Updated 30 October 2026

Privacy policy

Moopa runs private hubs for organisations, and is built and run by Blute. This page covers what Moopa collects when you sign in to a hub, and what it does with it.

Who decides

Each hub belongs to an organisation, usually your employer. That organisation decides who may use its hub and what is kept in it. Blute runs the hub on its behalf. Questions about the work you do in a hub are best asked of the organisation first.

When you sign in

You sign in with your email address, and a link is sent there. Or, if the hub offers it, you choose Continue with Google. Then Google tells Moopa:

• your email address, and that Google has verified it;
• your name and profile picture;
• your Google Workspace domain, if you have one.

Moopa asks Google for nothing else. It never sees your Google password, and it has no access to your Gmail, Drive, contacts or calendar.

Moopa uses your email address to find the profile your organisation made for you; if there is none, you aren't signed in. If your profile has no name yet, it takes the name from Google. Moopa doesn't keep your Google picture.

Sign-in records

For each sign-in Moopa records when it happened, how (email link or Google), the internet address and browser it came from, and roughly where that was (city, region and country, from Cloudflare). You can see these under Sign-in activity in your hub, and sign other devices out from there. Records older than 90 days are deleted.

Cookies

Moopa uses cookies only to keep you signed in: one for your session and, if you choose to stay signed in, one that remembers the device. While you sign in with Google, the sign-in service sets a cookie for ten minutes to finish the sign-in safely. There are no advertising or tracking cookies.

Who else sees it

Moopa doesn't sell or share your information, and doesn't use it for advertising. It is stored and processed by the services Moopa runs on, which may be outside Australia: DigitalOcean (servers), Cloudflare (network, files and email), Neon (databases) and Better Stack (error logs).

Moopa's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Seeing, changing or removing it

You can change your name and picture under Edit profile in your hub. To see what is held about you, correct it or have it removed, ask your organisation, or write to hello@blute.com.au. You can also remove Moopa's access to your Google account at any time at myaccount.google.com/connections.

Contact

Blute, hello@blute.com.au. If this policy changes, the date at the top changes with it.