Motorical

Privacy Policy

Last updated: November 17, 2025

At Motorical, we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our email delivery platform and related services ("Service"). By using the Service, you consent to the data practices described in this Privacy Policy.

1. Information We Collect
1.1 Account Information
When you create an account, we collect:
  • Name (first name and last name)
  • Email address
  • Company name (optional)
  • Password (stored as a bcrypt hash, never in plain text)
  • Email verification status
1.2 Authentication and Session Data
To maintain your session and secure your account, we collect:
  • Refresh tokens (stored in secure HttpOnly cookies)
  • Access tokens (stored in memory only, never persisted)
  • Session identifiers
  • Login timestamps and IP addresses
  • Failed login attempt logs (for security purposes)
1.3 Email and Delivery Data
When you use our email delivery services, we process:
  • Email Content: Subject lines, body text (HTML and plain text), attachments, and headers
  • Recipient Information: Email addresses of recipients
  • Sender Information: From addresses and reply-to addresses
  • Delivery Metadata: Message IDs, timestamps, delivery status (sent, delivered, bounced, failed), bounce codes and messages, complaint reports
  • Analytics Data: Open rates, click rates (for Communications Block campaigns), delivery rates, bounce rates, complaint rates
1.4 Domain and Configuration Data
We collect and store:
  • Domain names you register and verify
  • DKIM public and private keys (private keys encrypted at rest)
  • SPF and DMARC records
  • DNS verification tokens
  • Motor Block configurations (SMTP credentials, rate limits, settings)
  • API keys and credentials (encrypted at rest)
1.5 Usage and Analytics Data
We collect usage metrics to provide and improve our services:
  • Email volume (sent, delivered, bounced, failed)
  • API usage statistics
  • Feature usage (which features you use and how often)
  • Performance metrics (delivery times, queue lengths)
  • Domain reputation scores and monitoring data
  • Campaign performance data (for Communications Block users)
1.6 Billing and Payment Information

For paid subscriptions, we collect billing information through Stripe, our payment processor:

  • Stripe customer ID and subscription ID
  • Subscription plan details
  • Billing period dates
  • Payment status
  • Billing events and transaction history

Note: We do not store credit card numbers or payment card details. All payment information is processed securely by Stripe in accordance with PCI DSS standards.

1.7 Technical and Log Data
We automatically collect technical information:
  • IP addresses
  • Browser type and version
  • Device information
  • Operating system
  • Referrer URLs
  • Access times and dates
  • Error logs and diagnostic information
  • Service health and performance metrics
2. How We Use Your Information
2.1 Service Provision
We use your information to:
  • Provide, operate, and maintain the email delivery platform
  • Process and deliver emails through our SMTP gateway
  • Manage domain verification and email authentication (DKIM, SPF, DMARC)
  • Provide email analytics and delivery intelligence
  • Manage Motor Blocks and SMTP configurations
  • Provide Communications Block features (campaigns, templates, lists)
  • Provide Encrypted IMAP mailbox services (where applicable)
  • Process API requests and manage API access
2.2 Account Management
We use your information to:
  • Create and manage your account
  • Authenticate your identity and maintain secure sessions
  • Process subscription payments and manage billing
  • Send account-related notifications (verification emails, password resets, security alerts)
  • Provide customer support
2.3 Security and Fraud Prevention
We use your information to:
  • Detect and prevent fraud, abuse, and unauthorized access
  • Monitor for spam, phishing, and malicious content
  • Enforce rate limits and prevent service abuse
  • Investigate security incidents and violations
  • Protect the integrity and security of our infrastructure
2.4 Service Improvement
We use aggregated and anonymized data to:
  • Analyze usage patterns and trends
  • Improve service performance and reliability
  • Develop new features and functionality
  • Optimize email delivery and deliverability
  • Conduct research and analytics
2.5 Legal Compliance
We use your information to:
  • Comply with applicable laws, regulations, and legal processes
  • Respond to legal requests and court orders
  • Enforce our Terms of Service and Acceptable Use Policy
  • Protect our rights, property, and safety, and that of our users
3. How We Share Your Information
3.1 Service Providers

We share information with trusted third-party service providers who assist us in operating the Service:

  • Stripe: Payment processing and billing management. Stripe processes payment information in accordance with PCI DSS standards. See Stripe's Privacy Policy for details.
  • Hosting Providers: We use cloud hosting providers to store and process data. All data is stored in secure, encrypted databases.
  • Email Infrastructure: We use Postfix, OpenDKIM, and other email infrastructure components to deliver emails. Email content passes through these systems for delivery.
3.2 Legal Requirements

We may disclose your information if required by law or in response to valid legal requests, including:

  • Court orders, subpoenas, or other legal processes
  • Government or regulatory requests
  • To protect our rights, property, or safety
  • To investigate fraud or security issues
  • To enforce our Terms of Service
3.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you of any such change in ownership or control of your personal information.

3.4 With Your Consent

We may share your information with third parties when you explicitly consent to such sharing.

3.5 What We Do NOT Share

We do not sell, rent, or trade your personal information to third parties for marketing purposes. We do not share email content, recipient lists, or personal data with advertisers or data brokers.

4. Data Security

We implement industry-standard security measures to protect your information:

  • Encryption: Data in transit is encrypted using TLS/SSL. Sensitive data at rest (passwords, API keys, DKIM private keys) is encrypted.
  • Authentication: We use secure authentication methods, including bcrypt password hashing and JWT tokens.
  • Access Controls: We limit access to personal information to authorized personnel who need it to provide the Service.
  • Network Security: Our infrastructure is protected by firewalls, intrusion detection, and other security measures.
  • Regular Audits: We conduct regular security audits and vulnerability assessments.
  • Secure Cookies: We use HttpOnly, Secure, and SameSite cookies for session management.

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

5. Cookies and Tracking Technologies

We use cookies and similar technologies to provide and improve the Service. For detailed information about our use of cookies, please see our Cookie Policy.

Summary:
  • Essential Cookies: Required for authentication and session management (HttpOnly refresh cookies)
  • Functional Cookies: Store user preferences and settings
  • Analytics Cookies: Optional Google Analytics cookies (only if you enable tracking in Communications Block campaigns)
  • No Third-Party Advertising Cookies: We do not use advertising or tracking cookies for marketing purposes
6. Data Retention

We retain your information for as long as necessary to provide the Service and comply with legal obligations:

  • Account Information: Retained while your account is active and for a reasonable period after account closure to comply with legal obligations.
  • Email Logs: Retained for a minimum of 90 days for delivery tracking and analytics. May be retained longer for business and legal purposes.
  • Billing Records: Retained for 7 years as required by tax and accounting laws.
  • Security Logs: Retained for security and fraud prevention purposes.

You may request deletion of your data by contacting support, subject to our legal retention requirements.

7. Your Privacy Rights
7.1 Access and Portability

You have the right to access your personal information. You can view and update most account information through your dashboard. You may also request a copy of your data in a portable format.

7.2 Correction and Updates

You can update your account information (name, email, company) through your dashboard settings. You are responsible for keeping your information accurate and up to date.

7.3 Deletion

You may request deletion of your account and associated data by contacting support. We will delete your information subject to our legal retention requirements (e.g., billing records must be retained for tax purposes).

7.4 Opt-Out of Marketing Communications

You can opt out of marketing emails by:

  • Updating your notification preferences in your account settings
  • Clicking the unsubscribe link in marketing emails
  • Contacting support

Note: You cannot opt out of essential service-related communications (e.g., account verification, security alerts, billing notifications).

7.5 GDPR Rights (European Users)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

  • Right to Access: Request a copy of your personal data
  • Right to Rectification: Correct inaccurate or incomplete data
  • Right to Erasure: Request deletion of your data ("right to be forgotten")
  • Right to Restrict Processing: Request limitation of data processing
  • Right to Data Portability: Receive your data in a structured, machine-readable format
  • Right to Object: Object to processing of your data for certain purposes
  • Right to Withdraw Consent: Withdraw consent where processing is based on consent

To exercise these rights, contact us at support@motorical.com. We will respond within 30 days.

7.6 CCPA Rights (California Users)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

  • Right to know what personal information is collected, used, and shared
  • Right to delete personal information
  • Right to opt out of the sale of personal information (we do not sell personal information)
  • Right to non-discrimination for exercising your privacy rights
8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. We ensure that appropriate safeguards are in place to protect your information in accordance with this Privacy Policy and applicable data protection laws.

9. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately, and we will delete such information.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of material changes by:

  • Posting the updated Privacy Policy on our website
  • Updating the "Last updated" date
  • Sending an email notification for significant changes

Your continued use of the Service after such changes constitutes acceptance of the updated Privacy Policy.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: support@motorical.com
Subject: Privacy Inquiry

We will respond to your inquiry within 30 days.

By using the Motorical Service, you acknowledge that you have read and understood this Privacy Policy.