Motorledger keeps your car's service history. This page says what we collect to do that, where it goes, and how to get it back or delete it. Short version: your records are yours, we don't sell them, and nothing about you is on a public page unless you put it there.
| Data | Why | Where it comes from |
|---|---|---|
| Email address | Sign-in (magic link), receipts for Pro, reminder emails | You |
| Vehicle details: year, make, model, trim, color, odometer, VIN or chassis number, nickname | Identify your car and look up its recommended service schedule | You, or decoded from the VIN through the U.S. NHTSA vPIC service |
| Receipt and document photos | Read the service, shop, date, odometer, and cost; keep the original attached to the record | Your camera, photo library, or an email you forward |
| Extracted record data | The service history itself | Produced from your photos by an AI model (see Processors) |
| Forwarded emails | Email-in filing at your personal in.motorledger.co address | Mail you forward from a verified address |
| Push token and notification settings | Service-due reminders | Your device, if you allow notifications |
| Subscription status | Know whether you're on Free or Pro | Stripe or Apple. We never see or store your card number. |
| Basic usage and error logs | Keep the app working and fix bugs | Your device and browser, automatically |
We do not collect your location, contacts, or driving data, and we do not read your calendar or other apps.
We do not sell personal data, and we do not share it with advertisers, insurers or data brokers. We do not use your photos or records to train AI models.
These companies handle data on our behalf, under contracts that limit them to doing so for us:
| Processor | What they do |
|---|---|
| Supabase | Database, authentication, and file storage (U.S. region) |
| Anthropic | Reads receipt photos and forwarded emails to extract record fields. Images are sent for processing and not retained for training. |
| Stripe | Payments and subscription billing on the web |
| Apple | App distribution; in-app purchases where offered |
| OneSignal | Push notification delivery |
| Postmark | Sending magic links and reminder emails; receiving forwarded receipts |
| Vercel | Hosting for the web app and shared dossier pages |
| Sentry | Crash and error reports, used to fix bugs. No email, name, photos, or record contents are sent. |
| NHTSA vPIC | Decoding a VIN into year, make, model, and trim (a public U.S. government API; only the VIN is sent) |
If you create a shareable dossier link, anyone with the link can see the car's year, make, model, service records (date, odometer, service, shop name), and receipt images with names, addresses, phone numbers, and card digits blurred. Your name, email, and address are never on the page. The VIN shows only its last five characters unless you choose to show it in full. Costs show only if you turn them on. You can set an expiry and revoke a link at any time from your account, which takes the page down immediately.
When you hand a car's history to its next owner, the service records and receipts you choose to include move to their account. Your notes and what you paid do not transfer unless you turn that on. Once transferred, the new owner controls those records.
Wherever you live, you can ask us to access, correct, export, or delete your personal data, or to stop a particular use of it, by emailing hello@motorledger.co. We answer within 30 days. Texas residents have these rights under the Texas Data Privacy and Security Act; California residents under the CCPA; EU and UK residents under the GDPR. We don't sell or share data for targeted advertising, so there is nothing to opt out of on that front. If you're in the EU or UK, our lawful bases are performance of our contract with you (running the product) and legitimate interest (keeping it working and secure).
Data is encrypted in transit and at rest. Photos are stored in private buckets and served through short-lived signed links. Access inside Motorledger is limited to what's needed to support you, and we log it.
Motorledger is for adults who own or maintain vehicles. We don't knowingly collect data from anyone under 16. If you think a child has created an account, email us and we'll remove it.
If this policy changes in a way that matters, we'll email you before it takes effect and keep the previous version available on request.
[Motorledger LLC], [address], Texas. hello@motorledger.co.