1. Introduction

Welcome to Motova ("we," "our," or "us"). We are committed to protecting your privacy and ensuring you have a positive experience when using our vehicle inventory management platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

By using Motova, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our service.

2. Information We Collect

2.1 Information You Provide

• Account Information: When you create an account, we collect your email address, password (encrypted), and full name.
• Vehicle Data: Information about vehicles you add to your inventory, including registration numbers, make, model, year, mileage, purchase prices, sale prices, and related details.
• Expense Records: Financial information related to vehicle expenses, repairs, and other costs you track.
• Photos and Documents: Vehicle photos and receipt images you upload to our platform.
• Payment Information: When you subscribe to a paid plan, payment information is processed securely through Stripe. We do not store your full payment card details.
• Newsletter Preferences: If you opt-in to our newsletter, we collect your email address for marketing communications.

2.2 Automatically Collected Information

• Usage Data: Information about how you interact with our service, including pages visited, features used, and time spent on the platform.
• Device Information: Browser type, device type, operating system, and IP address.
• Cookies and Tracking: We use cookies and similar tracking technologies to enhance your experience and analyze service usage.

2.3 Third-Party Data

• MOT History Data: When you check a vehicle's MOT history, we retrieve data from the UK DVLA MOT History API and may cache this information in our database.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, maintain, and improve our service
• To process your account registration and manage your subscription
• To enable vehicle inventory management and profit tracking features
• To fetch and display MOT history information for UK vehicles
• To send you service-related communications, including account updates and security notifications
• To send marketing emails (only if you have opted in)
• To analyze usage patterns and improve our platform
• To detect, prevent, and address technical issues and security threats
• To comply with legal obligations

4. Data Storage and Security

Your data is stored securely using Supabase, which provides enterprise-grade security features including:

• Encrypted data transmission (SSL/TLS)
• Encrypted data at rest
• Row-level security policies to ensure users can only access their own data
• Regular security audits and compliance with industry standards

While we implement reasonable security measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but are committed to protecting your data to the best of our ability.

5. Third-Party Services

We use the following third-party services that may collect or process your data:

5.1 Supabase

We use Supabase for database storage, authentication, and file storage. Supabase's privacy policy can be found at https://supabase.com/privacy

5.2 Stripe

Payment processing is handled by Stripe. When you make a payment, your payment information is processed by Stripe in accordance with their privacy policy. We do not store your full payment card details. Stripe's privacy policy can be found at https://stripe.com/privacy

5.3 Mailchimp

If you opt-in to our newsletter, your email address is stored in Mailchimp for marketing communications. You can unsubscribe at any time. Mailchimp's privacy policy can be found at https://mailchimp.com/legal/privacy/

5.4 Vercel Analytics

We use Vercel Analytics to understand how our service is used. This service collects anonymized usage data. Vercel's privacy policy can be found at https://vercel.com/legal/privacy-policy

5.5 UK DVLA MOT History API

When you check a vehicle's MOT history, we query the UK Government's DVLA MOT History API. This is a public API that does not require authentication. We may cache this data in our database to improve performance.

6. Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

• Service Providers: With third-party service providers (Supabase, Stripe, Mailchimp, Vercel) who assist us in operating our service, subject to confidentiality agreements
• Legal Requirements: When required by law, court order, or government regulation
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with notice to users
• Protection of Rights: To protect our rights, property, or safety, or that of our users

7. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request access to your personal data
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data (subject to legal retention requirements)
• Data Portability: Request a copy of your data in a portable format
• Opt-Out: Unsubscribe from marketing emails at any time
• Account Deletion: Delete your account and associated data through your account settings

To exercise these rights, please contact us at the email address provided in the "Contact Us" section below.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our service and store certain information. Cookies are files with a small amount of data that may include an anonymous unique identifier.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our service.

9. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with our service. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal, regulatory, or accounting purposes.

10. Children's Privacy

Our service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us, and we will take steps to delete such information.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. By using our service, you consent to the transfer of your information to these countries.

12. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

13. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

14. GDPR Compliance (EU Users)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• Right to be informed about data collection
• Right of access to your data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Rights related to automated decision-making

Our legal basis for processing your data includes: (1) your consent, (2) performance of a contract, (3) compliance with legal obligations, and (4) our legitimate interests in providing and improving our service.