Last updated: 30 July 2026
Motiro is a service built and provided by Code Energy, Inc., a Delaware corporation in the United States. This policy explains what personal data we collect, why, and the rights you have over it.
Two situations matter. When you create an account or visit our website, Code Energy decides how your data is used and is the controller. When you answer a survey as a member of a team, your organization invited you and decides why your data is processed: your organization is the controller and Code Energy processes the data on its behalf. Our Data Processing Agreement, available at /dpa on this site, forms part of the Terms for organizations.
You provide most of it directly: when you register, answer a survey, take an assessment, or write to us.
A team manager may add your email address or phone number so that you can be invited to a survey. Until you respond or register, that contact detail is the only thing linked to you.
We send marketing only if you asked for it, and every marketing message contains a way to opt out.
When Code Energy is the controller, we rely on the following legal bases:
For team-member contacts, survey invitations, and survey answers, your organization is the controller and chooses the applicable legal basis. Code Energy processes that data only on the organization’s documented instructions and to provide Motiro.
To create and use an account, you must provide your name and a reachable email address or phone number so we can authenticate you. Without them, we cannot create or secure the account. Billing information is required only if you choose a paid plan or credit pack. A profile picture, demographic answers, personality assessments, and marketing are optional.
Your organization may provide an email address or phone number to invite you to a survey. Answering a survey is optional from Motiro’s perspective; ask your organization about its reason for running the survey and any workplace requirements that apply.
Motiro can be used for student teams, but it is not offered to children for independent use. If you are under 18, you may answer a survey sent by your school or another organization without creating an account. Create an account only if that organization has invited you and has told you that you may do so.
The organization that invites a child is responsible for choosing a lawful basis, explaining the survey in language the child can understand, and obtaining permission from a parent or guardian where the law requires it. Motiro does not use a child’s survey participation as consent for unrelated purposes, does not show individual answers to managers, and does not track survey-answering pages. A child or their parent or guardian can contact the organization or hi@motiro.com to exercise data protection rights.
Motiro uses Anthropic, an AI provider, to turn survey results into written insights and personal guidance. We send aggregated results, numeric answers, and notes written by managers. Motiro does not add account-profile names, email addresses, phone numbers, or individual survey answers; managers are told not to include identifying details in free text. Anthropic processes this data only to provide the analysis and does not use it to train AI models.
Motiro does not make decisions based solely on automated processing that produce legal or similarly significant effects. Its insights support human decisions, and managers and organizations remain responsible for how they use them.
You can connect an AI assistant or another application to Motiro through OAuth and the Model Context Protocol. The authorization screen lists each permission before you approve it. Depending on what you select, the application may receive organization structure, team-member names and contact details, aggregated survey results, and journey text available to your Motiro account. Motiro never supplies individual survey responses through these connections.
A connected application receives data only when it requests an approved permission. You can revoke its access in Motiro settings. The application provider processes what it receives under its own privacy terms, retention rules, location, and AI-training choices; Motiro’s Anthropic API commitments do not govern a separate application that you choose to connect.
If you connect an application to organization data, you confirm that your organization authorizes the disclosure and has a lawful basis for it. For Customer survey data, Code Energy makes the disclosure on the Customer’s documented instruction; the connected application is the Customer’s chosen recipient, not a Motiro subprocessor.
We share personal data only with the providers that help us run Motiro, under contracts appropriate to each provider’s role:
Our current provider and transfer assessment records each provider’s role, processing countries, and safeguards. Email hi@motiro.com to request information about, or a copy of, the safeguards relevant to your data. We give affected organization administrators at least 30 days’ advance notice before adding or replacing a subprocessor for their survey data.
Managers and your organization receive team-level aggregates, never identified individual ballots. Written responses are the exception to aggregation: people who can view the team’s results see the text without account-profile identifiers. Minimum response and segment sizes reduce re-identification risk, but no statistical result or free-text response should be treated as an absolute anonymity guarantee.
You can take Motiro’s public Big Five personality test without an account. While you do, your answers and temporary report stay in this browser’s local storage for this Motiro site. They are not shared with another browser, device, or Motiro hostname. The record expires after seven days without meaningful test use and Motiro removes it the next time it is read; your browser may clear it sooner. You can remove it immediately with ‘Discard my answers.’ Anyone using the same browser profile may otherwise be able to open it.
When the short test is complete, its answers are sent to Motiro to calculate the report. Motiro processes this scoring request without retaining the answers or results on its servers. They enter your Motiro account only when you explicitly choose to save the completed report while signed in. Account personality profiles are private to the account holder and are not shown to their team or managers.
The primary Motiro application and database are stored in Amsterdam, the Netherlands. Self-hosted Matomo analytics is stored in New York, United States. The providers above also process limited data in the United States, Australia, and global communications networks. We use applicable safeguards such as the EU standard contractual clauses and the EU-US Data Privacy Framework. DigitalOcean’s automatic Droplet images are access-restricted but are not encrypted at rest. A separate operator-held recovery copy is stored in Brazil, which the European Commission recognizes as providing adequate data protection.
We keep personal data for as long as your account exists or your team uses Motiro. Message delivery records lose your contact details after twelve months. Internal event-delivery payloads are cleared as soon as delivery succeeds; a payload abandoned after bounded retries is kept for operator redrive for up to 30 days. Service and security logs exclude raw URLs, query strings, referrers, and user agents, and rotate after five files of at most 10 MiB each. De-identified survey results are kept for statistical and research purposes under access controls and aggregation thresholds. Narrow security and erasure records retain keyed one-way hashes of identifiers so we can prove a deletion, prevent identity-claim races, and re-apply deletions after a restore; we do not use those hashes to contact or profile people. Backup copies rotate under our documented retention rules, and deletion instructions are re-applied before a restored backup can serve traffic.
If you have a Motiro account, you can exercise the two most important rights yourself, without asking anyone:
When you delete your account, survey answers you already gave stay with their teams after direct identity fields are removed, so team results do not change. Written responses may remain visible without your name or account attached. Contact opt-outs are retained so Motiro does not message you again. If you are the only manager of an organization, deleting your account also deletes that organization and everything in it. The dialog spells this out before anything happens.
To stop receiving messages: reply STOP to any SMS or WhatsApp message, or use the unsubscribe link in our notification emails. Opting out does not block sign-in or verification codes you request, although delivery still depends on a reachable contact.
Beyond the built-in controls, you are entitled to the following. If your data is processed on behalf of your organization, we will help your organization honor these rights.
For anything not covered by the built-in controls, email hi@motiro.com. We respond within one month. You also have the right to complain to your data protection authority.
Motiro stores sign-in state and app preferences in your browser’s local storage rather than in cookies. There are no advertising or tracking cookies.
To understand how people use the product, we operate our own Matomo analytics instance on DigitalOcean infrastructure in New York. It works without cookies and sends data to no advertising or third-party analytics service. When you are signed in, this activity is linked to a pseudonymous identifier derived from your account; it is never linked to survey responses. Survey-answering pages are not tracked at all. We rely on our legitimate interest in improving the product, and you can opt out at any time: enabling Do Not Track in your browser stops this analytics entirely. We delete raw analytics logs within two years; aggregated statistics are kept indefinitely.
Motiro contains links to other websites. This policy covers only Motiro; other websites have their own policies.
We review this policy regularly and publish updates on this page, with the date above.
For any question about this policy or your data, email hi@motiro.com or write to Code Energy, Inc., 304 S Jones Blvd #401, Las Vegas, NV 89107, United States.