Privacy policy
Last updated: 1 October 2026
This privacy policy explains how Innovolabs B.V. (“we”, “us”) processes personal data in connection with the Motivox marketing website (www.motivox.nl) and the Motivox SaaS product (app.motivox.nl). The data processing agreement (DPA) that applies between us and each garage is part of our terms of service, section 7.
1. Controller
Innovolabs B.V.
Edelherthof 16, 4105 VP Culemborg, the Netherlands
Chamber of Commerce (KvK): 97588911
VAT identification number: NL868124047B01
Email: hello@innovolabs.nl
2. Roles: website vs SaaS
- Website & commercial relationship: Innovolabs B.V. is the controller for contact requests, marketing site preferences, and SaaS account, subscription and product-update data we need to provide Motivox to your garage.
- Shop customer data in Motivox: When a garage (tenant) stores personal data of its own customers, vehicles, jobs, and invoices in Motivox, that garage is the controller. Innovolabs B.V. acts as processor for that tenant data under the DPA in our terms. Each shop sees only its own data (tenant isolation).
If you are a customer of a garage that uses Motivox, your garage is your first point of contact for questions about your data (see section 9).
3. Categories of data we process
Depending on how you use Motivox and this website, we may process:
- Contact form / email: name, email address, company name, message content
- Account & subscription: registration details, roles (office / technician), login identifiers, trial and billing status, Stripe customer and subscription identifiers
- Proof of acceptance: the version of the terms and privacy policy you accepted, the time, and the IP address from which you accepted
- Support: tickets and related correspondence
- Product updates: your name, email address, language and role, used to send product and service updates (see section 5)
- Product usage (SaaS): operational logs needed to run and secure the service (e.g. activity log entries your shop generates)
- Tenant business content (as processor): customer and vehicle records, inspections, quotes, work orders, hours, parts, invoices, portal access tokens and one-time login codes, optional payment and accounting connection settings your shop configures
- Signature evidence (as processor, for the garage): when a customer approves a quote in the customer portal, we record the consent, time, IP address, browser details (user agent) and the approved PDF as evidence for the garage
- Website preferences: theme preference stored in the browser (
localStorage), not used for advertising profiles - Website server logs: technical data such as IP address and request time, processed by Vercel, the hosting provider of this website, to deliver and secure it
We do not sell personal data. We do not use profiling or make automated decisions with legal or similarly significant effects about you.
4. Purposes and legal bases
| Purpose | Examples | Legal basis (AVG/GDPR) |
|---|---|---|
| Respond to enquiries | Contact form, email | Legitimate interest / pre-contractual steps |
| Provide the SaaS | Accounts, portals, hosting, backups, one-time login codes | Contract |
| Billing | Stripe subscription, VAT invoices for Motivox fees | Contract / legal obligation |
| Proof of acceptance | Version and IP address when you accept the terms | Legitimate interest (proving what was agreed) |
| Security & abuse prevention | Access control, MFA, malware scanning of uploads, audit trails | Legitimate interest / contract |
| Product and service updates | Emails about new features and changes in Motivox to existing account holders | Legitimate interest; Telecommunicatiewet art. 11.7 (existing customers) |
| Product improvement (limited) | Fixing defects, reliability | Legitimate interest |
| Legal compliance | Bookkeeping, responding to lawful requests | Legal obligation |
Providing the data needed for an account and billing is necessary to use Motivox. Where we rely on legitimate interest, you may object (section 9). Where we rely on consent (if ever asked for a specific optional use), you may withdraw it without affecting prior lawful processing.
5. Recipients and processors
We use service providers that process data on our instructions:
| Provider | Purpose | Location / notes |
|---|---|---|
| Hetzner Online GmbH | Hosting of the Motivox application, database and files | Data centres in Falkenstein and Nuremberg, Germany (EU) |
| SiteGround | Email delivery (SMTP) for account, billing and product emails | Processes recipient email addresses and message content |
| Stripe | Motivox subscription billing (Innovolabs → garage), including Stripe Tax | Acts as processor for us and as independent controller for its own payment, fraud-prevention and legal obligations; may process data outside the EEA |
| Vercel Inc. | Hosting and delivery of the marketing website | Processes technical request data such as IP address; a US company, so data may be processed outside the EEA |
Optional tools your shop connects (Mollie, Tikkie, Exact Online, Moneybird, e-Boekhouden, RDW lookups) process data under the shop’s own configuration and the provider’s terms; they are not our subprocessors.
Product updates. We send product and service updates only to existing account holders (garage staff), never to end customers. Every update email states why you receive it and contains an unsubscribe link; you can also switch updates off in your profile settings at any time. Emails that are necessary for the service (account confirmation, password reset, billing) are not affected by that choice. We keep a send log for 365 days to prove delivery and honour opt-outs.
We share data only when needed for the purposes above, or when required by law.
6. International transfers
Motivox is hosted in Germany. Some of our providers (such as Stripe and Vercel) may process data outside the EEA. Where that happens, we rely on an adequacy decision or appropriate safeguards such as EU Standard Contractual Clauses, as required by the AVG.
7. Retention
- Contact messages: up to 12 months after your request is handled, unless a longer period is needed (e.g. ongoing conversation or legal claim).
- SaaS accounts: for the duration of the subscription. When a garage owner deletes the garage account, a 14-day grace period applies before the data is deleted.
- Billing records: 7 years, as required by Dutch tax and bookkeeping rules.
- Proof of acceptance: for the duration of the account and 5 years afterwards, for dispute handling.
- Product update send log: 365 days.
- Tenant business data: retained while the garage account is active, subject to the shop’s own retention setting and our processor instructions. After termination we delete or anonymise it as described in the DPA, unless law requires longer storage. Invoices may be retained by the garage for fiscal reasons even when personal contact data is anonymised.
- Backups: deleted data disappears from backups in the normal backup rotation.
8. Security
We apply organisational and technical measures appropriate to a multi-tenant SaaS product, including authentication and optional multi-factor authentication, role separation, encryption in transit, tenant isolation of data, malware scanning of uploads, and hosting in the EU. No method of transmission or storage is completely secure; please use strong passwords and enable MFA for staff accounts.
9. Your rights
Under the AVG you may have the right to access, rectification, erasure, restriction, objection, and data portability, and to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
- For website / Innovolabs account requests: use the contact form or hello@innovolabs.nl. We respond within one month.
- For data your garage holds about its customers in Motivox: contact that garage first. The garage can export or anonymise customer data in Motivox. If you contact us directly, we will forward your request to the garage.
10. Cookies and local storage
Motivox only uses cookies and browser storage that are needed to run the service or to remember your settings. We do not use advertising or tracking cookies, and we do not use analytics that follow you across websites. Because of this, we do not show a cookie banner.
This website uses localStorage only to remember your light/dark theme preference. It is strictly functional.
The Motivox application uses the following:
| Name | Type | Purpose | Retention |
|---|---|---|---|
GarageApp.Auth | Cookie, necessary | Keeps staff signed in | Session / until sign-out or expiry |
GarageApp.Customer | Cookie, necessary | Keeps customers signed in to the customer portal | Session / until sign-out or expiry |
GarageApp.AntiXsrf | Cookie, necessary | Protects forms against cross-site request forgery | Session |
gm_mode | Cookie, functional | Remembers your chosen work mode | 1 year |
.AspNetCore.Culture | Cookie, functional | Remembers your language | 1 year |
gm_signed_in | Cookie, functional | Lets this website show "Open app" instead of "Log in" when you are signed in. Contains only a timestamp, no personal data | Up to 8 hours, removed when you sign out |
garageapp.themePreference | Local storage, functional | Remembers light/dark theme | Until you clear it |
| Menu and tour state | Local storage, functional | Remembers whether the side menu is open and whether you finished the first-run tour | Until you clear it |
Payments. When you pay or manage a subscription, our payment provider Stripe loads its script on our pages and may set cookies to prevent fraud and process payments securely. These are necessary for the payment to work. See Stripe's privacy policy for details.
Fonts. Fonts are served from our own servers. No data is sent to font providers.
You can delete or block cookies and local storage in your browser settings. If you block the necessary cookies, you will not be able to sign in.
11. Children
Motivox and this website are aimed at businesses. We do not knowingly collect personal data from children.
12. Changes
We may update this policy when our practices or the law change. The “Last updated” date at the top will change. Material changes will also be communicated via the website or by email.
13. Contact
Innovolabs B.V., Edelherthof 16, 4105 VP Culemborg, KvK 97588911, hello@innovolabs.nl