Terms of use
Version 1.0 — effective October 1, 2026
These Terms of Use (“Terms”) are the contract between Movitera and the organization or person that creates an account, or uses the Services on behalf of an organization (“Customer” or “you”). “Services” means the movitera.com website, the web platform, the mobile app (iOS and Android), Movitera Link (desktop agent), the MCP server, the CLI and the browser extension, and the modules they offer (such as Closure, Vault, Forge, Wiki, SRM, Tasks, Inventory, Status and Muse). By creating an account, accepting an invitation, installing a component or using the Services, you agree to these Terms. The Privacy Policy complements this document and should be read together with it.
1. Who provides the service
The Services are provided by MOVITERA SOLUTIONS LTDA., a Brazilian limited liability company registered under CNPJ No. 65.386.483/0001-50, with its registered office at Avenida Paulista, 777, 15th floor, suite 15, room 3066, Bela Vista, São Paulo/SP, CEP 01311-914, Brazil (“Movitera”, “we”).
General contact, support, contractual notices and commercial matters: hello@movitera.com. Privacy and data protection matters: privacy@movitera.com.
- Who may enter into the agreement — individuals aged 18 or over with legal capacity, and legal entities through someone with the authority to bind them. The Services are intended for professional use.
- Who may represent an organization — if you accept these Terms on behalf of a company, you represent that you are its legal representative or have express authority to contract on its behalf (for example a managing partner, director or formally delegated person). In that case “Customer” is the organization, which is bound by these Terms. We may ask for proof of that authority.
- Contracting on your own — if you use the Services for an individual space, the Customer is you.
2. Accounts, teams and permissions
Each organization uses the Services through a workspace (“team”). The person who creates the workspace becomes its initial administrator.
- Administrator responsibilities — the Customer’s administrators decide who joins the team, which seat each person gets and which roles and module permissions they have (including sensitive ones, such as Vault access, Movitera Link remote operation and connecting AI assistants). The Customer is responsible for those choices, for keeping the member list current and for removing access for people who leave the organization.
- Invitations and users — the Customer should invite only people with a legitimate relationship to the organization (employees, contractors, end customers). Each person uses their own account; accounts and credentials must not be shared. The Customer is responsible for what its members do in the Services through their accounts.
- Protecting credentials — you must keep your passwords, passkeys, recovery codes, access tokens (such as those used by the CLI, the extension and MCP) and second-factor devices confidential and under your control. We recommend enabling a second factor, which the Customer can require for the whole team. Tell us promptly at hello@movitera.com if you suspect unauthorized access to your account.
- Authority over data, systems and devices — when entering, connecting or managing data, credentials, systems, third-party accounts or devices in the Services, the Customer represents that it is authorized to do so, including toward employees, customers, suppliers and other affected individuals, and that it will comply with applicable law (for example labor and data protection law) when monitoring devices or people. Informing users about what the Customer’s organization collects is the Customer’s responsibility.
- Free seats and limited access — members with a free seat or restricted scope see only what their seat and the administrators’ permissions allow.
3. Plans and billing
The Services are offered by subscription. Plans, what each seat includes and the current prices are on the plans page (movitera.com/plans) and in the product at the time of purchase. Prices are in Brazilian reais (BRL), per month, and exclude any taxes the law assigns to the Customer.
- How billing works — billing is per seat (Full, Dev and Vault; the free seat costs nothing and gives wiki reading and ticket requests) and, for Inventory, per enrolled Movitera Link device above the free allowance shown on the plans page. Asset records are not billed. A device counts once even when linked to an asset, and keeps counting until it is removed from management, even if it is offline. The organization must keep at least one active paid seat.
- Free trial — new workspaces may get a trial period (currently 7 days with no card, or the longer period shown when you sign up, for example when a card is added). At the end you must choose a plan to keep using the paid modules.
- Payment method — payment is by credit card, processed by Stripe. For workspaces we enable, payment may be by boleto, only after the trial. We issue an electronic service invoice (NFS-e) for each paid invoice using the tax details on file; the Customer must keep them correct and complete, and issuance may wait until they are fixed.
- Renewal — the subscription renews automatically every month for the active seats and devices until canceled.
- Seat and device changes — adding or changing seats or devices during a cycle is charged pro rata for the remaining period. On card subscriptions, accumulated pro rata charges are invoiced within a week or at the next renewal, whichever comes first; on boleto subscriptions they ride the next invoice.
- Price changes — we may change prices and plan composition. We will give at least 30 days’ notice, by email to the administrator or in the Services, and the change applies from the first renewal after the notice. If you disagree, you may cancel before it.
- Cancellation — the administrator can cancel at any time in the subscription settings. Cancellation takes effect at the end of the period already paid: access continues until then and no further charge is made. We do not charge a cancellation fee.
- Non-payment — if a payment fails or falls overdue, the subscription becomes past due and access is kept for a 3-day grace period, during which we retry the charge or wait for the boleto to clear. If payment is not made by the end of that period, access to the paid modules is blocked until it is regularized. Data is preserved in the meantime, as described in section 4. We may collect overdue amounts by lawful means.
- Refunds — the free trial exists so you can evaluate the Services before paying. Amounts already charged, including the current period, are non-refundable, except where the law requires it, in case of an incorrect or duplicate charge (which we will correct), or where we choose to grant a refund. Pro rata charges reflect only the use during the period.
4. Customer data and content
“Customer Data” means the data and content you or your organization enter, upload or generate in the Services: tickets, messages, attachments, wiki pages, Vault credentials, issues, contracts, inventory, device data and so on. This section is complemented by the Privacy Policy, which explains each party’s role in personal data protection: for workplace data, the Customer is the controller and Movitera is the processor.
- Ownership — Customer Data remains the Customer’s. These Terms do not transfer any ownership of it to Movitera. Movitera owns the Services, the software, the trademarks and the documentation, and the Customer receives only a limited, non-exclusive, non-transferable license to use them while the agreement is in force.
- Limited authorization to Movitera — the Customer authorizes Movitera to process Customer Data only to provide, secure and support the Services, following the Customer’s instructions (for example the configuration set by its administrators) and the law. We do not sell Customer Data, do not use it for advertising and do not use it to train our own AI models. We may use aggregated, de-identified data about how the Services are used to operate and improve the product.
- Confidentiality — each party must keep the other’s confidential information that it accesses in confidence and use it only to perform these Terms. Inside Movitera, access to Customer Data is limited to those who need it to operate, secure and support the service and is subject to a duty of confidentiality. Information that is public, was lawfully known already, or must be disclosed by law or an authority’s order (in which case, where permitted, we will notify the Customer) is not confidential.
- Content — the Customer is responsible for the legality and accuracy of Customer Data and for having the right to use it in the Services. Movitera does not generally monitor content.
- Export — the Customer can export its data through the features available in the Services (for example CSV exports and the CLI) while the account is active, and should do so before ending the agreement.
- After cancellation — after the subscription ends, Customer Data is kept for 30 days, during which the administrator can request an export at hello@movitera.com. After that, we delete Customer Data from production systems, and residual backup copies cease to exist as those backups cycle out. We may keep what the law requires or what is needed for the regular exercise of rights, such as tax and billing records and security audit trails. The Customer may request earlier deletion in writing.
5. AI and integrations
Some features use AI (such as the Muse assistant and AI-assisted features in the modules), and others let you connect third-party assistants through the MCP server, the CLI and other integrations.
- Provider chosen by the Customer — in Movitera’s AI features, the content needed for your request is sent to the model provider (such as Anthropic, OpenAI or Google) selected and configured by your organization, using the key it supplies, and is then also handled under that provider’s terms and privacy policy. What is sent depends on the request: for example the conversation, ticket, wiki page or inventory you ask the assistant to analyze. Muse may list descriptive data about Vault credentials you can already access, but it never reads or sends password or secret values, and the Vault is not exposed through MCP. Choosing the provider, understanding its terms and deciding what data to send is the Customer’s responsibility.
- How to connect and revoke — you connect an assistant through a browser consent screen protected by a second factor, which creates a time-limited access token that can only do what your own permissions allow. The token can be revoked at any time in the access token settings, and administrators can manage these connections. Keep only connections you recognize.
- Read and write are different authorizations — connecting an assistant lets it read what you can see. Changing data requires a separate write consent, granted in the browser with a second factor, tied to that token and to specific modules, and active until you revoke it. Some sensitive actions (such as marking invoices paid, publishing wiki pages, and creating or editing suppliers) cannot be performed by external assistants. In Muse, actions that change data depend on your approval, and some can be undone with the undo feature.
- Actions already executed stay in effect — disconnecting or revoking an assistant, plugin or integration stops future access, but does not undo what was already done through it: a ticket reply, a created issue, a changed status, a sent email or a posted message remains in effect. Data already delivered to an AI provider or third-party service stays under that third party’s rules. Reverse what you need manually (history and audit records help identify what changed), and review consent before granting write access.
- Limits of AI-generated responses — AI-generated responses may be incomplete, inaccurate, out of date or unsuitable for your case, even when they sound confident. They are not legal, tax, financial or security advice. The Customer must review output before acting on it or sending it to third parties and is responsible for decisions made based on it.
- Third-party services — integrations with third-party services (such as GitHub, Sentry, Stripe, Twilio and AI providers) are subject to those third parties’ terms, which we do not control. We are not responsible for their unavailability, changes or failures.
6. Security and remote access
We adopt reasonable technical and organizational measures to protect the Services, described at movitera.com/security and in the Privacy Policy, including encryption in transit, role- and module-based access control and audit logs. No system is completely secure, and we do not promise absolute security or the absence of incidents.
- Use only in authorized environments — Movitera Link, the CLI, the extension and other components may be installed and used only on devices and environments the Customer owns or administers, or where it has the owner’s express authorization. Using them to access or monitor devices, networks or accounts without that authorization is prohibited.
- Remote assistance and consent — Movitera Link remote assistance stays off until an administrator enables it and can only be started by members with the remote-operator permission. By default each session requires the approval of the person using the computer, who sees who is asking for access and whether the session is view-only or with control, and a persistent banner with a stop button is shown. Unattended access exists only if the Customer expressly enables it, under the session policy it chooses. The Customer is responsible for setting that policy, for obtaining the consents and giving the notices the law requires to the people affected, and for using remote access only for legitimate purposes.
- Audit logs — we keep audit logs of relevant actions, including metadata of each remote session (device, team, operator, start, end, mode and consent decision) and token usage, without screen or action content. The Customer accepts these records and can review what is available in the Services.
- Incidents — if the Customer identifies or suspects a security incident affecting the Services (such as a compromised credential, improper access or a vulnerability), it must tell us promptly at hello@movitera.com. If we identify an incident affecting Customer Data, we will notify the Customer within a reasonable time and in the manner the law requires, with the information we have and the measures taken. Researchers who find vulnerabilities should report them responsibly, without accessing third-party data or harming the service.
7. Availability, support and backups
- Availability — we work to keep the Services available, but they are offered “as is” with respect to availability: we do not guarantee uninterrupted or error-free operation, and these Terms do not include a contractual uptime percentage (SLA). Any SLA applies only if agreed in writing.
- Maintenance — we may perform scheduled or emergency maintenance and updates that can cause temporary interruptions. Where possible we will announce relevant scheduled maintenance. The status page, when available, shows the state of the Services.
- Support — support is provided by email at hello@movitera.com, on business days, with reasonable efforts to respond. We do not promise response or resolution times unless agreed in writing.
- Backups and recovery — we keep recurring backups of our systems for recovery after failures. They exist for service continuity and do not replace the Customer’s own copies and exports; we do not guarantee recovery of a specific item deleted by the Customer or one of its members, nor any particular recovery time or point. The Customer should periodically export data that is critical to it.
- Usage limits — we may apply reasonable limits on usage, file size and request rate to protect the stability of the Services and the use of resources such as AI, telephony and messaging.
- Features in development — features labeled beta or experimental may change or be discontinued. We may modify the Services; if a change materially reduces a paid feature, we will give advance notice.
8. Prohibited use
When using the Services, you may not:
- access or attempt to access accounts, data, systems or devices without authorization, bypass access controls, limits or security measures, or run penetration tests, scans or reverse engineering of the Services without our prior written permission (except as the law permits);
- upload, store or distribute illegal content, content that infringes third-party rights, or malicious code, or use the Services for fraud, phishing, spam, harassment or any unlawful activity;
- monitor, capture or control people or devices without a legal basis and without the required notices and consents;
- overload, interfere with or abuse the platform, its APIs, its telephony and messaging channels or the AI features, including through automation beyond reasonable limits;
- resell, sublicense or offer the Services to third parties as your own service without a written agreement (the Customer acting as an IT provider to its own clients through the modules built for that is not resale);
- use the Services to build a competing product, or share your access credentials with anyone who is not an authorized member.
9. Suspension and termination for breach
- When we may suspend — we may suspend, in whole or in part, access for an account, team, user, token or integration if these Terms are breached, if there is a risk to the security or stability of the Services or of third parties, unlawful use, a legal or authority order, or non-payment not regularized as set out in section 3.
- Notice and chance to fix — whenever the case allows, we will notify the administrator by email before suspending, stating the reason, and give a reasonable period (as a rule at least 5 business days) to fix the problem. We may suspend immediately, and notify afterward, where there is a serious or imminent risk (such as an intrusion, ongoing abuse, illegal content or a legal order) or where prior notice is prohibited.
- Scope and restoration — suspension will be limited to what is necessary to address the problem and lifted once it is resolved. During suspension Customer Data is preserved. Suspension does not relieve the Customer of amounts owed.
- Termination for breach — if the breach is serious, repeated or not fixed within the period, we may terminate the agreement under section 10.
10. Liability and termination
- Proportionate liability — each party is liable for direct damages it causes the other by breaching these Terms, within the limits of the law. To the maximum extent permitted by law, Movitera’s total liability to the Customer for all events related to these Terms is limited to the amount the Customer actually paid Movitera in the 12 months before the event giving rise to the claim (or, if the agreement is shorter, the amount paid in that period).
- Exclusions — Movitera is not liable for lost profits, loss of opportunity or indirect or consequential damages, nor for damage caused by use contrary to these Terms, by failures of third-party services, by decisions made on AI output without review, by actions performed by assistants or integrations the Customer authorized, or by fortuitous events and force majeure. These limits and exclusions do not apply to willful misconduct, gross negligence, or anything the law does not allow to be limited, and do not affect the Customer’s non-waivable rights.
- Service failures — if the Services fail materially because of us, we will work to restore them and fix the cause. Where the failure makes a paid feature unavailable for a significant period, we may grant a credit proportional to the affected period, at our reasonable discretion or as agreed in writing. For liability purposes, the limits in this section apply.
- Indemnity — the Customer must hold us harmless from third-party claims arising from Customer Data, from use of the Services in violation of these Terms or the law, or from lack of authorization to monitor devices or people, to the extent of its responsibility. We will promptly notify the Customer of any claim and reasonably cooperate in the defense.
- Term and termination by the Customer — the agreement lasts until the subscription ends. The Customer may end it by canceling the subscription (section 3) and may stop using the Services at any time.
- Termination by Movitera — we may end the agreement on 30 days’ notice, or immediately for serious or uncured breach (section 9), a legal order or a significant risk. If we end the agreement without fault on the Customer’s part, we will refund pro rata the amount paid for the period not enjoyed after the termination date.
- Effects of termination — once the agreement ends, access is deactivated and Customer Data is handled as described in section 4. Provisions that by nature should survive remain in force (such as confidentiality, ownership, limitation of liability, amounts owed and governing law).
11. Changes to these Terms
- Versions — each version of these Terms is identified by a number and an effective date at the top of this page. We keep the current version published on this page.
- Material changes — we may update the Terms to reflect changes to the Services, the law or our practices. Material changes will be announced at least 30 days in advance, by email to the administrator or a notice in the Services, and take effect on the date stated. Changes required by law or needed for security may take effect immediately. Minor and editorial fixes take effect when published.
- Acceptance — if you keep using the Services after the effective date, you are deemed to accept the new version. If you disagree, you may cancel the subscription before that date as set out in section 3.
12. Governing law and dispute resolution
These Terms are governed by the laws of the Federative Republic of Brazil. The parties will first try to resolve any dispute in good faith and amicably, by contacting hello@movitera.com, within 30 days of written notice. If that is not possible, the courts of the District of São Paulo, State of São Paulo, are chosen, waiving any other, however privileged, except for the venue the law mandatorily assigns to a consumer, where applicable.
13. General provisions
- Entire agreement — these Terms, the Privacy Policy and any specific written agreement (such as a data processing addendum or signed commercial proposal) form the entire agreement between the parties on the subject. In case of conflict, the specific signed written agreement prevails.
- Severability and waiver — if a provision is held invalid, the rest remain in force. Failing to enforce a right is not a waiver of it.
- Assignment — the Customer may not assign these Terms without our prior written consent. We may assign them in a corporate reorganization, merger or sale of assets, with the protections set out here preserved.
- Notices — we may send notices by email to the administrator’s address or within the Services. The Customer must keep its email current.
- Language — these Terms are published in Portuguese, English and Spanish for convenience. If they diverge, the Portuguese version prevails.
Contact
Questions about these Terms, contractual notices and support: hello@movitera.com