Privacy Policy

This Privacy Policy explains how Motoko ("we", "us") handles personal information collected through the Motoko website, application, authentication, and purchasing flows for Motoko Base.

Motoko Base is a commercial SaaS starter. Depending on how you interact with Motoko, some processing is performed by Motoko and some by third-party providers you or Motoko configure.

Depending on how you use Motoko, we may process information such as:

We do not intentionally invent additional collection categories beyond what the Motoko product and its integrations actually use.

• Account information (for example name and email address)
• Profile information provided by OAuth providers when you sign in with Google or GitHub
• Authentication and session information
• Billing and purchase information handled through our payment provider
• Product analytics and event information
• Technical information such as browser, device, and similar request metadata
• Information you voluntarily provide when you contact Motoko (for example by email)

Users may authenticate using email and password, and—when configured—Google or GitHub OAuth. OAuth providers may share profile information such as name, email address, and profile identifiers with Motoko according to the provider's settings and your account permissions.

Payments for Motoko are handled through Polar (opens in a new tab). Motoko does not store payment card numbers. Polar processes purchase and billing-related information under its own Privacy Policy (opens in a new tab) and Terms (opens in a new tab).

Motoko may use Resend (opens in a new tab) to send transactional emails such as email verification, password reset, and other account-related messages. See Resend's Privacy Policy (opens in a new tab) for how it processes email delivery data.

Motoko may use PostHog (opens in a new tab) for product analytics and event tracking to understand product usage and improve Motoko. Analytics integrations may be optional or inactive when not configured. See PostHog's Privacy Policy (opens in a new tab).

Motoko may use Sentry (opens in a new tab) to process technical and error information that helps diagnose application problems. Monitoring may be optional or inactive when not configured. See Sentry's Privacy Policy (opens in a new tab).

Where file upload features are used, Motoko may store uploaded files with Cloudflare R2 (opens in a new tab). See Cloudflare's Privacy Policy (opens in a new tab).

Motoko includes AI-ready architecture using the Vercel AI SDK (opens in a new tab). When AI features are enabled, prompts and related content may be sent to third-party AI providers configured for that feature. Motoko does not hard-code a single AI vendor as the default for all deployments; the provider depends on configuration.

Motoko uses cookies and similar technologies as needed for core product functions—primarily authentication and session management. Analytics or monitoring tools, when configured, may also set their own cookies or local identifiers according to those providers' practices. Motoko does not operate an extensive first-party advertising cookie system on the marketing site.

Personal information is retained only as long as reasonably necessary to provide the service, maintain security, meet legal obligations, and support legitimate business purposes such as purchase records and support.

Motoko relies on third-party infrastructure and services (including Polar, Resend, Supabase, Cloudflare, PostHog, Sentry, OAuth providers, and AI providers when configured). Those parties process information under their own privacy policies. Review the links in the sections above and each provider's documentation for details.

Database hosting may use Supabase (opens in a new tab); see Supabase's Privacy Policy (opens in a new tab).

Motoko uses reasonable technical and organizational measures intended to protect personal information. No method of transmission or storage is completely secure, and we cannot promise absolute security.

Depending on where you live, you may have rights under applicable privacy laws regarding access, correction, deletion, or other control over personal information. To make a request, contact us using the details at the bottom of this page. We will respond in accordance with applicable law. This policy does not claim specific certifications or frameworks beyond what applicable law requires.

We may update this Privacy Policy from time to time. The latest version will be published on this page with an updated "Last updated" date.

Questions about this Privacy Policy can be sent using the contact details at the bottom of this page.