Privacy policy
We only process the data you give us in the forms, for what you ask of us and with your consent. We do not sell it, and we only share it with a partner if you expressly authorise it.
Last updated:
Data controller
This policy complies with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Personal Data Protection and the guarantee of digital rights (LOPDGDD).
- Controller
- [Razón social o nombre del titular]
- NIF (tax ID)
- [NIF/CIF]
- Address
- [Domicilio social completo]
- Data protection
- privacidad@motorfiable.app
- General contact
- hola@motorfiable.app
What data we process
If you report a fault
- Car and fault details: engine, fault, model and year, kilometres, cost, where it was repaired, province and your description.
- Your email address, only if you choose to give it.
If you request a service
Garage quote, extended warranty, history report or assessment of a claim.
- Name, email address and, if you provide them, telephone number and province.
- Your car and, if you provide it, the registration number or VIN.
- Your message and whether you authorise us to send the request to a partner.
- The page of the website from which you sent the request.
If you write to us
- Name, email address, the reason and your message.
On all forms and while browsing
- An encrypted fingerprint (hash) of your IP address, from which the IP cannot be recovered, to curb mass submissions and abuse.
- Like any web server, the hosting processes technical data about each visit (IP address, browser, requested page) to serve and protect the website.
- We do not use analytics or advertising cookies. Cookie policy.
What we use it for
- Reports: to review them, publish their technical data and calculate statistics for each fault. If you left us your email address, we use it only to clarify your report.
- Requests: to handle them and, only if you authorise it, to send them to the partner providing the service so that they can contact you.
- Messages: to reply to you and, if you alert us to an error, to check it.
- Security: to prevent abuse and automated submissions.
We do not use your data to send you advertising, we do not build profiles and we do not take automated decisions that affect you.
Legal basis
- Your consent (Article 6.1.a GDPR), which you give when you submit each form. You can withdraw it whenever you like.
- Separate, express consent to send your request to a partner: a dedicated checkbox on the form, which is never pre-ticked. Without it, we do not share your request.
- Our legitimate interest (Article 6.1.f GDPR) in protecting the website against abuse, for the encrypted IP fingerprint.
To send us personal data you must be at least 14 years old (Article 7 of the LOPDGDD).
Who we share it with
- Partners, only with your express consent. If you tick the checkbox on a request, we send the partner providing that service (a garage, a warranty provider, a vehicle history report service or a law firm, depending on what you request) the data needed to assist you. From that moment, the partner processes your data as controller, under its own privacy policy.
- Providers who work for us, such as web hosting, the database and the tools through which we receive notifications of new requests. They act as processors, under contract (Article 28 GDPR), and may only use the data to provide us with that service. If any of them is outside the European Economic Area, the transfer is covered by a European Commission adequacy decision or by its standard contractual clauses.
- The authorities, when required by law.
We do not sell or pass on your data to anyone else.
What we publish from reports
From an approved report we publish only its technical data: the car and its year, the engine, the fault, the kilometres, the cost, the type of garage, the description and the date. Statistics for each fault are published in aggregate form.
We never publish your email address, your IP or any data that identifies you. If the description includes personal data (a name, a telephone number, a registration number), we do not publish it.
Diagnosis by text or voice
On the diagnosis page you can describe what is wrong with your car. That description, and the car or engine you indicate, are sent to our artificial intelligence provider (Anthropic) solely to compare them with the documented faults and return the result to you. We do not store the description or link it to your identity, and we do not ask you for personal data: do not enter your name, registration number or telephone number in it.
If you use the microphone, dictation is carried out by your browser’s speech recognition service (for example, Google’s in Chrome or Apple’s in Safari), under its own terms. We only receive the resulting text when you press “Find the fault”. To limit abuse we use an anonymous fingerprint of your IP address (a hash), which does not allow you to be identified.
How long we keep it
| Data | Period |
|---|---|
| Technical data of a report | For as long as the fault remains published on the website. |
| Email address from a report | Until the report is verified and, at most, 12 months from submission. |
| Service requests | The time needed to handle the request and, at most, 12 months from submission. |
| Contact messages | Until your enquiry is resolved and, at most, 12 months from your last message. |
After those periods, we delete the data or keep it blocked only for the limitation periods of any legal liabilities that might arise.
Your rights
You can exercise your rights of access, rectification, erasure, objection, portability and restriction of processing by writing to privacidad@motorfiable.app. Say which right you want to exercise and, if we ask, how to verify your identity. We will reply within one month, extendable by two further months in complex cases (we would let you know).
| Right | What you can ask for |
|---|---|
| Access | To know whether we process your data and obtain a copy. |
| Rectification | To correct inaccurate or incomplete data. |
| Erasure | To ask us to delete your data when it is no longer necessary or you withdraw your consent. |
| Objection | To object to processing based on our legitimate interest. |
| Portability | To receive the data you gave us in a commonly used format or have us send it to another controller. |
| Restriction | To ask us to keep your data without using it while a complaint is being resolved. |
| Withdraw consent | At any time, without affecting the processing carried out before withdrawal. |
Complain to the AEPD
If you believe we have not handled your rights properly, you can lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es. We would be grateful if you would write to us first to try to resolve it.
Security
- The whole website runs over an encrypted connection (HTTPS).
- Only the staff who handle reports and requests can access them, and they need a password. Your IP address is stored only as an encrypted fingerprint.
- We ask only for the data each form needs; everything else is optional.
- If a security breach put your data at risk, we would notify the AEPD (the Spanish data protection authority) and, where required, the people affected, within the GDPR deadlines.
If we change this policy, we will update the date on this page and, if the change is significant, we will say so on the forms.