Privacy Policy — MotoTribe

Legal Document

Effective Date: 1 January 2025 · Last Updated: June 2025 · Platform: MotoTribe India

Your privacy matters to us. This policy explains what information MotoTribe collects, how it is used, and your rights over your data — in plain language. MotoTribe is compliant with India's Digital Personal Data Protection Act, 2023 (DPDPA).

01. Who We Are

MotoTribe ("we", "us", "our") is an online motorcycle riding community platform operated for Indian riders. For the purposes of data protection, MotoTribe acts as the Data Fiduciary for information collected through this platform.

02. Data We Collect

We collect only what is necessary to operate the community. Here is a summary:

Data Type	Examples	Purpose
Identity Information	Name, phone number, email address	Membership application, tribe access requests
Bike Information	Make, model, photos uploaded by you	AI Bike Identifier feature, community profiles
Ride Logs	Date, distance, route notes (submitted voluntarily)	Solo rider log feature
Usage Data	Tribe entered, page views, feature interactions	Anonymous analytics to improve the platform
Device & Technical Data	Browser type, device type, IP address (anonymised)	Security, debugging, PWA functionality
Content You Post	Messages, images, comments in tribe portals	Community features

We do not collect government ID numbers, financial information, or precise GPS location data.

03. How We Collect Data

Directly from you — when you submit a membership or access request form.
From your use of the platform — tribe entry events, feature usage, uploaded images.
From your browser/device — standard technical data via Supabase and Vercel infrastructure.
We use local storage in your browser to remember preferences (e.g., tribe selection, PWA install status). This is not a tracking cookie and is stored only on your device.

04. How We Use Your Data

To process tribe membership and access requests.
To enable community features within tribe portals.
To operate the AI Bike Identifier (images are sent to Groq's API for processing and are not stored by us).
To generate anonymous platform analytics (tribe traffic, feature usage) for internal improvement.
To communicate with you regarding your membership status (via tribe admin contact).
To maintain security and prevent abuse of the platform.

We do not use your data for advertising, profiling, or sale to third parties.

05. Third-Party Services

MotoTribe uses the following third-party infrastructure. Each has its own privacy policy:

Supabase — Database & backend (stores membership requests, access tokens, platform config). Data is stored on Supabase servers. Supabase Privacy Policy →
Vercel — Hosting & deployment. Vercel Privacy Policy →
Groq — AI processing for Bike Identifier. Photos you upload are sent to Groq's API. We do not store them. Groq Privacy Policy →
Google Fonts — Typography delivery. Google Privacy Policy →

06. Data Retention

Membership & access request data — retained for the duration of your active membership, plus up to 12 months after deactivation for administrative purposes.
Ride logs — retained until you request deletion.
Usage analytics — retained in aggregated, anonymised form indefinitely.
Uploaded images (Bike Identifier) — not stored by MotoTribe; processed transiently by Groq.

07. Your Rights Under DPDPA 2023

As a Data Principal under India's Digital Personal Data Protection Act, 2023, you have the right to:

Access — request a summary of personal data we hold about you.
Correction — request correction of inaccurate or incomplete data.
Erasure — request deletion of your personal data, subject to legal obligations.
Grievance Redressal — raise a complaint with our Data Protection Officer (contact below).
Nomination — nominate another person to exercise your rights on your behalf.

To exercise any of these rights, contact your tribe admin or reach out through the platform. We will respond within 30 days.

08. Children's Privacy

MotoTribe is intended solely for adults aged 18 and above. We do not knowingly collect personal data from minors. If you believe a minor has submitted information through this platform, please contact us immediately for deletion.

09. Security

We implement reasonable technical and organisational measures to protect your data, including:

Passwords stored as SHA-256 hashes — never in plain text.
API keys and access tokens stored encrypted in Supabase.
HTTPS enforced across the platform via Vercel.
Row-level security policies on the database.

No system is perfectly secure. We encourage you not to share your access credentials with anyone.

10. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or applicable law. Significant changes will be communicated through the platform. The "Last Updated" date at the top of this page always reflects the most recent revision. Continued use of MotoTribe after any update constitutes acceptance of the revised policy.

11. Contact & Grievance Officer

For any privacy-related queries, data requests, or grievances, contact the MotoTribe Data Protection Officer through your tribe portal. We aim to resolve all complaints within 30 days as required under DPDPA 2023.

For formal complaints unresolved by us, you may approach the Data Protection Board of India once constituted under the Act.