Privacy Policy

Effective Date: March 5, 2026 | Last Updated: March 15, 2026

Softwairz ("we", "us", "our") operates the MOTRaxis and MOTRaxis Workshop mobile applications and platform (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the MOTRaxis apps and related services.

1. Information We Collect

1.1 Personal Data

Data Type	Examples	Purpose
Account Information	Name, email address, phone number, password	Account creation, authentication, communication
Google Account Data	Google account ID, name, email, profile picture	Google Sign-In authentication
Workshop Details	Workshop name, address, business registration, contact details	Workshop profile, customer discovery, invoicing
Customer Records	Customer name, phone number, vehicle details	Repair job management, service history tracking

1.2 Vehicle Data

Data Type	Examples	Purpose
Vehicle Identification	Registration/plate number, make, model, year, VIN	Vehicle identification, Digital Vehicle Passport
Mileage Data	Odometer readings, mileage entries, trip distances	Mileage tracking, service interval calculation, Health Score
Service History	Repair descriptions, parts used, labor, costs, service dates, photos	Digital Vehicle Passport, service reminders, vehicle history
Booking & Quotation Data	Appointment requests, quotation details, booking status	Workshop appointment management
Review Content	Star ratings, written reviews, review photos	Workshop ratings, quality transparency

1.3 Location Data

Data Type	Examples	Purpose
Workshop Coordinates	Latitude/longitude of workshop address	Nearby workshop discovery, map display
GPS Trip Data	Trip start/end coordinates, route path, distance (collected only with explicit user consent)	Mileage tracking, trip history, mileage reconciliation

1.4 Device & Technical Data

Data Type	Examples	Purpose
Device Information	Device model, OS version, app version, device fingerprint	Compatibility, debugging, trial integrity
Firebase Cloud Messaging Token	FCM device token	Push notification delivery for service reminders, booking updates, and account notifications
Usage Analytics	Feature usage patterns, screen views, session duration	Product improvement, performance monitoring

1.5 Financial Data

Data Type	Examples	Purpose
Transaction Records	Transaction amounts, payment methods, wallet balance, subscription status	Platform fee calculation, billing, POS, MOTRaxis Pro subscription management
Inventory Data	Parts names, quantities, costs, supplier details	Inventory management (workshop only)

1.6 Information From Third Parties

Google Sign-In: If you sign in with Google, we receive your name, email, Google account ID, and profile picture from Google.
Supabase Auth: Authentication tokens and session data managed by Supabase.

2. How We Use Your Information

Provide, maintain, and improve the MOTRaxis platform
Process repair jobs, generate invoices and receipts
Build and maintain the Digital Vehicle Passport — a universal, cross-workshop vehicle service history
Calculate and display the vehicle Health Score
Send service reminders and appointment notifications
Calculate and process platform fees for workshop transactions
Enable workshop discovery for vehicle owners based on location
Facilitate cross-workshop vehicle history lookup for registered owners
Manage partner commissions and referral tracking
Provide customer support and respond to inquiries
Process MOTRaxis Pro subscription payments and manage subscription status
Detect, prevent, and address fraud or technical issues
Generate anonymized, aggregated insights for platform analytics
Comply with legal obligations

3. Data Sharing & Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share data only in the following circumstances:

3.1 Vehicle History Sharing

Owner Access: When a vehicle owner views their vehicle's service history, they can see repair records from any workshop that serviced their vehicle on the MOTRaxis platform. Workshop identity and service details are shared as part of the Digital Vehicle Passport.
Cross-Workshop Lookup: When a workshop looks up a vehicle, they can see the vehicle's service history from other workshops on the platform. This enables continuity of care across service providers.
Digital Vehicle Passport Sharing: Vehicle owners may choose to generate and share a Digital Vehicle Passport report (e.g., for vehicle sale or insurance purposes). This report is generated at the owner's discretion and contains the vehicle's service history and Health Score.

3.2 Other Sharing

Platform Partners: Platform partners who referred a workshop may see aggregated commission data (job counts and commission amounts) but not individual customer or vehicle details.
Service Providers: We use Supabase (database/auth), Firebase (notifications), and Google Cloud (infrastructure). These providers process data on our behalf under strict data processing agreements.
Legal Requirements: We may disclose information if required by law, court order, or governmental regulation.
Business Transfers: In the event of a merger, acquisition, or sale of assets, user data may be transferred as part of the transaction. We will notify affected users before their data is subject to a different privacy policy.

4. Data Storage & Security

Your data is stored using the following infrastructure:

Local Storage: Workshop data is stored locally on your device using encrypted SQLite (Drift) database. This ensures the app works offline.
Cloud Storage: Data synced to the cloud is stored on Supabase infrastructure (hosted on AWS), protected by Row Level Security (RLS) policies ensuring workshops can only access their own data.
Encryption: All data transmitted between the app and our servers uses TLS/SSL encryption. Sensitive credentials are stored using platform-native secure storage (Android Keystore).
Authentication: Passwords are hashed using SHA-256. Session tokens are managed by Supabase Auth with automatic expiration.

5. Data Retention

Active Accounts: Data is retained for as long as your account is active.
Vehicle Service Records: Vehicle service records are retained indefinitely as part of the vehicle's lifetime Digital Vehicle Passport, even if a workshop account is deactivated. These records form the core of the vehicle's history and are essential for future owners.
Account Deletion: Upon account deletion request, personal data (name, email, phone, login credentials) is removed within 30 days. Vehicle service records are anonymized — the workshop name and service details remain as part of the vehicle history, but your personal account information is removed.
GPS Trip Data: Raw GPS trip data (route paths, coordinates) is retained for 12 months, after which it is aggregated into summary statistics (total distance, trip count) and the detailed route data is deleted.
Financial Records: Transaction records and fee history are retained for 7 years for tax and legal compliance.
Review Content: Reviews remain visible as long as the reviewed workshop is active. If you delete your account, your reviews will be anonymized (attributed to "Former User") rather than deleted, to maintain review integrity.

6. Your Rights

Depending on your jurisdiction, you may have the following rights:

Access: Request a copy of the personal data we hold about you. You can also view and export your data directly through the app.
Correction: Request correction of inaccurate or incomplete data. For service records entered by a workshop, you may raise a dispute through the platform, and the workshop will be asked to review and respond.
Deletion: Request deletion of your personal data (see our Data Deletion Policy). Note that vehicle service history will be anonymized rather than fully deleted, as it forms part of the vehicle's Digital Vehicle Passport.
Portability: Request your data in a machine-readable format. The app provides a data export/backup feature.
Opt-Out of GPS Tracking: You may disable GPS trip tracking at any time through the app settings or by revoking location permissions on your device. The core vehicle history features work without GPS tracking.
Opt-Out of Notifications: Disable push notifications through your device settings.
Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.

7. Children's Privacy

MOTRaxis is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us to have it removed.

8. Cookies & Tracking

The MOTRaxis mobile apps do not use cookies. Our landing page website does not use tracking cookies or third-party analytics. Firebase Cloud Messaging uses device tokens solely for push notification delivery.

9. International Data Transfers

MOTRaxis operates in multiple countries (Pakistan, UAE, Saudi Arabia, Oman, United States, Canada, United Kingdom, Australia). Your data may be processed in a country different from where you reside. We ensure appropriate safeguards are in place for international data transfers in compliance with applicable data protection laws.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email or in-app notification at least 14 days before changes take effect. The "Last Updated" date at the top reflects the most recent revision.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at:

Email: privacy@motraxis.app
Company: Softwairz