Privacy Notice

Summary in plain English

This notice explains what personal data Motuva collects when you use our website, apps, and APIs — and what we do with it. We've written it in plain English. If anything is unclear, email privacy@motuva.com.

We collect what we need to run your account and process the photos you upload. We don't sell your account information or anything that personally identifies you. We may use uploaded photos and anonymised data derived from them to train and improve our own AI engines and to develop new features. Signing up for a Motuva account means we may email you about Motuva — product news, new features and offers. Every one of those emails has an unsubscribe link and you can use it at any time; you can also switch them off in the app under Account. Sign-in codes, password resets, receipts and important account notices are not marketing and are sent either way. You can update your account details in the app at any time, and email us to get a copy of your data or to close your account. Closing your account removes your personal details; your photos and the images made from them stay with us and go on improving our AI, and section 8 lists everything else we keep.

1. Who we are

Motuva is a service provided by MotorCut Ltd ("Motuva", "we", "us"), a company registered in England and Wales, company number 12362580, with its registered office at Ava Office, Fir Tree Close, Stretton, Warrington, Cheshire, WA4 4NA, United Kingdom.

We're the data controller for personal data you give us through our website (motuva.com), web app, mobile apps, and API.

For privacy questions or data subject requests: privacy@motuva.com.

2. What we collect

The data we collect falls into three buckets:

Account data

• Name, work email, dealership name
• Password (hashed — we never see the plain text)
• Billing details, processed by our payment provider (we don't store full card numbers)
• Subscription tier, image quotas, billing history
• The network (IP address) you signed up from, and a random code our app keeps in your browser or on your phone. We keep these to stop one person opening several accounts for extra free images, which is our legitimate interest, and delete them when you close your account.

Usage data

• How many images you process, which features you use
• Device type, browser, IP address, basic location (city level)
• In-app actions, errors, performance metrics

Content you upload

• Photos of vehicles you submit for editing
• Custom backgrounds, logos, or watermarks you upload
• Branding settings you configure

3. Why we use it

• To run your account, charge your subscription, and provide the editing service
• To process your images — that's the core product
• To support you when you write in
• To improve the product (we look at aggregate usage, not individual photos)
• To email you about Motuva — product news, new features and offers — and to send you important account notices
• To meet our legal and tax obligations

4. Legal bases (UK GDPR / EU GDPR)

We rely on the following legal bases:

• Contract — running your subscription and processing your photos.
• Legitimate interests — improving the product, keeping it secure, contacting customers about their account, and emailing our own customers about Motuva (every one of those carries an unsubscribe link).
• Consent — for non-essential cookies (you can withdraw at any time).
• Legal obligation — accounting, tax, and law-enforcement requests.
• Legitimate interests, for the demo — showing you Motuva on your own photos when you ask to try it, keeping the demo fair with the limits described in section 5, understanding how the demo is used, and following up with dealerships we invited to try it. The demo cookie is strictly necessary, so it does not need your consent.

5. Photos and images

Your photos are stored encrypted in our cloud storage and processed by our editing engine to produce the edits you've asked for. The original and edited versions are kept under your account so you can re-download or re-edit.

Number plates and vehicle registrations. A number plate visible in a photo you upload may count as personal data. Motuva processes and edits plate imagery as part of delivering the service, and we handle it under the same encryption, retention, and deletion rules as every other uploaded photo described in this notice.

Under our Terms of Service, you grant MotorCut Ltd a broad licence to use uploaded photos and data derived from them, including the right to:

• Process images on your behalf to deliver the editing service (the core product)
• Train, improve, and develop our own AI editing models
• Create anonymised, aggregated datasets for analytics, research, and product development
• License those anonymised, aggregated datasets to third parties (for example, automotive data partners or valuation models)
• Use the finished images made from your photos in Motuva's own marketing

We do not sell individual identifiable photos. Photos and data used for AI training, research, or third-party licensing are anonymised — they do not carry your dealership branding or anything that personally identifies you, your staff, or your customers.

Before you submit a photo for editing you can remove it. It disappears from your account straight away and is permanently erased from our storage within about 30 days. Once a photo has been submitted for processing, it and the advert made from it stay in your account and in our storage — there's no delete button. You can still ask us to remove them; see section 8. Anonymised data derived from your photos is retained regardless.

Free tools on motuva.com. If you use our free number plate tool without an account, a copy of your photo, no more than 1,600 pixels on its longest side, is sent to our servers so our plate model can find the number plate. It is processed in memory and discarded as soon as the plate's position is sent back. It is not stored, not logged, not linked to you, and not used to train or improve our AI engines. To stop the tool being overused, we keep a count against your IP address for up to 24 hours.

Bot check on the free plate tool. Before the free number plate tool looks for a plate in your photo, it uses Cloudflare Turnstile to tell people from bots. For that check, Cloudflare processes technical signals from your browser: your IP address, your browser's TLS fingerprint and User-Agent, and our site key and the website address it is used on. Cloudflare may also use those signals to improve its bot detection. Cloudflare's Turnstile Privacy Addendum explains how it handles them.

The demo. If you try Motuva in our demo, without an account, the photos you upload are stored in our cloud storage and processed by our editing engine to make the results you asked for. We use them only to make those results and show them to you, and not to train or improve our AI engines. Your photos, and everything made from them, are kept for 30 days so you can come back to them, and are then deleted. The demo uses no service providers beyond those listed in section 6.

The demo cookie. The demo sets one cookie, motuva_demo_session, so our servers know which demo is yours and your results, and how many you have left, follow you between pages and visits. It holds a random code and nothing about you, and it lasts 30 days. It is strictly necessary for the demo to work, so it is set without asking. If you choose to sign up from the demo, that browser tab also keeps a sign-up ticket that works for an hour, and the look you chose, until you close the tab, so your new account can carry on from your demo.

Fair-use limits on the demo. Every demo image is rendered on our servers, so we limit how many demos and images can come from one place, and how fast. To do that, our servers count demos and images against your IP address and the network it belongs to, in counters that expire within 24 hours. Your IP address is not saved with your demo.

Bot check on the demo. When you start a new demo without an invite link, we use Cloudflare Turnstile to tell people from bots before the demo begins. For that check, Cloudflare processes technical signals from your browser: your IP address, your browser's TLS fingerprint and User-Agent, and our site key and the website address it is used on. Cloudflare may also use those signals to improve its bot detection. If the check is not passed, no demo is started and nothing is counted. A link we sent you, and a browser that already has a demo, are never checked. Cloudflare's Turnstile Privacy Addendum explains how it handles them.

What we record about the demo. We keep a record of what happens in each demo: that it was opened, which look was chosen, how many photos were sent, which results worked or failed, whether five more were asked for, and whether the visitor went on to sign up. The record holds no name, email address or IP address. If you opened the demo from a link in an email we sent you, the record is linked to your dealership and to that email, so our own sales follow-up can take account of what you tried. If someone forwarded you that link, what you do is recorded against the dealership it was sent to. If you sign up from the demo, we link the demo to your new account once it's verified. Like the rest of the app, the demo's pages also count towards the usage data described in section 2.

6. Who we share data with

We share personal data only with a small number of trusted service providers who help us run the service, and only so they can do that job.

The categories of providers we use are:

• A payment processor — to handle card payments, subscriptions, and invoicing
• A cloud hosting provider — to store your data and run the application
• An AI processing provider — to render the final edited images
• An email delivery provider — to send account emails such as sign-in codes
• An analytics provider — to see how the product and website are used
• A customer support tool — to handle in-app chat and support email
• An error monitoring tool — to detect and fix bugs in the service
• A security and anti-abuse provider, such as Cloudflare — to tell people from bots and protect our free tools from abuse

A named list of our current sub-processors is available on request — email privacy@motuva.com if you need it for your own compliance records.

We do not sell personal data to anyone.

7. International transfers

Some of the providers we use are based in or process data in the United States and other countries outside the UK and the European Economic Area.

Where data leaves the UK or EEA, we rely on UK and EU adequacy decisions, the International Data Transfer Agreement (IDTA), or Standard Contractual Clauses (SCCs) to keep your data protected to the same standard required by UK and EU GDPR.

8. How long we keep it

• Account data — for as long as your account is open. Your personal details are removed when it's closed, apart from the records named below.
• Photos and adverts — kept indefinitely after your account closes and used to improve our AI, with your dealership's details, logo files and the names you gave them removed. Branding printed into an image, and your original uploads as you sent them (including any camera or location data saved inside the file), are kept as they are. Where an image was reported to us as not right, the record kept beside it still carries the file name you gave the photo. Email us before you close your account if you want them removed.
• Billing records — 7 years, including the name, email address and billing address you paid with. UK law requires a company to keep its accounting records for at least 6 years.
• Our own records of what we did — kept indefinitely. Our record of any admin action on your account, and of any photo-removal request you made, keeps your name and email address as they were at the time.
• Analytics — when you close your account we ask our analytics provider to delete their record of you. Until that request can be completed, your email address stays with that provider and we keep one copy so we can finish it. There is no set period for this today.
• Usage logs — 90 days for the most detailed logs, longer for aggregated metrics.
• The demo — your photos and everything made from them are deleted after 30 days, and the fair-use counts against your IP address expire within 24 hours. The record of what happened in a demo is kept indefinitely; it holds no name, email address or IP address.

9. Your rights

Under UK and EU GDPR you have the right to:

• Access the personal data we hold about you
• Correct anything inaccurate
• Close your account and have your personal details removed — photos and adverts are kept, without your dealership's details, unless you ask us to remove them before you close it. Section 8 lists everything we keep afterwards
• Export your data in a portable format
• Object to certain types of processing
• Withdraw consent at any time
• Complain to the UK ICO or your national data protection authority

You can review and update your account details in the app under Account. To exercise any of the other rights above — including export or deletion — email privacy@motuva.com and we'll come back within 30 days.

10. Security

We follow industry-standard security practices — encryption in transit and at rest, role-based access, audited admin actions, and a secure development lifecycle.

No system is bulletproof, but we take this seriously and will notify affected customers of any incident that materially affects them.

11. Children

Motuva is a B2B tool for car dealerships. We don't knowingly collect data from anyone under 18.

12. Changes to this notice

We may update this notice as the product evolves. Material changes are communicated by email at least 30 days before they take effect. The version and date at the top of this page tells you which version you're reading.

13. How to contact us

For privacy questions, data subject requests, or anything in this notice: privacy@motuva.com.

For everything else, the contact page on motuva.com has all our routes.