Privacy Policy

What Molta is

Molta (molta.dev and the Molta iOS app) is a collaboration tool where game and app developers brief, review, and receive digital assets from the contractors they work with. This policy describes what data we handle to provide that service.

Data we collect

• Account information — your email address, the display name you choose, and an optional profile picture, provided when you sign in. Authentication is handled by Auth0; we never see or store your password.
• Content you create — the assets and files you upload, asset briefs, conversation messages and image attachments, and requests you post. Your display name is attached to content you author so your collaborators know who did what.
• Device data for notifications — if you enable push notifications in the iOS app, we store your device's push token to deliver them via Apple's push service.
• Operational logs — our hosting providers keep standard request logs (such as IP address and timestamps) for security and debugging.

How we use it

Only to run the service: showing your work to the other members of your projects, sending notifications about messages and asset status changes, and keeping your to-do counts accurate. We do not sell your data, run third-party advertising, or use your content for anything other than providing Molta to you and your project members.

Who can see your content

Content is scoped to a project: only that project's owner and invited members can see its assets and conversations (contractors see only the asset categories they've been granted). Nothing you upload is public.

Where your data lives

We use these processors to operate Molta:

• Auth0 — sign-in and account authentication
• Supabase — application database (hosted PostgreSQL)
• Cloudflare R2 — file storage for uploaded assets and attachments
• Vercel — web hosting
• Apple Push Notification service — delivering iOS notifications

Data retention & deleting your account

Your data is kept while your account is active. You can permanently delete your account at any time — in the iOS app (profile icon → Delete account) or on the web (Profile → Delete account). Deletion removes your account, the portals you own including every asset and file in them, your project memberships, and your device tokens; messages and uploads you contributed to other people's portals are anonymized. Your Auth0 login record is deleted separately on request. Residual copies in backups and logs expire on our providers' standard schedules.

Your rights

You can access and update your profile at any time, export your own uploads (every file is downloadable from the portal), and delete your account as described above. For anything else — including access or deletion requests you can't complete in-product — contact us and we'll help.

Children

Molta is a professional tool and is not directed at children under 13.

Changes

If this policy changes materially, we'll update this page and the date at the top.

Contact

Questions or requests: privacy@molta.dev