Cookie Notice
This notice lists everything the MVV App keeps in your browser or on your device, and why. It covers:
- the Workspace app: the web app that a building firm's people sign in to, and the same app added to the home screen of a phone or tablet;
- the public site-induction page that site workers open from a link (section 6);
- our sign-up page (section 8), from the day sign-up opens;
- our help pages and our status page (section 9);
- our agents' site (
agents.mvvtechnologies.com), where our sales agents sign in (section 10); - our main website (
mvvtechnologies.com, which forwards tomvvtech.solutions) (section 11).
Whose notice this is
MVV Technologies Limited ("MVV", "we") provides the MVV App and publishes this notice, with our other legal documents, at help.mvvtechnologies.com/legal.
A Workspace is a building firm's own copy of the MVV App. That firm decides who uses its Workspace and what goes into it, and we run the software for the firm. In data protection terms the firm is the controller of its people's information in its Workspace and we are its processor, as our Data Processing Agreement says. The firm may use this notice as its own. The sign-in screen of each Workspace links to that firm's own privacy page. That page starts as a draft the firm adapts. As built, it says that the app sets no cookies of its own and describes what the app keeps in the browser; this notice is the full list of what the app keeps.
For our sign-up page, our agents' site, our main website, our help pages and our status page we are the controller ourselves, as our Privacy Policy says.
In short
- The app sets no cookies of its own.
- It has no analytics, advertising or tracking of any kind. If that ever changes, we will update this notice first, and ask for your consent where the law requires it.
- It does use your browser's storage: local storage, session storage, a small database (IndexedDB) and an offline cache run by a "service worker". It uses them to keep you signed in, keep unsaved work safe, open quickly, work on a poor site signal, and remember how you like the screens.
- We do not ask for your consent for this storage, because every item is either needed to give you the service you asked for, or remembers a setting you chose. It still has to be explained, which this notice does.
- Signing out clears almost all of it from the device. The exceptions are listed below, and ending your sign-in session needs a connection to the server.
What is stored, and why
The names are the ones the app uses. You can see them in your browser's developer tools. A star (*) in a name stands for an identifier, such as a user, a project, a screen or a date.
1. Keeping you signed in and secure
| Name | Where | What it holds | How long |
|---|---|---|---|
sb-*-auth-token | Local storage | Your sign-in session: the tokens that prove you are signed in, with your account's basic details such as your sign-in email. | Until you sign out with a connection to the server, or the session ends (see "What signing out clears, and what it does not"). |
house.first-password.* | Session storage | A marker that you still have to set your first password. | Until you have set it, or the tab closes. |
mvv.roleCache:* | Local storage | Your role and display name, so that the right menus show while the app loads. | Until sign-out. |
mvv.notransform | Local storage | A timer that stops the app asking again for smaller versions of pictures after that has failed once. | Up to 24 hours, or until sign-out. |
mvv.lastCrashReload, mvv.chunkReload:* | Session storage | Markers that stop a page that failed to load from reloading in a loop. | Until the tab closes. |
house.workspace-watch | Session storage | Only while your Workspace's server is not answering: how many checks in a row it did not answer, and when the first and last were, so that a reload does not start the count again. Nothing else. | Until the server answers again, or the tab closes. |
house.workspace-closed | Local storage | Only once your Workspace has closed: everything else the app kept on this device is cleared and you are signed out, then this one note is written (when it closed and why), so that this device shows "This workspace has closed" straight away. If the only sign was that the server stopped answering, changes not yet sent (mvv.pendingSync.v1) are kept for up to a day, in case it answers again. | Until this site's data is cleared in your browser. |
Links to your stored files are kept in the app's memory only, never on the device. An older copy (mvv.signcache) that an earlier version of the app left in local storage is removed when the app opens.
2. Keeping your work safe
| Name | Where | What it holds | How long |
|---|---|---|---|
mvv.pendingSync.v1 | Local storage | Changes you have made that have not yet reached the server, for example on a poor signal, so that they are not lost. | Until they are saved. A change that has waited more than 24 hours is dropped. |
mvv.undo.* | Local storage | Undo and redo history for valuations, schedules, bookkeeping and what-if plans. | Used for one hour, then removed the next time that screen opens. Also removed at sign-out. |
mvv.estimatorpro.journey.v1, mvv.cascadeDraft.*, mvv.rejectDraft.*, mvv.pm.callNote.* | Local storage | Work in progress: an estimate being built, a what-if schedule, a reason being typed, and a note from a call left by an earlier version of the app, which this version moves into mvv.pm.callNotes (below). | Until it is finished, or sign-out. |
mvv.expensedraft.v1:* | Local storage | An expense you have started to enter and not yet saved, so that a refused save, an update or a closed app does not lose it: the job, the supplier (or a new supplier's name), the person and days for labour, the amount, VAT rate, date, description, category, a one-off customer's name, CIS details, the bill reference and due date, and the name and address of a receipt already uploaded. At most 10 entries. Only you are offered them back, and nothing is saved until you press Save. | Until the expense is saved or discarded. An entry older than 14 days is no longer offered. Removed when you sign out, and the app tells you first. Not removed when another person signs out on the same device. See "What signing out clears, and what it does not". |
mvv.estimatorpro.offerdraft.v1:* | Local storage | The unsaved changes to an offer you are editing in the Estimator: the whole working copy, with the client's name and address, the schedule of works and its prices, the programme and the covering letter, so that leaving the page does not lose them. Nothing reaches the server until you save. | Until the offer is saved or the changes are discarded, and at most 30 days. Also removed at sign-out. |
mvv.pm.callNotes | Local storage | The notes the Project Manager makes during your voice calls with him, kept here first so that none is lost, and removed as soon as the server holds them: each note's job, its words (up to 8,000 characters), when it was said and whose note it is. At most 200. | Until the server holds the note. When you sign out, the app first tries to send them. Any it could not send, you choose to delete, or to keep on this device for your next sign-in here, for at most 14 days. Kept notes are shown to nobody else. |
mvv.pm.write.v2.*, mvv.pm.inDoubt.v1.* | Local storage | A record made just before a change you make to a job's Project Manager board is sent: which job (its name and identifier), which open page sent it, and when. If the page closes before the server answers, the app uses it to find out whether the change was saved, to tell you, and never to send it twice. mvv.pm.inDoubt.v1.* is the same kind of record left by an earlier version of the app; it is checked once and removed. | Until the server has answered about the change. Also removed at sign-out. |
mvv.pm.call.carry | Local storage | During a voice call with the Project Manager, and after one that was cut off: where the call had got to on his list (identifiers of the item in hand, of those already covered, and of the job and change it was about) and the question he had just asked, in the app's own words. Never anything you said. If the call is cut off, the next call carries on from there. | Removed when a call ends normally, and at sign-out. After a call is cut off, it is used for 30 minutes. |
mvv.fixGuide.v1, mvv.fixGuide.veraHeld.v1, mvv.veraFixDrive.session.v1 | Local storage | A bookkeeping fix you are part-way through: its steps, the job and the one cost it is about (for example the payee, amount and date), and a note for the assistant that the fix was made. | Until it is finished, or sign-out. |
mvv.aiJobs | Local storage | The progress and results of AI tasks you started, so that they survive a page reload. | Until sign-out. |
bk-check-* | Local storage | The last bookkeeping check for each period, so that it is not run again: up to 5,000 cost lines (date, payee, site, amount, category, receipt name) and the findings. | Not cleared at sign-out. See "What signing out clears, and what it does not". |
The items above whose names begin mvv.pm. exist only where the Project Manager is switched on, and mvv.estimatorpro.offerdraft.v1:* only where the Estimator is. While the app is open it also holds a browser lock named mvv.pm.page.* for each open page, so that another open page on this device can tell when it has closed. A lock is not storage: it holds nothing and ends when the page closes.
3. Opening quickly and working offline
| Name | Where | What it holds | How long |
|---|---|---|---|
house-cache | IndexedDB | A copy of the records you are allowed to see, so that the app opens instantly. It is refreshed from the server every time the app opens and is never treated as the master copy. It is labelled with your user account, so that another person cannot load it. | Used for at most 24 hours. An older copy is never shown, and is deleted the next time the app opens. Also cleared at sign-out, and when the app finds that nobody is signed in any more (for example after a session has run out). |
App files (workbox-precache-v2-*) | Cache Storage (service worker) | The app's own code, styles, icons and pages, so that it opens on a poor signal. No personal data. | Until the next update of the app. |
house-ip-chunks | Cache Storage | Parts of the app's code that are not stored in advance (the Estimator and Master Brain and, where the Design Centre is switched on, its engine, 3D viewer and walkthrough), kept after you first open them. No personal data. | At most 24 files. |
house-images | Cache Storage | Pictures and documents you have viewed from your firm's file store, so that scrolling back does not download them again. | At most 24 hours each, and at most 1,200 of them. Cleared at sign-out, and when the app finds that nobody is signed in any more. |
workbox-expiration | IndexedDB (service worker) | The list the service worker keeps of what is in its caches: the address of each picture and document you have viewed, with the time it was stored. An address can show the file's original name. | Cleared at sign-out, and when the app finds that nobody is signed in any more. Until then the app removes old entries as it stores new pictures (after 24 hours, or beyond the latest 1,200). |
mvv.house.features, house.theme, house.logo | Local storage | Which modules your Workspace has switched on, as the Workspace last told this device, labelled with your account's ID (not your name or email address) so that it is only used to open the app for you; and its colours and logo. | Modules: until sign-out. Colours and logo: kept, because they are the same for everyone in the firm. |
mvv.house.aiAdded.* | Local storage | When more AI has been added to your company's month and you put the note away with "Got it": the time of that addition, nothing else, so that the same note does not show again. | Until sign-out. |
mvv.house.voiceNotice.* | Local storage | That you have read the note "Before your first voice call" and chosen "I understand, start the call": which version of the note you agreed to and when, nothing else, so that the note is not shown again before every call on this device. It holds nothing from your calls. Your Profile page shows when you agreed. It is strictly necessary for the voice calls you ask for: a call starts only after you have agreed to the note, and this is how the app remembers that you have. | Until sign-out. If what the note says changes, you are asked again. |
mvv.chatRead.*, mvv.opChatRead.*, mvv.lawfeed.* | Local storage | When you last read a chat or a case feed, for the "unread" markers. | Until sign-out. |
dc-price-seen | Local storage | Only where the Design Centre is switched on: the price of each of the last 12 designs you looked at (the total, the works, the second-fix supply, the preliminaries and each line's amount, with when you saw it), so that the price page can show what changed since. | Until newer designs replace it. Not cleared at sign-out. See "What signing out clears, and what it does not". |
mvv.supplierLogoBackfill.v1, mvv.call.lock | Local storage | Markers that stop a one-off task running twice, and stop two voice calls running at once. | Until sign-out. |
4. Your screen preferences
These are kept in local storage. All are removed at sign-out except atlas.fold.*, atlas.activityView, house.support.done-seen.* and the Design Centre's items whose names begin dc-, which are kept:
mvv.sidebarCollapsed, mvv.projView, mvv.tabOrder, mvv.supplierTabOrder, mvv.sidePreviewW, mvv.sidePreviewLayout, mvv.sftracker.cols, mvv.gantt.namew, mvv.wbFit, mvv.hideHeroMoney, mvv.heroDetails, mvv.pm.desk, mvv.pm.knock.*, mvv.pm.round.*, mvv.vera.knock.pos, mvv.call.sphere.pos, mvv.cascadeGuideSeen, mvv.planNudge.*, mvv.mktNudge.*, mvv.handoverNudge.*, mvv.delayNudge.*, mvv.closerGrade, mvv.lastPath, mvv.lastProject, mvv.pm.view.v1.*, mvv.dc.render.quality, and, kept at sign-out, atlas.fold.*, atlas.activityView, house.support.done-seen.* and, where the Design Centre is switched on, dc-levels-fold, dc-tools-open, dc-add-open, dc-price-chip:* and dc-last-pages.
They remember things like:
- whether the side menu is folded, list or grid view, column widths and tab order;
- where you moved a floating button;
- which tips and reminders you have dismissed, already seen or put off until later;
- how many times today you have used one AI check that has a daily limit;
- the page and the project you last had open, so that you can pick up where you left off;
- which jobs the Project Manager's office lists (ongoing, not started, completed, cancelled or all), where the Project Manager is switched on;
- the picture quality you chose for the Design Centre's 3D view (Auto, High or Fast), where the Design Centre is switched on;
- in the Design Centre, which panels and tool groups you left open or folded, whether you hid the price chip, and the last page you used in each group (kept at sign-out);
- which sections of a page you have folded, and how you like the activity list sorted (kept at sign-out);
- which "Done, we've been in touch" notes about a call back you have put away (kept at sign-out: the requests' own references only, at most 40).
5. For this visit only
These are kept in session storage and are gone when you close the tab:
mvv.tour, mvv.house.movein.later.*, mvv.veraHandoffLater, mvv.waopReturn, mvv.schedSilenced, mvv.confirmSchedule, mvv.openSocialConnect, mvv.openHandoverPack, mvv.openCascade, mvv.offer.created.*, mvv.boardWeek, house.support.answers.*.
They hold:
- where you are in a guided tour;
- a "remind me later" on the set-up step, and reminders from an assistant that you have put off;
- small markers that carry you from one screen to the next, for example the screen to go back to or the panel to open when you arrive;
- the project just created from a quote, with your notes, so that a reload does not lose it;
- the week the weekly labour board was showing, for the rest of that day, so that a visit to another page comes back to the same week;
- which parts of the app the help assistant answered you on in the last hour, and when, so that a call back is still offered after a reload. It never holds what was asked or answered.
6. The public site-induction page
Workers who sign a site induction through a link, without signing in, use a public page. On their own phone it keeps, in local storage:
| Name | What it holds | How long |
|---|---|---|
mvv.induct.me | The details they typed, so that they need not type them again: name, company, trade, phone number, competence card number and worker type. | Until someone taps "This isn't me", or starts signing for another person on that phone. |
mvv.induct.done | A receipt of each induction they signed on this phone: which one, when, and the name. | Kept until the browser's storage is cleared. |
The induction page does not install the offline service worker.
7. Demonstration mode only
Items named mvv.demo.* exist only in MVV's own sales demonstration. They are not part of a customer's Workspace.
8. The sign-up page
Our own site, signup.mvvtechnologies.com, carries the page where a business we invite accepts our terms, pays and sets up its Direct Debit (its invitation page), our "I'd like to join" page (join.html), and our public sign-up form, if we open it. The table below applies from the day sign-up opens, as our Privacy Policy defines it. What this section says of the "I'd like to join" page applies from the day that page opens.
| Stored as | What it holds | How long | Why |
|---|---|---|---|
mvv-invite (session storage) | The link from your invitation email, so that Stripe can send you back to the right step after you pay or set up your Direct Debit. Nothing else. | Until you have finished, the link stops working, or the tab is closed. | Strictly necessary. It is sent nowhere but our sign-up service. |
mvv-signup (session storage) | What you typed on the form: the plan and any packs of extra seats, your company's registered name, number and registered office, its trading name, your name, role and work email, and the contact person and phone number if you gave them. Also the reference of your sign-up, the address your email code was sent to and a seal from our sign-up service that shows your company details have not been changed since you sent them. | Until you go to pay, the sign-up is stopped or started again, or the tab is closed. It is cleared just before the page sends you to Stripe, and again by the page Stripe sends you back to. | Strictly necessary: a reload carries on where you were. It is sent nowhere but our sign-up service. |
The "I'd like to join" page (join.html), from the day it opens, keeps nothing in your browser: no cookies of its own, no local or session storage. If you arrive through a sales agent's link, the agent's code is in the page's address and is sent with your request; it is not stored on your device.
These pages set no cookies of their own and carry no analytics, advertising or tracking. They use these other services:
- Cloudflare Turnstile, loaded from
challenges.cloudflare.comon the "I'd like to join" page and on the sign-up form, checks that the visitor is a person. It runs in a frame of its own and looks at signals from your browser and at your IP address. Whatever Turnstile itself keeps in your browser is Cloudflare's, and we do not use it. - What you send goes to our sign-up service at
gw.mvvtechnologies.com, which is reached over Cloudflare's network. The page sends no cookies with it. - Paying happens on Stripe's own page (
checkout.stripe.com), which your browser moves to when you choose to pay. What Stripe keeps in your browser there is covered by Stripe's own cookie notice, not by this one. - The page itself is served by Netlify.
9. Our help pages and our status page
- Our help pages (
help.mvvtechnologies.com), where this notice is published, are plain pages served by Netlify. They run no script, set no cookies of their own and store nothing in your browser. - Our status page (
status.mvvtechnologies.com), served by Cloudflare, runs one small script of ours that fetches the current status every minute. It sets no cookies of its own and stores nothing in your browser.
Neither carries analytics, advertising or tracking.
10. Our agents' site
Our agents' site, agents.mvvtechnologies.com, is where our sales agents sign in to see their contacts, clients and commission. It is not for customers.
| Stored as | What it holds | How long | Why |
|---|---|---|---|
__Host-mvv_agent (a cookie set by gw.mvvtechnologies.com, for our agents' site agents.mvvtechnologies.com) | A random sign-in reference. It is sent only over a secure connection, only to our gateway's address for the agents' site, and the page's own script cannot read it | At most 12 hours; it stops working after 30 minutes without use, and when the agent signs out | Keeps a sales agent signed in. Strictly necessary for the site to work, so we do not ask for consent |
The site sets no other cookie and keeps nothing else in your browser: no local or session storage and no database. When an agent opens the one-time link we send to set up their sign-in, the page takes the link out of the browser's address bar at once. The code an agent scans with their authenticator app is drawn on the page itself. The site carries no analytics, advertising or tracking. Netlify serves the page; what it sends goes to our agents' service at gw.mvvtechnologies.com, which is reached over Cloudflare's network, and our gateway passes the cookie on to that service alone.
11. Our main website
Our main website, mvvtechnologies.com, which forwards to mvvtech.solutions, tells you about MVV. It runs on an affiliated business's systems (Netlify serves it from that business's account), and the banner choice and the cookies below are set for mvvtech.solutions. It loads Google Analytics (Google's GA4) only if you press "Accept" on its cookie banner. Until you do, Google's consent settings stay at "denied" and no analytics cookie is set; if you do not accept, none is set at all.
| Stored as | What it holds | How long | Why |
|---|---|---|---|
| Your choice on the cookie banner (in your browser) | Whether you accepted or refused analytics cookies | Until you clear it in your browser | Strictly necessary: so that the site respects your choice and does not ask again on every page |
_ga and _ga_ followed by a code (cookies set by Google Analytics, only after you accept) | A random identifier for your browser, and the state of your visit | Up to 2 years, unless you clear them | Analytics, with your consent: counting visits and seeing how the site is used. Google also receives your IP address and details of your visit |
mvv_attribution (in your browser's storage, only after you accept) | The campaign codes in the link that brought you to the site (such as utm_source or gclid), the first page you opened and the site you came from | Until you clear the site's storage in your browser. If you later refuse, the site stops reading it | Analytics, with your consent: knowing which campaigns bring enquiries. If you send the contact form, these details go with your message; if you have not accepted, the site keeps them only while the page is open, and they still go with a message you send |
The site carries no other analytics, advertising or tracking. You can change your answer at any time with "Cookie settings" at the bottom of every page, or by clearing the site's cookies and storage in your browser; the site then asks you again.
What signing out clears, and what it does not
Signing out removes:
- every local-storage item whose name begins
mvv., including changes waiting to be saved, work in progress, undo history and AI task results, except the two kinds of item listed below as not removed; - the cached copy of your records (
house-cache) and the cached pictures and documents (house-images); - the service worker's list of the pictures and documents you viewed (
workbox-expiration); - your sign-in session, but this step needs a connection to the server. If you sign out with no signal, the app clears everything above and shows the sign-in screen, yet the session stays on the device, and whoever opens the app there next is signed in as you. Once the device is back online, open the app again and, if it opens signed in, sign out once more.
It does not remove:
- the Workspace's colours and logo (
house.theme,house.logo), which are not personal data; - two layout preferences (
atlas.fold.*,atlas.activityView), and the list of call-back "Done" notes you have put away (house.support.done-seen.*: the requests' own references, nothing else); - notes from your calls with the Project Manager that have not reached the server (
mvv.pm.callNotes), if you choose when you sign out to keep them for your next sign-in here. They stay for at most 14 days and are shown to nobody else. On a shared device, choose to delete them; - the unsaved expenses of another person who used this device before you without signing out (
mvv.expensedraft.v1:*). Your own are removed when you sign out, and the app tells you first; - the last bookkeeping check (
bk-check-*), which holds cost lines and amounts. On a shared computer, anyone who can open that browser's developer tools could read it; - where the Design Centre is switched on, its items whose names begin
dc-: panel and page settings, and the last prices you saw of up to 12 designs (dc-price-seen); - session-storage items, which end when the tab is closed;
- the app's own files (the offline cache and
house-ip-chunks), which hold no personal data.
The app also clears the cached copy of your records, the cached pictures and the list of those viewed by itself when it finds that nobody is signed in any more and no sign-in session is left on the device, for example after a session has run out.
If the app is slow to start, the loading screen offers "Sign out on this device". That removes the sign-in session straight from the device, without needing a connection, together with the cached records and pictures and the list of those viewed. It keeps the items whose names begin mvv., so that changes waiting to be saved are not lost.
On a shared phone, tablet or computer, always sign out when you finish, with a signal, and close the tab.
Connections your browser makes to other services
- Your Workspace's own server, for everything you do in the app.
- ElevenLabs, only where live voice is connected for your Workspace and you start a live voice conversation with an assistant. Your browser then connects to ElevenLabs directly, using a one-off link, and sends your voice.
- The app shows pictures only from your Workspace itself and its own server. It does not fetch supplier logos or company details from other companies.
- The app loads no fonts, scripts or trackers from other companies.
Cookies from the companies that carry the app. The app's own code sets no cookies and reads none, signing in does not use a cookie, and the settings we publish with the app ask for none. The app's files reach your browser through our hosting provider, and your Workspace's server is reached over its provider's network. Either provider may add a technical cookie of its own to what it sends, for example to guard against automated traffic. We do not read or use any such cookie. If we find that one is set, we will name it in this notice. The same applies to our sign-up page, our help pages and our status page.
How to control it
You can clear this storage at any time in your browser's settings, or by signing out. If you block storage altogether, you will not be able to stay signed in, and unsaved changes will not survive a lost signal.
If you have a question about this notice, email privacy@mvvtechnologies.com.
Changes
We will update this notice whenever the app starts or stops storing something, and date each version. Earlier versions stay available on our help pages.
Version: 13 October 2026.