Privacy Policy

Version 1.0 · Effective October 6, 2026

1. Who we are

Motor is run by Motor Software Corporation ("Motor," "we," "us"). This policy explains what information we collect when you use motor.dev and the Motor API, what we do with it, and the choices you have. It is part of our Terms of Service. Questions go to hi@motor.dev.

The short version: we collect what we need to run Motor and bill you, we don't sell your data, and you can ask us to see or delete it.

2. What we collect

We only collect information when we have a reason to, like running a service you asked for or billing you correctly.

Information you give us

• Account info: your name and email address (from your Google account), your team's name, and your role on the team
• Passkeys: when you add a passkey, we store its public key, the name you give it, and when it was added and last used. Motor never sees or stores a password.
• Billing info: your team's billing email. Your card details go straight to Stripe (see section 6).
• Service data: the data you or your agents send to Motor's APIs, such as records in a key-value store, vector database, or search index, messages, files, and the results that come back
• API keys: the keys your team creates, their names, which APIs they can use, and their spending limits
• Team invitations: the email address and role of anyone you invite
• Communications: emails and support requests you send us
• Job applications: your resume and details, if you apply to work at Motor

Information we collect automatically

• Usage data: how much each API key uses each API each day, and what it costs
• Sign-in sessions: the device and browser you signed in from, how you signed in, and when the session was last active, so you can review and end sessions on your Security page
• Log data: like most websites, our servers record basic request information such as IP address, browser type, and the page or API requested

Information from other sources

• Google: when you sign up or sign in with Google, we receive your name and verified email address
• Stripe: your card's brand, last four digits, and expiry date, and whether each payment succeeded

Cookies: motor.dev uses one necessary cookie to keep you signed in. We don't use advertising or analytics cookies. When you add or update a card, Stripe's payment form loads on the page and may set its own cookies to prevent fraud. You can block cookies in your browser, but you won't be able to sign in.

3. How we use it, and why

We use your information to:

• Run the services you request, including storing and processing the data you send them
• Measure usage and bill you correctly
• Build, test, and improve Motor, using usage data rather than the content of your requests
• Keep Motor secure, and prevent fraud, spam, and abuse
• Fix bugs and answer support requests
• Send account, billing, security, and policy notices
• Send team invitations and spending-limit warnings, and, if we start sending them, product news you can turn off at any time
• Review job applications

We don't use your request content to train AI models, and we don't sell your personal information.

Our legal reasons (for GDPR): We rely on one of these for each use above:

• Contract: we need it to provide the service you signed up for
• Legal duty: the law requires it, such as keeping tax records
• Legitimate interests: reasonable business needs, like security, fraud prevention, and improving Motor, balanced against your rights
• Vital interests: to protect someone's life or safety
• Consent: where you've said yes, such as to marketing emails. You can withdraw consent at any time.

4. Who we share it with

Motor builds and runs its services itself, so the data you send to an API isn't handed to another company to do the work. We keep your data to ourselves except in these cases:

• Companies that help us run Motor: Amazon Web Services hosts Motor in the United States and sends our email through Amazon SES. Stripe processes payments. Google handles sign-in. They may only use your data to provide their service to us.
• Your team: Admins on your team can see members' names, emails, and roles, the team's API keys and usage, and its invoices.
• Our affiliates: Any company controlled by or under common control with Motor Software Corporation, under this same policy.
• Legal requests and safety: We may share information with law enforcement or government agencies when the law requires it, such as a valid subpoena or court order. We may also share it when we believe in good faith it's needed to prevent fraud, protect someone's safety or our rights, or report illegal content like child exploitation. Where allowed, we'll tell you before sharing.
• Business changes: If Motor is merged, sold, or goes through bankruptcy, your data may move to the new owner under this same policy.
• With your permission: Anywhere else, only if you tell us to.
• Aggregated or de-identified data: We may share totals or statistics that can't reasonably identify you, such as "requests per month across all customers."

Nothing public by default: Motor doesn't publish your account or service data. Some services are meant to be public, like a status page, changelog, or live-chat widget you put on your site. Anything you publish through them can be seen by anyone.

5. Analytics and advertising

Motor doesn't use any third-party analytics, tracking, or advertising tools, and doesn't show ads. We learn how Motor is used from our own usage records and server logs. If we ever add an analytics or advertising tool, we'll name it here with a link to its privacy policy before turning it on.

6. Payments

Payments are processed by Stripe. When a team admin adds a card, it's entered into Stripe's own payment form, and Stripe stores it. Motor keeps only a Stripe customer ID and the card's brand, last four digits, and expiry date. Each month Stripe charges the card for the team's invoice and emails a receipt to the billing email. Stripe's handling of your data is covered by the Stripe Privacy Policy.

7. Your customers' data and other websites

Your customers' data: If you or your agents use Motor to store or process information about your own customers or employees (for example, in a database, queue, or live-chat widget), you decide what's collected and why. You are responsible for that data (the "controller"), and Motor handles it only on your instructions (as a "processor"). You should have your own privacy policy that tells those people how their data is used, and send any requests about it to you first. We'll help you respond.

Other websites: Motor may link to other websites, such as Google for sign-in or Stripe for invoices. Their own privacy policies apply there.

8. How long we keep it

We keep information only as long as we need it for the reasons in this policy.

• Service data: kept until you delete it, or until your team is deleted. It's yours to manage through the API.
• Your account: deleted when you delete it, or when an admin removes you. That removes your passkeys, sessions, and Google link.
• Deleted teams: when an admin deletes a team, all its API keys are revoked right away. We keep the team's name, usage records, and invoices so we can bill for the final month and keep financial records.
• Usage records and invoices: as long as the law requires, usually up to 7 years
• Server logs: only as long as needed for security, debugging, and legal purposes
• Job applications: up to 2 years, unless you ask us to delete yours sooner

When we no longer need information, we delete it or remove anything that identifies you.

9. Security

Motor has no passwords to steal: you sign in with Google and a passkey. API secret keys are shown once and can be rolled or revoked at any time, and each key can have a spending limit. We use reasonable administrative, technical, and physical safeguards, such as encrypting data in transit and limiting staff access to what's needed, and we require our providers to protect data too. No system is perfectly secure, so we can't promise your data will never be accessed without permission. If a breach affects your data, we'll tell you as the law requires.

You can help by keeping secret keys out of client-side code, rolling any key you think has leaked, and signing out of sessions you don't recognize on your Security page.

10. Your choices

• Share less: You can choose what data you send to Motor's APIs.
• Emails: Account emails like invitations, spending-limit warnings, and receipts are needed to run your account. If we start sending marketing emails, each will have an unsubscribe link.
• Cookies: Motor's only cookie keeps you signed in. You can block it in your browser, but you won't be able to sign in.
• Sessions and keys: Review sign-in sessions and passkeys on your Security page, and manage API keys on your Keys page.
• Delete your account: Delete your account from your account settings at any time. A team admin can delete the whole team. We'll keep only what section 8 describes.

11. Your rights

Wherever you live, you can ask us to show, correct, or delete your personal data. We may keep records the law requires, like invoices and usage behind them, as section 8 explains. Some places give you extra rights, described below. We won't treat you differently for using them.

If you're in the EU, EEA, or UK (GDPR), you can:

• Get a copy of your data, and ask us to correct it or delete it
• Object to how we use it, or ask us to limit its use
• Receive your data in a portable format
• Withdraw consent you gave earlier
• Complain to your local data protection authority

If you're in California or another US state with a privacy law, you can ask what we collect and why, get a copy, correct it, delete it, and opt out of any "sale" or "sharing" for targeted ads. In the past 12 months we have collected these categories, for the purposes in section 3, from the sources in section 2:

• Identifiers (name, email, IP address, account ID)
• Commercial information (purchases and billing history)
• Internet activity (usage data, logs, pages visited)
• Approximate location (from IP address)
• Professional information (company name, job application details)
• Content you send through the API (which may include audio, images, or documents)

We don't sell personal information, and we don't share it for targeted advertising, so there's nothing to opt out of today. If that ever changes, we'll add a "Do Not Sell or Share My Information" link to motor.dev and honor Global Privacy Control (GPC) browser signals.

How to ask: Email hi@motor.dev. We'll confirm your identity, usually by checking the email on your account, and respond within 30 days (45 days where state law allows). You can also have an authorized agent ask for you, with your written permission.

Appeals: If we turn down your request, you can appeal by replying to our answer. Someone who wasn't part of the first decision will review it and reply within 45 days. If you're still not satisfied, you can contact your state attorney general.

12. Moving data across borders

Motor is based in the United States and hosted by Amazon Web Services in Virginia, so your data is stored and processed in the US. Privacy laws there may differ from where you live. When we move data out of the EU, EEA, UK, or Switzerland, we use Standard Contractual Clauses or other legal safeguards. Email hi@motor.dev for a copy.

13. Children

Motor is for businesses and adults 18 and over. We don't knowingly collect data from children. If we learn we have, we'll delete it.

14. Who's responsible, changes, and contact

Who's responsible: Motor Software Corporation is responsible for (the "controller" of) the personal data described in this policy, except for your customers' data described in section 7.

Changes: We may update this policy as Motor changes. For important changes, we'll email you at least 30 days before they take effect. Small changes will be posted here with a new date at the top. We keep a list of past versions, available on request. If you keep using Motor after a change takes effect, the new policy applies.

Translations: If we offer this policy in other languages and they differ, the English version controls.

Contact: Motor Software Corporation, hi@motor.dev. 2810 N Church St, PMB 59881, Wilmington, Delaware 19802-4447.