we have inadvertently collected data from a child, please contact us at [email protected].
12. International Data Transfers
Our servers are hosted by Hetzner, with data centers located in the European Union. However, to provide AI-powered features, conversation data is transmitted to Anthropic (via OpenRouter), which operates in the United States.
Your data may be transferred to and processed in countries outside your jurisdiction, including the United States. For transfers from the EU/EEA to the United States, we rely on the EU-US Data Privacy Framework.
If you are an EU/EEA resident and believe your data has been transferred in violation of applicable law, you have the right to lodge a complaint with your local data protection authority.
13. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will:
- Post the updated policy on this page with a revised "Last updated" date
- Notify you via email to the address associated with your account
Your continued use of the Service after the updated policy takes effect constitutes your acceptance of the changes. We encourage you to review this page periodically.
14. Contact Information
The Service may contain links to third-party websites or services that are not controlled by us. We are not responsible for the privacy practices of those third parties and encourage you to review their privacy policies.
If you have any questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:
- Email: [email protected]
- Website: movesia.com/contact