Privacy Policy

This policy explains how MotorLoop Pty Ltd(“we”, “us”) handles personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). The Platform is intended for people aged 18 and over and is not directed at children; we do not knowingly collect children’s personal information.

• Account details — name, email address, and password (stored hashed), plus optional phone number, company name, and a profile photo if you add one.
• Listing details — vehicle information, photos, asking price, and general location you choose to publish. Photo files can carry embedded camera metadata such as GPS location — we strip that metadata when you upload, and published photos carry a MotorLoop watermark that may embed the listing’s identifier.
• Enquiries and messages — the content of enquiries and chats between buyers and sellers on the Platform.
• Things you contribute — offers you make on a listing, comments and star ratings you post, and reports you submit about a listing or message (including the reason and any note you add).
• Mailing lists — if you subscribe, your email address and which lists you have joined.
• Usage data — pages viewed, saved cars, saved searches, listings you like, and device and log information (IP address, browser type). How this is collected, including session replay, is described in section 5.

If you enquire about or list a vehicle without an account, we create a basic account from the name and contact details you supply so the seller can respond and you can claim the account later. We do not currently process payments on the Platform; if paid features are enabled, payments will be processed by Stripe — card details go directly to Stripe and we never store full card numbers.

• operating the marketplace — publishing listings and passing enquiries, offers, and messages between buyers and sellers;
• displaying content you choose to post publicly — such as comments, star ratings, and your public @handle — on the relevant listings;
• sending transactional email (enquiry and message notifications, account messages), and marketing or newsletter email only if you have subscribed to a mailing list (you can unsubscribe at any time);
• reviewing reports and moderating content to keep the marketplace safe;
• powering optional AI features when you use them (see section 4);
• understanding usage and improving the Platform (including analytics and session replay — see section 5), preventing fraud and misuse, and meeting legal obligations.

We do not sell your personal information.

When you use the Platform’s AI features — drafting a listing description (including from a photo) or price guidance — the photos, vehicle details, and notes you provide are sent to OpenAI (servers in the United States) to generate the result. Search text may be sent to interpret your query, and price guidance may be generated automatically from a listing’s published details when it is viewed. We do not send your name or contact details. Under our API arrangement with OpenAI, submitted data is not used to train OpenAI’s models. AI on the Platform assists with drafting and guidance only — we do not use automated decision-making that produces legal or similarly significant effects about you.

We use two analytics tools so we can understand page usage, feature adoption, errors, and friction: OpenPanel, for product analytics and session replay, and Google Analytics 4. OpenPanel event data goes only to infrastructure we operate (stats.assetofthings.com), which also serves its script; the session-replay module is loaded from OpenPanel’s servers. Google Analytics is a third-party service operated by Google, which sets cookies in your browser and processes data overseas — it receives the same page and interaction events, but we deliberately withhold personal information from it: Google never receives your email address or the text you type into forms. If you are signed in, OpenPanel events are associated with your user ID, email address, and role, and Google Analytics receives only a randomly generated account identifier plus your role. Analytics records the pages you visit — page addresses can include things like search terms. Session replay reconstructs how you move through and interact with pages — mouse movement, scrolling, clicks, and typing — and may record the text you enter into forms, including entries you do not submit, so we can find and fix problems. OpenPanel events may also include text you enter into forms (including entries you do not submit). We never record your password or payment details, the email address you type into sign-in or password-recovery forms, message content, or the feedback panel. We do not use advertising or remarketing cookies, and we have turned off Google’s advertising features, ad personalisation, and Google Signals. Replays are retained for a limited period (about 30 days) and are accessible only to authorised staff. The control below disables both tools for this browser:

When you enquire on a listing, your name, contact details, and message are shared with that seller. We otherwise disclose personal information only to service providers who help us run the Platform (e.g. hosting and email delivery), where required by law, or with your consent. Some disclosures are overseas: content you submit to AI features goes to OpenAI in the United States, payment processing (when enabled) uses Stripe in the United States, and usage data collected by Google Analytics is processed by Google on servers outside Australia (see section 5 for what we withhold from it). Otherwise our hosting, email delivery, and product analytics run on infrastructure we operate in Australia. Where information goes overseas, we take reasonable steps to ensure it is handled consistently with the APPs.

Authorised MotorLoop staff can access accounts — including signing in as a user — for support, troubleshooting, and platform-integrity purposes. Signing in as a user is recorded in our audit log.

We take reasonable steps to protect personal information from misuse, loss, and unauthorised access. We keep account information while your account is active, and listings, messages, and activity records while they are needed to run the marketplace, handle disputes, and meet legal obligations; when you close your account, or on request, we delete or de-identify personal information within a reasonable period unless the law requires us to keep it. In the event of an eligible data breach we will comply with the Notifiable Data Breaches scheme.

We use strictly necessary cookies to keep you signed in, and local browser storage to remember preferences (such as theme and view settings). We do not use advertising cookies. Analytics is covered in section 5.

You can access and update most of your information from your account dashboard, or contact us to request access to or correction of your personal information, or to make a privacy complaint. We will respond within a reasonable period. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Privacy questions and requests: [email protected].