Motoveo Privacy Policy

DRAFT — requires review by licensed counsel before launch. This document was drafted by the founding team as a working template grounded in the platform's verified legal research (docs/research/CARMATCH-STRATEGY.md) and the A2P 10DLC registration requirements (docs/legal/A2P-10DLC-REGISTRATION.md). It is not legal advice and must be reviewed and finalized by a qualified privacy/telecom attorney (CCPA/CPRA, GDPR/UK GDPR, TCPA/CTIA, and FTC Safeguards) before it is published or relied upon. Replace every [bracketed placeholder] with your real legal-entity details first.

Effective date: 2026-07-05 Last updated: 2026-07-05

Motoveo ("Motoveo", "we", "us", or "our") operates an online platform at motoveo.co that privately surfaces desirable enthusiast vehicles their owners want to sell to the network of licensed Porsche franchise dealers, who bid on the ones that fit their buyers. This Privacy Policy explains what information we collect, how we use and share it, and the choices and rights you have.

Our role, in one line: Motoveo is an advertising and lead-generation platform. We are not a motor-vehicle dealer, broker, auctioneer, or a party to any vehicle sale, and we do not take title to, hold, or take a success fee on any vehicle. Sellers and dealers transact directly with each other. Because we are the venue and not a party to the deal, protecting the privacy and discretion of both sides is core to how the product is built.

---

1. Scope

This policy applies to the Motoveo website, web forms, magic-link pages, SMS and email communications, and related services (together, the "Service"). It applies to three groups of people:

• Sellers — individuals who submit a vehicle to be matched.
• Dealers — licensed dealers and their staff who receive vehicle-match alerts and place bids.
• Visitors — anyone who browses motoveo.co.

It does not cover the independent practices of third parties (for example, a dealer you are ultimately connected with), whose own privacy policies govern their handling of your information.

2. Information we collect

2.1 Information sellers provide

• Vehicle information: Vehicle Identification Number (VIN), year/make/model, mileage, options and window-sticker details, condition, title status, modifications, service history, and photographs you upload.
• Pricing information: your optional asking price or trade target.
• Contact information: your name, mobile phone number, email address, and your U.S. state or coarse region.
• Consent records: the exact disclosure text you agreed to, the date and time, and the source of your opt-in (our "consent ledger").

2.2 Information dealers provide

• Business information: dealership name, U.S. state and city, franchise-store status, and license context.
• Contact information: contact name, business phone number, email address, and role.
• Optional standing interests ("in-search-of"): vehicle specifications you flag so matching cars are prioritized and highlighted in your alerts. Alerts are not limited to these — opted-in dealers on the network receive alerts for vehicles coming to market.

2.3 Information we collect automatically

• Technical and log data: IP address, browser/user-agent string, and timestamps — collected in part as evidence of consent and to secure the Service.
• Message metadata: delivery status, opt-out/opt-in keywords, and bounce/complaint signals for the SMS and email we send on your behalf.

We do not intentionally collect special-category/sensitive personal information, and we ask that you not submit any.

3. How we use information

We use the information above to:

• Operate the core Service — decode a VIN into a normalized specification, surface a seller's vehicle to the opted-in franchise-dealer network (with optional dealer standing interests used only to prioritize and highlight alerts), present offers, and facilitate an introduction between the seller and the dealer whose offer they accept.
• Communicate with you — send you the SMS and email you opted in to (new-to-market vehicle alerts to dealers; dealer offers to sellers), plus service and transactional messages.
• Maintain compliance and records — honor opt-outs, maintain the consent ledger, enforce message-timing rules, and meet our legal obligations (TCPA, CAN-SPAM, state mini-TCPAs, and the FTC Safeguards Rule).
• Build anonymized market benchmarks — we derive aggregated, de-identified pricing and specification comparables (e.g., what a given configuration tends to clear at). These benchmarks do not identify you and are never tied back to your contact information when used in any product.
• Protect the Service — prevent fraud, abuse, and security incidents.

4. SMS / text-message consent (important)

If you give your mobile number and opt in, you agree to receive text messages from Motoveo related to our vehicle-matching service, as described in our SMS Program Terms. Key points:

• Consent is not a condition of any purchase or sale. You do not have to agree to texts to use any other part of the Service.
• Message frequency varies. Message and data rates may apply.
• Reply STOP to any message to unsubscribe at any time; reply HELP for help, or contact us at founders@motoveo.co or 503-869-1255.
• We do NOT sell your information, and we do NOT share your mobile opt-in data, SMS consent, or the contents of your text messages with any third parties or affiliates for their own marketing purposes. Your opt-in stays with Motoveo. (This is both our policy and a carrier requirement for our messaging program.)

See Section 5 for the limited, non-marketing ways information is shared to make the Service work.

5. How we share information — and how we don't

We do not sell your personal information, and we do not share it with third parties for their own marketing. We share information only in these limited ways:

• With dealers on the network, through staged disclosure — masking protects YOU, not the car. To bid, a dealer sees a vehicle packet that is fully transparent about the car — the decoded specification, the full Vehicle Identification Number (VIN) (so the dealer can run a history report and bid with confidence), coarse region, mileage, and watermarked photos — and never your name, phone number, or email address. A VIN does not reveal your contact information (vehicle-registration records are restricted under the federal Driver's Privacy Protection Act). Your contact information is released to a dealer only after a formal in-platform bid, and a dealer's identity is revealed to you only after you accept an offer. We record every such disclosure.
• With service providers ("processors") who act only on our instructions — for example our SMS provider (Twilio), email delivery provider, cloud hosting, and object storage. They may process information solely to provide services to us and are contractually barred from using it for their own purposes.
• For legal and safety reasons — to comply with law, respond to lawful requests, enforce our Terms, or protect the rights, property, and safety of Motoveo, our users, or the public.
• In a business transfer — if Motoveo is involved in a merger, acquisition, financing, or sale of assets, information may transfer as part of that transaction, subject to this policy.

We may share aggregated or de-identified information (such as market benchmarks) that does not identify you.

6. Data retention

We keep personal information for as long as needed to provide the Service and for legitimate business and legal purposes. Consent and opt-out records are retained on a long-term basis because they are our proof of compliance under the TCPA and related rules. You may request deletion as described in Section 8; we will honor it except where we are required or permitted to retain certain records (such as consent/suppression evidence).

7. Security (FTC Safeguards posture)

A platform that brings buyers and sellers together can be treated as a "financial institution" under the FTC Safeguards Rule, so we maintain a written information-security program appropriate to our size and the sensitivity of the data. Measures include: encryption of traffic in transit (TLS), access controls and least-privilege for operator accounts (with optional multi-factor authentication), stripping of GPS/EXIF metadata from uploaded photos, separation of contact information from the shareable vehicle spec, an append-only audit and consent ledger, and vendor due-diligence. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. Your privacy rights

8.1 California (CCPA/CPRA)

If you are a California resident, you have the right to: know what personal information we collect and how we use and disclose it; access and port it; correct it; delete it; and not be discriminated against for exercising these rights. California also gives you the right to opt out of the "sale" or "sharing" of personal information and to limit the use of sensitive personal information — Motoveo does not sell or share personal information as those terms are defined, and does not use sensitive personal information for those purposes, so there is nothing to opt out of, but you may still contact us to confirm. You may use an authorized agent to submit a request.

8.2 EEA / UK (GDPR-aware)

The Service is directed to the United States. If you are in the EEA or UK, and to the extent GDPR/UK GDPR applies, our legal bases are your consent (for marketing SMS/email), performance of a contract (to provide the Service you request), and our legitimate interests (to operate, secure, and improve the Service). You have the rights of access, rectification, erasure, restriction, portability, and objection, and the right to withdraw consent at any time (without affecting prior processing) and to lodge a complaint with your supervisory authority.

8.3 How to exercise your rights

Email founders@motoveo.co or write to us at the address in Section 12. We will verify your request (to protect your information) and respond within the timeframes required by applicable law. Opt out of texts at any time by replying STOP.

9. Cookies and tracking

We keep tracking to the minimum needed to run the Service. We use a first-party session cookie for operator logins and short-lived, single-purpose magic-link tokens for seller and dealer pages. We do not use third-party advertising cookies or sell data to ad networks.

10. Children's privacy

The Service is intended for adults (18+) and is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us information, contact us and we will delete it.

11. Changes to this policy

We may update this policy from time to time. We will change the "Last updated" date above and, for material changes, provide additional notice where required. Your continued use of the Service after an update means you accept the revised policy.

12. Contact us

Motoveo — Privacy Email: founders@motoveo.co Phone: 503-869-1255 Mail: 3350 SE Schiller St, Portland, OR 97202

Placeholders in brackets are set from platform configuration (SUPPORT_EMAIL, SUPPORT_PHONE, MAIL_PHYSICAL_ADDRESS) and must be replaced with your real, monitored support contact and legal-entity postal address before launch — they must match your A2P 10DLC brand registration and the HELP reply your SMS program sends.