Privacy policy
Last updated: 10 October 2026
At Move we look after your data. This policy explains which personal data we process, why, who we share it with and how you can exercise your rights, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
1. Controller
Artsessions SLU · Tax ID B64848997
Carrer Llull 240, 08005 Barcelona (Spain)
Privacy contact: help@replai.net
2. Data we process
- Account: first name, last name, email and password (stored with irreversible hashing). If you choose, your profile photo.
- Your vehicles: make, model, version, number plate, nickname, technical sheet, mileage, maintenance, tyre pressures, vehicle photos and status (active, sold…).
- Expenses: amounts, dates, centre or supplier and any invoices you attach (which may contain your data).
- Photos used to read data: the photo of the instrument cluster or the technical sheet you send so the app can read the mileage or the vehicle details.
- Centres directory: the reviews, ratings, photos and replies you publish, the centres you follow or save, and the information you provide if you claim ownership of a centre.
- Technical data: IP address, device and browser type, access and error logs, and session identifiers, needed for the service to work securely.
- Communications: whatever you write to us when asking for support.
Centre details in the directory (name, address, phone, opening hours) are business data taken from public sources or provided by the centres themselves.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Creating and maintaining your account and providing the Move service (vehicles, mileage, reminders, expenses). | Performance of the contract (art. 6.1.b GDPR). |
| Reading the mileage or technical sheet from a photo when you ask for it. | Performance of the contract (art. 6.1.b). |
| Publishing in the directory the reviews and photos you decide to share. | Performance of the contract (art. 6.1.b). |
| Answering your questions and support requests. | Performance of the contract and our legitimate interest in replying (art. 6.1.b and 6.1.f). |
| Keeping the service secure, preventing abuse and fixing errors. | Legitimate interest (art. 6.1.f). |
| Sending service messages (for example, to reset your password). | Performance of the contract (art. 6.1.b). |
| Showing Google Maps in the directory. | Your consent (art. 6.1.a), which you can withdraw in the cookie settings. |
| Complying with legal obligations (for example, requests from authorities). | Legal obligation (art. 6.1.c). |
We do not use your data for advertising and we do not sell it. We do not make automated decisions that produce legal effects on you.
4. Automatic reading of photos
When you send a photo to read the mileage or the technical sheet, the image is processed with Microsoft Azure OpenAI Service, acting as a data processor. It is used only to extract the requested data, which you can review and correct before saving. Under Microsoft’s terms, data sent to this service is not used to train its models. Please avoid including people or unnecessary details in the photo.
5. Who we share data with
Only with the providers we need to run the service, who process data on our behalf under a data processing agreement:
- Web hosting and server provider, and email delivery service.
- Microsoft (Azure OpenAI Service), for the photo reading described above.
- Google (Google Maps Platform), only if you accept maps in the centres directory.
Reviews and photos you publish in the centres directory are visible to any visitor, together with the name you display. Apart from this, we will only disclose data to authorities when required by law.
6. International transfers
Some providers may process data outside the European Economic Area. When they do, they rely on GDPR safeguards: an adequacy decision (such as the EU-US Data Privacy Framework) or standard contractual clauses approved by the European Commission.
7. How long we keep data
- Your account and vehicle data, for as long as you keep your account. If you delete it (you can do so in the app, under Settings), we immediately erase your personal data: name, email, password, photo, number plate and VIN, photos, invoices and notes. Vehicle technical data, mileage readings and expense amounts are kept anonymously, with nothing that could link them to you, for statistical purposes only. Anything we must keep blocked by law is kept for the limitation period of possible liabilities.
- Photos sent to read data are not kept longer than needed to process them, unless you attach them to your vehicle or to an expense.
- Technical logs, for a maximum of 12 months.
- Support requests, as long as needed to handle them and then for the legal periods.
8. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw any consent you have given at any time, by writing to help@replai.net from your account email or telling us how to identify you. We will reply within one month.
You can correct much of your data yourself in the app or on the web. To delete your account and all its data, write to the same address.
If you believe we have not handled your data properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
9. Security
We apply appropriate technical and organisational measures: encrypted connections (HTTPS), passwords stored with secure hashing algorithms, restricted access and backups. No system is infallible; if we detect a breach affecting your data, we will act and inform you where the law requires.
10. Children
Move is not intended for children under 14. If you are under 14, please do not create an account.
11. Changes
We may update this policy to reflect changes in the service or the law. We will publish the new version here with its date and, if the change is significant, we will let you know.