Movetrace

Security and privacy

Your data, your crews' and your customers', protected by design.

Movetrace handles working hours, addresses, photos and signatures. Here is, concretely, how we protect them.

Every company in its own space

  • Each customer's data is separated in the database itself, not just in the application.
  • The application connects with an account without admin rights: even a programming error cannot mix two spaces.
  • Each space has its own address, and people only see the spaces they work for.

Sign-in with no password to steal

  • Sign in with Google or with a single-use link sent by email.
  • Two-factor authentication by app, which you can require for admins or for everyone.
  • Connected devices visible in each profile; sign out one device or all of them in one click.
  • Codes cannot be reused and attempts are limited.

No tracking of crews

  • Location is recorded only when someone clocks in, never continuously.
  • The only exception, for the customer: on the way to their address, a single point is kept, overwritten every minute and erased on arrival.
  • The end customer never sees clock-in locations.

Everyone sees only what concerns them

  • Partner movers never see the end customer's full contact details, the customer price or the margin.
  • The end customer does not see the mover's rate.
  • Precise roles: admin, planner, read-only, crew lead, crew member, and custom roles without amounts.

Figures nobody can tamper with

  • Every clock-in goes into a log that can only be added to: nothing is erased or rewritten.
  • Nobody types an hour or an amount; a correction is a new line, with its reason and its author.
  • The statement sent to the customer shows the corrections.

Your data stays yours

  • Full export at any time: one file per data type, photos included.
  • Deletion of your space on request, reversible for 30 days, then permanent anonymisation.
  • The Movetrace team only accesses your space to help you, read-only, for a limited time, and every access shows up in your security log.

A closed infrastructure

  • Your data is hosted in Europe.
  • None of our servers' ports are open to the Internet: traffic goes through an encrypted tunnel.
  • HTTPS everywhere, abuse protection and rate limiting.
  • Payments go through Stripe: no card data passes through our servers.

GDPR: who does what

You remain the controller of your customers' and crews' data; Movetrace acts as a processor, only on your instructions.

Personal data is used only to run the service: no reselling, no advertising.

Retention periods and our list of sub-processors are set out in the data processing agreement, available on request.

Services we use

Cloudflare
network, encryption and site protection
Mailchimp Transactional (Mandrill)
sending emails
Stripe
subscription payments
Google Maps Platform
addresses and travel times

A security question?

Write to us: we answer your customers' and contractors' security questionnaires.

Write to us
Free trial20-min demo

Sign in

I don't know my space address