Legal
Motuva Enterprise privacy notice
Last updated: 2 November 2026
Version 1.0
Summary in plain English
This notice explains what personal data we hold about the people who use Motuva Enterprise, and what we do with it. If anything is unclear, write to hello@motuva.com.
- The pictures your company sends us belong to your company. For any personal data in them, your company is in charge and we act on its instructions, under our Data Processing Agreement. This notice doesn't cover them, except for training copies (section 6).
- This notice covers you, as someone on a company's team: your name, work email, sign-in records and what you do in the hub, plus billing, support and company checks.
- We don't sell personal data, and we don't send you marketing emails. The emails we send are about your account.
- We don't use analytics cookies in the hub. The chat sets its own cookies only after you agree.
1. Who we are
Motuva is a service provided by MotorCut Ltd ("Motuva", "we", "us"), a company registered in England and Wales, company number 12362580, with its registered office at Ava Office, Fir Tree Close, Stretton, Warrington, Cheshire, WA4 4NA, United Kingdom. We are registered with the Information Commissioner's Office under number ZC271428.
This notice covers Motuva Enterprise: the hub at enterprise.motuva.com, its API, and the emails it sends. For the pages of motuva.com, our main Privacy Notice and Cookie Policy apply.
For privacy questions and requests: hello@motuva.com.
2. Two roles: your company's processor, and a controller
- For the photos, logos, references and metadata your company sends, and the pictures we make, your company is the controller and we are its processor. If you want to ask about personal data in those pictures, please ask the company that sent them. If you ask us, we pass your request to them.
- For everything in this notice, we decide how the data is used, so we are the controller.
3. What we collect
About you, as a member of a company's team
- Your name, work email address, your company, and your role.
- Your password, which we store only in scrambled form (we never see it).
- Your sign-in codes: the 6-digit code we email you each time you sign in, which we store only in scrambled form and which stops working once used or after 10 minutes.
- Your sessions: the device, the browser, the country worked out from your internet address, and when you were last active.
- Sign-in records: internet addresses, times, and successful and failed attempts.
- Your activity: what you do in the hub and through your company's keys, recorded in your company's activity log.
- Which version of our terms you accepted, and when.
About your company
- Its name, website, country, type and expected volume, as given at sign-up.
- Its verification: company number, VAT number, and the result of our check with Companies House or the EU's VAT number check.
- Billing: the billing contact, address and VAT number, and our record of purchases and credits. Payments are handled by Stripe; we never see full card numbers.
When you contact us
- What you write in the chat or in an email, and the name and email address you give.
- If you book a call: your name, email address and the time you choose.
How the hub is used
- Which steps of sign-up, testing and buying your company and team have reached, and when.
- Error reports from our systems, which may include your email address.
When you sign up
- Cloudflare's bot check (Turnstile) processes technical signals from your browser: your internet address, your browser's TLS fingerprint and User-Agent, our site key and the address of the page. Cloudflare may also use them to improve its bot detection. Cloudflare's Turnstile Privacy Addendum explains how it handles them.
- We check your email address's domain against public lists of personal and throwaway email services, and check it can receive mail.
4. Why we use it, and our legal basis
| What we do | Legal basis (UK GDPR and EU GDPR) |
|---|---|
| Create and run your company's account, sign you in, and provide the service | Contract with your company, and our legitimate interest in providing the service to it |
| Take payment, issue invoices and keep accounts | Contract, and legal obligation (tax law) |
| Check that a company is real before it buys | Legitimate interests: selling only to businesses and preventing fraud |
| Keep the service secure: bot checks, email checks, speed limits, sign-in records and the activity log | Legitimate interests: security and preventing abuse |
| Answer support requests and calls | Legitimate interests: helping our customers |
| Send emails about your account: codes, invitations, receipts, low balance, incidents and notices of changes | Contract, and legitimate interests |
| Understand how companies move through sign-up, testing and buying, to improve the hub | Legitimate interests: improving our product |
| Find and fix errors | Legitimate interests: keeping the service working |
| Keep training copies, if your company switches them on (section 6) | Legitimate interests: improving our picture engine, with your company's opt-in |
| Meet legal requests | Legal obligation |
We don't make decisions about you that have legal or similarly significant effects by automated means alone. A sign-up whose website and email address don't match is checked by a person.
5. Emails
We send emails about your account only. We don't add Motuva Enterprise contacts to our marketing emails.
6. Training copies
If an owner of your company switches on "Help improve Motuva with our pictures", we keep a copy of each photo the company then sends, and of its finished picture, in a separate archive, to improve Motuva's own picture engine. For these copies we are the controller.
- We remove camera and location data before storing them.
- We use them only to improve our picture engine. We never sell or license them, publish them or use them in marketing.
- They may show people or number plates. We don't use them to identify anyone.
- Switching it off, or closing the account, deletes the company's archive within 30 days.
- The company that sent the pictures told us it was entitled to let us have them. If you appear in one and want to object or ask for it to be deleted, write to us. Because the archive is filed by company and day, the quickest route is often for the company to switch training off, which deletes its whole archive.
7. Who we share data with
We share personal data only with the companies that help us run Motuva Enterprise, and only so they can do that job. They are named, with what each one sees and where, on Who handles your data. They are our hosting provider, the company whose servers make the pictures, our network security provider, our error-reporting tool, our payment processor, our email sender, our product analytics provider, our chat tool and our email and booking provider.
We may also share data when the law requires it, or to protect our rights in a dispute (for example, the evidence we send Stripe when a payment is disputed).
We do not sell personal data to anyone.
8. International transfers
Our servers and storage are in London. Pictures are processed in Romania. Some of the companies we use are based in, or process data in, the United States and other countries outside the UK and the European Economic Area.
Where data leaves the UK or the EEA, we rely on UK and EU adequacy decisions (including the UK–US data bridge for certified companies), or on the European Commission's standard contractual clauses with the UK's addendum, or the UK's International Data Transfer Agreement, as each company's data agreement with us provides.
9. How long we keep it
| What | How long |
|---|---|
| Your account details | While you are on your company's team. When you leave, or the company closes its account, we remove your name and email address from our working records |
| Your company's activity log and our record of staff actions, which keep your name, email address and internet address as they were at the time | 6 years |
| Which version of our terms you accepted | 6 years |
| Billing records and invoices | 6 years (UK tax law) |
| Our application logs | 30 days |
| Database backups | 7 days |
| Training copies | Until the company switches training off or closes its account, then deleted within 30 days |
| Error reports held by Sentry, and records of the emails we send held by Resend | 30 days |
The full schedule, including your company's pictures, is in our retention statement.
10. Your rights
Under UK and EU data protection law you have the right to:
- see the personal data we hold about you;
- correct anything inaccurate;
- ask us to delete it, or to limit how we use it. We delete what we can; records we must keep by law, and the activity log that shows who did what on an account, are kept for the periods in section 9;
- receive data you gave us in a portable format;
- object to what we do on the basis of legitimate interests;
- complain to the UK Information Commissioner's Office (ico.org.uk) or your national data protection authority.
You can update your name, email address and password under Your profile in the hub. For anything else, email hello@motuva.com. We reply within one month.
11. Security
Our security overview explains how we protect data. If a personal data breach is likely to put you at risk, we will tell you.
12. Cookies and browser storage in the hub
| Name | What it does | How long | Can you refuse it? |
|---|---|---|---|
| motuva_enterprise_refresh | Keeps you signed in securely. It works only on enterprise.motuva.com and can't be read by scripts | Up to 7 days, and you are signed out after 8 hours of inactivity | No: the hub can't work without it |
| Cloudflare Turnstile | Tells people from bots on the sign-up page | No cookie: a one-time pass, used once when you sign up | No: sign-up needs it |
| The chat (Crisp) | Remembers your conversation | 6 months, renewed each time you come back to a page with the chat. A second cookie lasts until you close the browser | Yes. It is set only after you agree, the first time you open the chat |
| motuva_enterprise_sign_up | Keeps your sign-up details while you confirm your email. It never holds your password | Until you close the tab | No: sign-up needs it |
| motuva-live-chat-consent | Remembers your yes or no to the chat | Until you clear your browser's storage | No: it is how your answer is kept |
| motuva-live-chat-identity | Remembers whose chat this is, so one person's chat never opens for another | Until you sign out or turn the chat off | Yes. It is set only after you agree to the chat |
We use no analytics, advertising or tracking cookies in the hub. Our product analytics is sent from our servers, so it stores nothing in your browser.
13. Children
Motuva Enterprise is a service for businesses. We don't knowingly collect data from anyone under 18.
14. Changes to this notice
We may update this notice as the service changes. We email the owners of each account about material changes at least 30 days before they take effect. The version and date at the top of this page tell you which version you are reading.
15. How to contact us
For privacy questions and requests: hello@motuva.com.