Privacy Policy
Last updated 15 September 2026
This policy explains what personal data Motara collects, why, who we share it with, and what rights you have. We have tried to write it plainly rather than defensively.
1. Who we are
Motara is operated by AI Automotive Limited, registered in England and Wales (company number [COMPANY NUMBER]), registered office [REGISTERED ADDRESS]. We are the data controller for the data described in this policy.
Privacy questions: hello@carmods.ai.
2. Data we collect
Account data
Your name, work email address, company name, and authentication details. Collected when you sign up and needed to give you an account.
Billing data
Your subscription, invoices and payment status. Card details are handled entirely by Stripe and never reach our systems. We store Stripe's identifiers for your customer and subscription so we know what you have bought.
Usage data from the Motara platform
Pages you visit in the application, queries you put to the AI Assistant, and technical logs used to keep the service running and secure.
SDK data from publisher apps and websites
If you visit a website or app that has integrated the Motara SDK, we receive events about that visit. Specifically:
| What | Why |
|---|---|
| A randomly generated device identifier | To count returning visitors and cap how often an advert is shown |
| Session and screen or page view events | Publisher analytics and funnels |
| Vehicle make and model, where the user has provided it | To show relevant advertising and produce aggregated market demand data |
| Advert impressions and clicks | Billing advertisers and paying publishers |
The SDK does not use cookies. It stores a random identifier in local storage on the device. We do not collect your name, email address, precise location, number plate, or vehicle identification number through the SDK, and we do not buy personal data from data brokers.
Publicly available social data
For Social Signals we analyse public content from sources such as YouTube — video titles, descriptions and public comments — to identify trends in vehicles, modifications and brands. We store extracted trend data in aggregate, not profiles of the individuals who posted.
3. Why we use it, and our legal basis
| Purpose | Legal basis |
|---|---|
| Providing your account and the modules you subscribe to | Performance of a contract |
| Taking payment and preventing fraud | Contract; legal obligation |
| Serving relevant advertising in publisher properties | Legitimate interests, and consent where the publisher's local law requires it |
| Producing aggregated market insight for suppliers | Legitimate interests |
| Keeping the service secure and diagnosing faults | Legitimate interests |
| Service emails about your account | Contract |
| Marketing emails | Consent, withdrawable at any time |
Where we rely on legitimate interests, we have considered the impact on you and limited what we collect accordingly — which is why the SDK collects a vehicle model rather than an identity.
4. Aggregation, and what advertisers actually see
Our commercial product is aggregate demand data: how many people with a given make and model are interested in a given category of part. Advertisers and suppliers see counts and trends, never individuals. They cannot download a list of users, see an individual's activity, or contact anyone through Motara.
Advertisers targeting a campaign choose attributes such as vehicle make and model. They do not learn who saw the advert.
5. Who we share data with
We use a small number of processors, each only for the purpose listed:
| Provider | Purpose | Where |
|---|---|---|
| Google Firebase & Google Cloud | Hosting, database, authentication, serverless compute | United States |
| Stripe | Payment processing and billing | United States / EU |
| OpenAI | Powering the AI Assistant. Your queries and the relevant data context are sent to generate a response | United States |
| YouTube Data API (Google) | Retrieving public content for Social Signals | United States |
| MailerLite | Marketing email, where you have opted in | EU |
| Titan / Google Workspace | Business email | EU / United States |
We do not sell personal data. We may disclose data if legally required, or as part of a business sale, in which case we will tell you.
6. International transfers
Our infrastructure runs in the United States (Google Cloud, us-central1). Where personal data leaves the UK we rely on the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, or on UK adequacy regulations where they apply.
7. How long we keep it
- Account data — while your account is open, then up to 12 months.
- Billing records — six years, as UK tax law requires.
- Raw SDK events — retained only as long as needed to produce aggregates, then deleted.
- Aggregated data — kept indefinitely. It does not identify anyone.
8. Your rights
Under UK GDPR you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or provide it in a portable format. You can withdraw consent at any time where we rely on it.
Email hello@carmods.ai and we will respond within one month.
If you are unhappy with our response you can complain to the Information Commissioner's Office at ico.org.uk.
9. If you reached us through a publisher's app or website
Motara is usually a processor for the publisher's own analytics, and a controller for the aggregated market data we build. If you want your SDK data deleted, contact us with the approximate date and the app or site, or ask the publisher — and note that because we hold a random identifier rather than your name, we may need that information to locate anything at all.
10. Children
Motara is a business service and is not directed at children. We do not knowingly collect data from anyone under 16.
11. Changes
We will update this policy as the service changes, and will tell you about significant changes by email or in the application.