1. Who We Are
MakingMoves.ai ("we", "us", "our") is an AI-powered career preparation platform operated by MakingMoves B.V., registered in the Netherlands. We provide assessment test preparation, interview coaching, and career development tools to job seekers worldwide.
2. Data We Collect
We collect the following categories of personal data:
Account Information
- •Name and email address
- •Password (hashed, never stored in plain text)
- •Profile photo (optional)
- •Language and country preferences
Usage Data
- •Test scores and performance data
- •Practice session history
- •Time spent on each exercise
- •Device type, browser, and IP address (anonymized after 30 days)
Payment Data
- •Billing name and address
- •Payment method type (card type, last 4 digits)
- •Transaction history
- •Note: Full card numbers are never stored, processed by Stripe
Communications
- •Support emails and chat messages
- •Survey responses (optional)
- •Newsletter preferences
3. How We Use Your Data
We use your personal data to:
- Provide and personalize the MakingMoves.ai platform and AI coaching features
- Track your progress and generate personalized performance reports
- Process payments and manage your subscription
- Send transactional emails (account confirmation, password reset, receipts)
- Send marketing emails (only with your explicit consent, opt-out at any time)
- Improve our AI models and platform features using anonymized aggregate data
- Comply with legal obligations (tax records, fraud prevention)
- Respond to support requests and resolve disputes
4. Legal Basis for Processing (GDPR)
For users in the European Economic Area (EEA), including the Netherlands, Germany, Spain, France, Portugal, and Italy, we process your data under the following legal bases as defined by the General Data Protection Regulation (GDPR):
Contract Performance (Art. 6(1)(b))
Processing necessary to provide the service you signed up for: account management, test delivery, progress tracking.
Legitimate Interests (Art. 6(1)(f))
Platform security, fraud prevention, product improvement using anonymized data, and direct marketing to existing customers.
Consent (Art. 6(1)(a))
Marketing emails, non-essential cookies, and any processing beyond what is strictly necessary. You can withdraw consent at any time.
Legal Obligation (Art. 6(1)(c))
Tax records, compliance with court orders, and regulatory requirements.
For users in Brazil, we comply with the Lei Geral de Proteção de Dados (LGPD). For users in the UK, we comply with the UK GDPR.
5. Data Sharing and Third Parties
We do not sell your personal data. We share data only with trusted service providers who process it on our behalf under strict data processing agreements:
| Service Provider | Purpose | Location |
|---|---|---|
| Stripe | Payment processing | USA (SCCs) |
| AWS / Cloudfront | Hosting and CDN | EU / USA (SCCs) |
| OpenAI | AI coaching features | USA (SCCs) |
| Umami Analytics | Privacy-first analytics | EU |
| Postmark | Transactional email | USA (SCCs) |
| Intercom | Customer support chat | USA (SCCs) |
SCCs = Standard Contractual Clauses (EU-approved transfer mechanism)
7. Your Rights
Under GDPR (EU/EEA), UK GDPR, and LGPD (Brazil), you have the following rights:
Right of Access
Request a copy of all personal data we hold about you.
Right to Rectification
Correct inaccurate or incomplete personal data.
Right to Erasure
Request deletion of your personal data ('right to be forgotten').
Right to Portability
Receive your data in a machine-readable format (JSON/CSV).
Right to Restriction
Limit how we process your data in certain circumstances.
Right to Object
Object to processing based on legitimate interests or for marketing.
Right to Withdraw Consent
Withdraw consent at any time without affecting prior processing.
Right to Lodge a Complaint
File a complaint with your national data protection authority.
To exercise any of these rights, email us at ingmar@makingmoves.ai. We will respond within 30 days.
Netherlands: You may also file a complaint with the Autoriteit Persoonsgegevens (AP) at autoriteitpersoonsgegevens.nl.
8. Data Retention
We retain your personal data for as long as necessary to provide our services and comply with legal obligations:
9. Security
We implement industry-standard security measures including TLS 1.3 encryption in transit, AES-256 encryption at rest, bcrypt password hashing, regular security audits, and access controls with principle of least privilege. In the event of a data breach affecting your rights, we will notify you and the relevant supervisory authority within 72 hours as required by GDPR Article 33.
10. International Data Transfers
Some of our service providers are located outside the EEA (primarily in the USA). For all such transfers, we use EU Standard Contractual Clauses (SCCs) as approved by the European Commission, ensuring an adequate level of data protection. A full list of our data processors and their transfer mechanisms is available on request.
11. Children's Privacy
MakingMoves.ai is not directed at children under 16 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at ingmar@makingmoves.ai and we will delete it promptly.
12. Contact Us
For any privacy-related questions, data subject requests, or complaints, please contact our Data Protection Officer:
Email: ingmar@makingmoves.ai
Response time: Within 30 days
Languages: English, Nederlands, Deutsch, Español, Português
This policy was last updated on April 1, 2026. We will notify you of material changes by email or via a prominent notice on the platform.