Effective date: July 30, 2026
MotorSync (“we”, “us”, “our”) operates the MotorSync fleet management platform. This policy explains what data we collect, why we collect it, how we use it, and your rights. Our launch posture is US-focused. If you are located outside the United States, please note that your data may be processed and stored in the US.
Name, email address, hashed password, business name, business description, mechanic specialty selections, and profile or logo images you upload.
Year, make, model, VIN, license plate, registration state, registration dates, mileage records, oil-change intervals, maintenance schedules, and vehicle photos you upload.
Service Requests (type, urgency, description), Service Records (work performed, mileage at completion, technician notes), diagnoses, and comments entered by Fleet Owners and Mechanics.
Expense records you create manually or that are generated from completed Service Records, including amount, date, category, and description. We do not collect payment card numbers; those are handled by Stripe.
Records of connections between Fleet Owners and Mechanics, vehicle access grants, staff relationships, and invitation records.
Server-side structured logs including timestamps, request paths, HTTP status codes, anonymized or pseudonymous user IDs, and error codes. We do not log passwords, tokens, or full request bodies.
Payments are processed by Stripe, Inc. MotorSync uses Stripe-hosted checkout and never receives or stores raw card data. Stripe's privacy practices are governed by Stripe's Privacy Policy. We retain a Stripe customer ID and subscription-status records to manage entitlements.
Images and file attachments you upload are stored using Cloudinary. Cloudinary processes and stores these assets on our behalf. Assets are accessible only through signed or authorized URLs where applicable.
We use HttpOnly, Secure cookies to maintain your authenticated session. We use an access token (short-lived) and a refresh token (longer-lived, rotated on use). We do not use third-party tracking or advertising cookies. No cookie consent banner is currently shown for essential-only cookies; this will be revisited before EU marketing.
We use error-tracking software (such as Sentry) to detect and diagnose application errors. Error reports may include anonymized user identifiers, request paths, and stack traces. We configure these tools to scrub sensitive data. We do not currently use third-party behavioral analytics services.
We send in-app notifications for events such as new service requests, connection approvals, and maintenance reminders. You can manage notification preferences in your account settings. We do not currently send marketing emails unless you specifically opt in.
Account data is retained while your account is active. After account deletion, your personally identifiable data is purged within 30 days. Service Records and audit data may be de-identified and retained for operational and legal reasons as required. Stripe customer records are retained according to Stripe's data-retention obligations. Uploaded media is deleted from Cloudinary following the retention schedule. Backups are rotated on a 7-day point-in-time recovery basis.
You can request a full export of your account data from Settings. The export includes your profile, vehicles, service history, expenses, connections, and notifications. It excludes password hashes, tokens, and other users' private data. Export links are signed and expire after 24 hours.
You can delete your account from Settings. Deletion requires password confirmation. Your data enters a 30-day recoverable period, after which it is permanently purged. Connections and grants are immediately revoked. Any active subscription is cancelled. De-identified service and audit history may be retained as required by law.
Depending on your jurisdiction, you may have rights to access, correct, export, or delete your personal data. To exercise these rights, contact us at privacy@motorsync.app. We will respond within 30 days. Note: MotorSync does not currently offer a formal GDPR process; this will be revisited before active EU marketing.
We do not sell your personal data. We share data only with:
Other users (e.g., a Mechanic you connect with) can see data you explicitly share with them through the platform (vehicle details, service records) according to the access you grant.
We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you of material changes by in-app notification or email before the change takes effect. The effective date at the top of this page reflects when the current version took effect.
For privacy questions or requests, contact us at privacy@motorsync.app.