Privacy Policy

Last updated: 27 September 2026

01Who this notice is for

This Privacy Policy explains how Binary Bunch Ltd, trading as AutoMauve ("AutoMauve", "we", "us", or "our"), collects and uses personal data when you use our website, web dashboard, mobile app, support channels, billing flows, and related services.

Binary Bunch Ltd is registered in England and Wales under company number 17215831. Our registered office is 66 Paul Street, London, EC2A 4NA.

AutoMauve is a fleet inspection, defect, support, billing, and compliance platform. Some data is provided directly by you. Some data is provided by your employer, customer organisation, fleet operator, or another authorised account administrator. Some data is generated when you use the product.

02Controller and processor roles

Where we are the controller

We decide how and why we use personal data for our public website, waitlist, sales/contact forms, account administration, support, billing, security, service communications, product telemetry, and our own legal or business administration.

Where your organisation is the controller

For fleet records entered into AutoMauve by or for a customer organisation, that organisation normally decides why the data is collected and how long it should be kept. In those cases we act mainly as a processor and handle the data on the organisation's instructions, subject to our service terms and any data processing agreement in place.

Driver and employee data

If your employer or fleet operator uses AutoMauve to manage vehicle checks, incidents, defects, sites, vehicles, trailers, alerts, or compliance records, you should normally contact that organisation first about access, correction, deletion, or internal policy questions. We can help route a request where appropriate.

03Personal data we collect

Account, identity, and user profile data

  • Name, email address, phone number, role, permissions, user status, assigned sites, assigned vehicle, and account preferences.
  • Authentication and session data, including sign-in state, security events, password reset activity, and OAuth/OIDC data handled through AutoMauve Identity.
  • Driver profile details where your organisation records them, such as licence details, licence expiry, certification records, or assignment history.

Company, site, and fleet data

  • Company name, company contact details, billing contact details, address, phone number, operator licence information, and plan/subscription status.
  • Site names, site codes, addresses, countries, postcodes, and contact details.
  • Vehicle and trailer information such as registration, make, model, colour, VIN where used, status, assigned sites, odometer unit, MOT, tax, insurance, maintenance, and compliance dates.

Inspection, defect, incident, and evidence data

  • Check report details including driver name or ID, vehicle or trailer registration, question-set answers, notes, odometer readings, defect status, incident follow-up, rectification details, rejection evidence, and report names.
  • Photos, file uploads, support attachments, signatures, generated PDFs, and related blob storage references.
  • Operational context such as timestamps, duration, site, location name, location coordinates where captured, weather, device model, app version, and sync status.

Website, sales, support, and waitlist data

  • Contact form and support form details, including your name, email address, company name, category, subject, message, fleet size, current driver-check methods, defect process, and compliance deadlines.
  • Register-interest or waitlist details, including email address, contact name, company name, source page, and related confirmation or notification email records.
  • Support ticket content, replies, statuses, priorities, categories, attachments, and the names and email addresses of ticket participants.

Billing, payment, usage, and device data

  • Subscription plan, checkout state, invoices, payment status, Stripe customer identifiers, subscription identifiers, and payment method identifiers. Full card details are handled by Stripe rather than stored by AutoMauve.
  • IP address, browser and device information, pages visited, referrers, cookie preferences, local or session storage preferences, and diagnostic data.
  • Product analytics events such as onboarding, checkout, billing, vehicle, trailer, question-set, defect, report, and user-management activity. These events may include pseudonymous user IDs, company IDs, object IDs, and operational metadata needed to understand and improve the service.

04How we use personal data

We only use personal data where we have a lawful basis under UK GDPR or where we process customer-controlled data under a customer's instructions. The main purposes are:

Providing and administering AutoMauve

We use account, company, fleet, inspection, support, and app data to create accounts, authenticate users, enforce roles and permissions, deliver web and mobile workflows, sync records, generate reports, provide support, and administer subscriptions. The usual lawful basis is performance of a contract or our legitimate interests in operating the service. For customer-controlled fleet records, the customer determines the main lawful basis.

Fleet compliance and operational records

We process vehicle checks, defect evidence, incident reports, rectification records, alerts, certifications, and compliance dates so customer organisations can manage fleet readiness and compliance evidence. Depending on the organisation and record, the customer may rely on contract, legal obligation, legitimate interests, employment-related duties, or another lawful basis.

Billing, accounting, and payment processing

We use billing and subscription data to create checkout sessions, maintain subscriptions, issue invoices, process renewals or cancellations, recover failed payments, and keep financial records. The usual lawful bases are performance of a contract, legal obligation, and legitimate interests.

Security, abuse prevention, and reliability

We use logs, device data, identifiers, file metadata, and product activity to protect accounts, investigate errors, prevent abuse, maintain tenant isolation, debug sync and support issues, and keep the platform reliable. The usual lawful bases are legitimate interests and, where applicable, legal obligation.

Product analytics and improvement

We use analytics and diagnostic data to understand how the product is used, measure onboarding and billing flows, identify defects in the product, prioritise improvements, and understand feature adoption. We use consent where required for non-essential cookies or browser storage, and legitimate interests for necessary operational telemetry that does not require cookie consent.

Service, support, sales, and marketing communications

We use contact, waitlist, and support data to respond to enquiries, send account or service notices, confirm waitlist registrations, notify you about AutoMauve launch or product updates where permitted, and maintain suppression records. We use consent, legitimate interests, contract, or the PECR soft opt-in rules depending on the message and relationship. You can opt out of marketing at any time.

Legal, regulatory, and business administration

We may use personal data to comply with law, respond to lawful requests, enforce agreements, resolve disputes, protect rights, support audits, maintain insurance, and manage corporate transactions. The lawful bases are legal obligation and legitimate interests.

05Cookies, analytics, and storage

We use essential cookies and similar browser storage for security, authentication, session management, cookie consent, and core product functionality. We also use local storage and session storage for preferences such as theme, dashboard UI state, onboarding state, and temporary workflow state.

Optional analytics and advertising cookies or browser storage are controlled through the cookie banner where available. Some signed-in product telemetry is collected server-side as operational service analytics and is not controlled by browser cookie settings. See our Cookie Policy for more detail and to manage preferences.

06Who we share personal data with

We do not sell personal data. We share personal data only where needed to provide, secure, bill for, or administer AutoMauve, or where law permits or requires it.

  • Customer organisations and authorised users: account administrators, managers, drivers, and support staff may see records according to their organisation, company, role, permission, and site or asset assignment.
  • Hosting, infrastructure, and storage providers: including Microsoft Azure services used for hosting, databases, application configuration, Service Bus, storage, logging, and file handling.
  • Identity, email, analytics, and payment providers: including services used for authentication, transactional email, Postmark delivery, PostHog analytics, Stripe billing or payment processing, and Google Ads conversion measurement if you allow advertising cookies.
  • Professional advisers and business operations: accountants, lawyers, auditors, insurers, banks, and other advisers where needed for business administration.
  • Regulators, authorities, and legal recipients: where required by law, court order, regulatory request, legal process, or to protect rights, safety, security, or prevent fraud.
  • Corporate transactions: prospective or actual buyers, investors, successors, or advisers if we restructure, merge, sell, or transfer part of the business, subject to appropriate safeguards.

07International transfers

AutoMauve is built for UK and European customers, but some service providers, support operations, or subprocessors may process personal data outside the UK or European Economic Area. Where this creates a restricted transfer, we use appropriate safeguards such as adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to EU Standard Contractual Clauses, or equivalent contractual and technical safeguards.

08How long we keep personal data

We keep personal data only for as long as needed for the purposes described in this notice, unless a longer period is required or permitted by law, a customer contract, legal hold, dispute, audit, or regulatory requirement.

  • Account, company, and subscription records are normally kept while the account or customer relationship is active, then for up to six years where needed for contract, audit, tax, legal, or dispute purposes.
  • Billing, invoice, payment, and accounting records are normally kept for up to six years after the end of the relevant financial year, or longer if required by law.
  • Fleet, inspection, defect, incident, support, evidence, and compliance records are kept according to the customer organisation's instructions, subscription settings, service terms, and operational backup schedules.
  • Public contact, support, and sales enquiries are normally kept for up to two years after the last interaction unless they become part of an account, contract, dispute, or support history.
  • Waitlist and marketing records are kept until you unsubscribe, we no longer need them for the launch or customer relationship, or we need to keep minimal suppression information to respect an opt-out.
  • Analytics, diagnostic, and security logs are kept for a limited period appropriate to the service, security, debugging, and reporting need, then deleted, aggregated, or anonymised where practical.

09Your rights

Deleting your sign-in account removes your credentials and company access. It does not delete your company, cancel its subscription, or erase company-controlled checks, driver-name evidence, assignments, certifications, defects and support history. Existing analytics and necessary records or logs remain subject to this notice and applicable retention rules. Contact us separately if you wish to make a broader request about your personal data.

Depending on the data, your relationship with AutoMauve, and the applicable law, you may have rights to:

  • access your personal data and receive a copy;
  • correct inaccurate or incomplete personal data;
  • ask for personal data to be deleted;
  • restrict or object to certain processing;
  • receive certain data in a portable format;
  • withdraw consent where we rely on consent;
  • object to direct marketing at any time;
  • complain to the UK Information Commissioner's Office or another relevant supervisory authority.

Some rights are limited, especially where data is needed for legal obligations, security, billing, dispute resolution, fleet compliance evidence, or where we process the data on behalf of your organisation. If your request relates to data controlled by your employer or fleet operator, we may need to direct the request to that organisation.

10Security

We use technical and organisational measures designed to protect personal data, including HTTPS/TLS in transit, access controls, role and permission checks, tenant isolation, private storage for sensitive files, logging and monitoring, secure credential handling, and operational controls around backups and support access. No internet service can be guaranteed to be completely secure, but we work to keep risks proportionate to the data we handle.

11Automated decisions

We do not use personal data to make solely automated decisions that produce legal or similarly significant effects about you. AutoMauve may automatically apply product rules such as role permissions, plan limits, billing status, sync status, alerts, fraud prevention checks, or validation rules so the service can operate correctly.

12Children

AutoMauve is a business and fleet operations service. It is not directed at children, and we do not knowingly collect personal data from children through our public website or product sign-up flows.

13Changes to this notice

We may update this Privacy Policy as our product, providers, legal obligations, or processing activities change. If we make a material change, we will take reasonable steps to bring it to the attention of affected users or customer organisations before the change applies where required.

14Contact us

For privacy questions, data protection requests, marketing opt-outs, or cookie questions, contact us at:

[email protected]

You can also complain to the UK Information Commissioner's Office at ico.org.uk if you are unhappy with how your personal data has been handled.