Privacy Policy

01Purpose and scope

This notice applies to motorhub.ai, the MotorHub AI platform and every conversation you have with us about either. It covers two different groups of people, and the difference matters throughout: our customers — dealerships and their staff — and the customers of those dealerships, whose data reaches us because a dealership put it there.

1.1Where we are the controller

For dealership staff, site visitors and anyone who contacts us, we decide what is collected and why. This notice describes that.

1.2Where we are the processor

For a dealership's own leads and buyers, the dealership decides. We hold and process that data on their instruction, and their privacy notice governs it, not this one.

02Data we collect

2.1You give it to us

Name, work email, dealership, phone and whatever you write in a form or a support thread.

2.2Your dealership connects it

Vehicles, listings, prices, photos, leads and the messages exchanged with them.

2.3The platform records it

Sign-ins, IP address, browser and device, pages and screens used, actions taken on a record, API calls and rate-limit events.

2.4The site records it

Basic analytics: pages viewed, referrer, approximate region. Google Analytics is loaded on every visit — there is no consent banner today, so if you would rather not be measured, block it at the browser. No cross-site tracking and no advertising profile.

03How and why we use it

3.1To run the platform

Publishing listings, delivering leads, generating media, and everything else you asked it to do.

3.2To support you

Answering questions, and reproducing a problem when you report one.

3.3To keep it secure

Detecting credential stuffing, scraping and access to accounts that are not yours. Section 7 covers this in full.

3.4To improve it

Understanding which parts get used. Aggregated and de-identified wherever the question does not need a name.

3.5To bill you

Plan, seats and credits consumed.

3.6Not to train shared models

Your data is not used to train models that serve anyone else.

04Sharing

We do not sell personal data and we do not share one dealership's data with another. It leaves us in four cases only.

4.1Sub-processors

Hosting, email delivery, error reporting, analytics and payments. Each is contractually bound to the same handling terms. The current list is available on request.

4.2Channels you publish to

Listing data goes where you tell it to go. That is the point of the product, and you choose the channels.

4.3Legal obligation

Where we are compelled. We will tell you unless we are legally barred from doing so.

4.4A change of ownership

If the company is acquired, this notice travels with the data.

05Retention

We keep account and platform data while you are in the programme, and delete it within 30 days of your leaving or asking. Two exceptions: records the law requires us to keep, and security logs, which are held for 12 months on their own schedule.

06Where it is stored

Data is hosted in the United States. If you are in a region with transfer restrictions, we rely on standard contractual clauses with the sub-processors involved.

07Security and abuse monitoring

How we protect the data, and the part most privacy notices leave out — what we do about people trying to get at it.

7.1Baseline

Encrypted in transit and at rest. Access to production data restricted to the people who need it, and logged when it happens.

7.2What we watch

Sign-ins, API calls, rate-limit trips and administrative actions, read for credential stuffing, brute force, bulk extraction and attempts to reach another account's data.

7.3What we do about it

Rate limit, throttle, or suspend. Where the pattern is clearly deliberate we suspend first and ask afterwards; where it looks like a misconfigured integration we get in touch first.

7.4Limits are a privacy control

The caps in the terms are not only a commercial device. They are what stops one compromised credential from draining a database before anyone notices.

7.5What these logs are not

They are not used to build a profile of anyone, they are not shared for marketing, and they are not read for any purpose other than security.

08Your rights

Access, correction, deletion, export and objection. Write to team@motorhub.ai and we answer within 30 days. If your data reached us through a dealership, we will point you at them — they decide, and we will help them action it.

09Alpha caveat

The platform is under active development. We advise against connecting a production-critical system, and against putting data in it that you could not stand to re-enter.

10Children

The platform is not for anyone under 18 and we do not knowingly collect their data.

11Changes and contact

Material changes are emailed to alpha participants before they take effect. Questions, requests and complaints all go to team@motorhub.ai.