Motu is software for delivery fleets, operated by Finis Ventures LLC ("Motu", "we"). This policy covers:
- the Motu app, which Runners use on their phones;
- the Fleet panel, which a Fleet's team uses in the browser;
- the Merchant API, through which shops, restaurants and platforms send orders to a Fleet;
- this website, motu.run.
The short version. Motu runs the work between a Fleet, the self-employed Runners who work with it, and the Merchants who send it orders. We collect what that work needs and nothing more. Location is used only while a Runner takes or carries an order, and only the latest point is kept. We don't sell data, we don't show ads, and no automated system suspends, ranks or penalises anyone.
1. Who is responsible for your data
The Fleet is the data controller for the information used to run its deliveries: its Runners' accounts and their substitutes, orders, location while an order is carried, chats, ratings, statistics and decisions about accounts. We act as the Fleet's processor and handle that data only on its instructions.
Merchants are the controllers of their customers' details that they send with an order (the name, address and phone number of the person receiving it). They share them with the Fleet so the order can be delivered, and we process them on the Fleet's behalf.
Runners' invoices. When a Runner authorises it in the app, we prepare and issue the Runner's invoices to the Fleet in the Runner's name. For that, we act on the Runner's instructions.
We are the controller for:
- the technical data we need to run the service securely, such as sign-in records, device push tokens and error logs;
- our contract and billing with each Fleet;
- the messages you send us through this website.
If you are a Runner and want to exercise a right over your data, you can ask your Fleet or write to us directly (section 10). We will pass the request on, or answer it, as the case requires.
2. What we process
Runners and their substitutes
| Data | Why |
|---|---|
| Account: name, username, phone number, city, language and a one-way hashed password | To sign you in and run your account. Your password is also your signature on invoices. |
| Vehicle, and for a motorbike or car your driving licence number and its expiry date | Prices depend on the vehicle, and a motorbike or car needs a valid licence. |
| Tax details: legal name, tax ID (NIF) and fiscal address | To issue your invoices. |
| Agreements you sign in the app, with the version, the date, the IP address and your drawn signature | To prove what was agreed, and when. |
| Online status, and when you go online or offline | To show you open orders, and to answer "why didn't I see this order?" |
| Orders you take, counter, decline or hand back; direct offers; earnings; invoices | To pay you through your invoices and keep an accurate history. |
| Location, only while you take or carry an order (section 3) | To check the Fleet's nearby-first rule when you accept, and to show the order's progress while you carry it. |
| Chat messages with the Fleet's team | To coordinate orders. |
| Ratings: your own average, and the ratings you give Merchants and recipients | Internal to the Fleet (section 4). |
| Records of masked calls: when, which order, how long. Never the numbers, never a recording | To let you call a recipient without seeing their number. |
| Hand-over photo and note, if you add them | Proof of delivery. Photos are deleted after 30 days. |
| Push token and notification records | To alert you about offers and orders addressed to you. |
A substitute who works a Runner's account has their own name, phone number (verified by SMS), password and vehicle, and the orders they carry are recorded as theirs.
The Fleet's team
Name, work email, role, a one-way hashed password, language, and a record of the actions that need one: who released an order, revealed a PIN (with the reason), changed a price or acted on an account.
Merchants
Business name and address, API keys (stored only as hashes), webhook address, and the orders they send.
People receiving deliveries
The Merchant sends us your name, delivery address, phone number and any delivery note, plus a 4-digit PIN for the hand-over. Your phone number never reaches the Runner: calls go through a Motu number, on both sides, and are never recorded. The PIN is never shown to the Runner either; the Fleet's team sees it only through a logged reveal. A Runner may rate the hand-over; that rating stays inside the Fleet and is deleted after 12 months.
Visitors to this website
- Messages you send through the contact form: name, email, company if you give one, and your message. We use them only to reply to you.
- Server logs: our hosting provider processes basic request data (such as IP address and time) for security.
What we do not collect
No advertising identifiers, no cross-app or cross-site tracking, no analytics cookies, no location when a Runner isn't taking or carrying an order, and no payment card numbers.
3. Location
- Not taking or carrying an order: the app sends no location. Open orders reach every online Runner in the city, and the phone itself decides when to show each one under the Fleet's published nearby-first rule.
- Accepting or countering an order: the app sends one point, to check that rule. It is kept only if the accept succeeds, as the first point of the trip; otherwise it is discarded.
- Carrying an order: the app sends a point about every 30 seconds. We keep only the latest point, and we delete it when the last order you carry ends. The app shows when location is being shared.
- Each completed order keeps one point, where it was completed. A cancellation after pickup keeps the point where it happened, to pay the distance driven.
4. Automated systems and human decisions
No automated system decides anything about a Runner's account: there are no automatic suspensions, penalties or rankings, and no acceptance or rejection rates. Account decisions are made by a person at the Fleet, with a written reason the Runner can read and contest.
These parts of the service run automatically, by rules the Fleet publishes and the app explains under "How orders reach you":
- Prices come from the Fleet's published price tables, per vehicle, and every order carries its breakdown.
- Orders go to the first Runner who accepts. When several Runners counter, the earliest counter within the Fleet's limit wins, never the cheapest.
- Nearby first: the phone shows an open order first to Runners near the pickup, then more widely over time.
- Going offline: an app that stays silent for a while (currently 10 minutes) is taken offline.
Ratings and statistics are never used to rank, filter, route, price or pick anyone. A Runner sees the same statistics about themselves that the Fleet sees. A Merchant can ask the Fleet not to send it a particular Runner; that block is recorded by a person, listed in the Runner's data export, and never set automatically.
To ask a person to review a decision, contact your Fleet, or write to contact@motu.run.
5. Device permissions (Motu app)
Each permission is requested only when you first use the feature that needs it:
- Location: only while you take or carry an order (section 3).
- Camera: for the optional hand-over photo. The app asks you to photograph the order, not people.
- Notifications: for offers and orders addressed to you. Notifications never show an address, a person's name, a PIN or anyone's message on the lock screen.
6. Where your data is stored
On Amazon Web Services in the European Union (Ireland). Data is encrypted in transit and at rest, and passwords are stored only as salted one-way hashes. Hand-over photos sit in private storage, reachable only through links that expire.
7. Who we share it with
We don't sell personal data and don't share it for advertising. Inside the service, each party sees only what its role needs: a Runner sees an order's full drop-off address only after accepting it, a Merchant sees a Runner's first name but never their pay, and every Fleet's data is kept apart from every other Fleet's.
We use a small number of providers, strictly to deliver the service:
| Provider | Purpose |
|---|---|
| Amazon Web Services | Hosting, database and file storage (EU) |
| Vercel | Hosting of this website |
| Apple (APNs) and Google (Firebase Cloud Messaging) | Push notifications to phones |
| Brevo | Text messages with sign-in codes for substitutes, and delivery of the messages sent through this website |
| Twilio | Masked phone calls between Runners and recipients, without recordings |
| Stripe | Billing Fleets for the service |
| OpenStreetMap | Map tiles in the Fleet panel's live map |
When a Runner opens an address for directions, it opens in the maps app on their phone, under that app's own terms.
We also disclose data where the law requires it: for example, invoicing records to the tax authority, including the Spanish tax agency's VeriFactu system where it applies.
8. International transfers
Finis Ventures LLC is a company based in the United States. The service's data is stored in the EU. Where a provider processes it outside the European Economic Area, we rely on the European Commission's Standard Contractual Clauses or an equivalent safeguard.
9. How long we keep it
- Location: the latest point only, deleted when the last order a Runner carries ends.
- Hand-over photos: 30 days.
- Ratings of recipients: 12 months.
- Notification records: 7 days. The text of a notification is never stored.
- Accounts: while the account is active. A Runner's session ends after 30 days without use; a team member's after 7 days.
- Orders, chats and the related records: while the Fleet uses Motu and needs them to run its service, settle disputes and meet its legal obligations.
- Invoices and invoicing records: for as long as tax law requires (in Spain, currently up to 6 years). These cannot be deleted on request.
- Messages sent through this website: as long as we need them to answer you.
- Server logs: a short rolling window.
10. Your rights
Under the GDPR you can access, correct, delete, restrict or object to the processing of your personal data, and receive a copy in a portable format. You can also complain to your data protection authority.
- Runners can download everything Motu holds about them from the app ("Download my data").
- To delete your account, see Delete your Motu account.
- Invoices already issued cannot be erased, because tax law requires them to be kept. In that case we restrict the record instead of deleting it and tell you what was kept and why.
We answer requests within 30 days.
11. Security
Encryption in transit and at rest, hashed passwords and PINs, access controls on internal tools, tenant isolation between Fleets, and a log of sensitive actions such as PIN reveals.
12. Children
Runners must be adults. This website and the Motu apps are not meant for anyone under 16, and we do not knowingly collect children's data. If you think a child has shared information with us, write to contact@motu.run and we will delete it.
13. Contact
Questions, requests or complaints about privacy: contact@motu.run. We reply within 30 days.
14. Changes
If we change this policy, we update the date above. For material changes, we tell Fleets in the Fleet panel and Runners in the app before the change applies.