Privacy Policy & Data Handling

Effective date: September 30, 2026

1. General Provisions

This Privacy Policy explains how UMOV (umov.net) collects, protects, and handles personal data across our web application and developer integrations, including the Model Context Protocol (MCP) and OAuth 2.1 authorization.

2. Data Collection and Usage

We collect and process only minimal data necessary for account operation and puzzle authoring:

Account profile: display name, email address, and optional avatar URL.
Mystery and puzzle drafts: story texts, dialogue options, logic graphs, and scene transitions created by authors.
OAuth and MCP credentials: client credentials, authorized scopes, tokens, and author user ID used strictly to attach created drafts to the author profile.

3. Data Handling via MCP (Model Context Protocol)

When using AI assistants (such as Claude) connected to the UMOV Detective MCP server:

Only structured mystery package graphs and metadata are transmitted to the server.
Full source literature texts, personal files, and unrelated chat messages are never sent to or stored on UMOV servers.
User data and author drafts are not used to train third-party foundation models.
We do not collect sensitive categories of data such as health, medical, financial, or biometric data.

4. Third-Party Sharing

We do not sell, rent, or transfer personal data to third parties, advertising networks, or data brokers. All API communication operates directly with our first-party infrastructure.

5. Retention and Data Deletion

Drafts and account information are retained while your account remains active. You can revoke external MCP/OAuth tokens at any time via the standard OAuth revoke endpoint or request account and content deletion in your profile settings.

6. Support & Contact

For questions regarding this policy or data protection requests, please contact us at: support@umov.net.