Motif is a personal assistant you talk to over WhatsApp. This notice explains what information Motif collects, how it is used, stored and shared, and the choices you have. Motif is operated by InsightSphere, LLC (“we”), which is responsible for your information as its controller. Questions or requests: hello@heymotif.ai.
What we collect
- Your WhatsApp number and WhatsApp profile name.
- Your first name, last name and date of birth. The date of birth confirms you are at least 18; your name personalises the assistant.
- The messages, voice notes, images and documents you exchange with the assistant, the files it makes for you, and the assistant's memory of your conversation.
- Your approvals and a log of the actions the assistant takes for you, such as an email sent or an event created, and the people you have told it to trust.
- Your sign-in sessions for the Motif workspace and Motif Studio.
- Website logins you choose to save for the assistant, sealed with a key of their own. The assistant uses them on your behalf without ever seeing them.
- Pages and files the assistant publishes for you in Motif Studio.
- If you connect Google, the Google data described below.
Why we use it
- To provide Motif to you (performing our contract with you): to understand and answer your requests, to act on them when you approve, and to remember what you have told it.
- To keep Motif safe and working (our legitimate interests): to secure your account, prevent abuse, fix problems and measure usage and cost.
- With your consent: connecting Google, and keeping the sensitive details described below. You can withdraw consent at any time.
- Where the law requires it.
Sensitive details
Some details are special: the law (Article 9 of the GDPR) calls them special categories of personal data. Motif keeps them in its memory only after you say yes to one question, asked the first time you share one. Until you answer, what you shared is set aside, encrypted, and used for nothing else. If you say no, the assistant still uses it for the request in front of it, and it is erased from memory within a day. You can change your mind at any time by telling the assistant (“forget my health details”): they are hidden at once and erased within a day. They are:
- Your health: allergies and intolerances, conditions, medicines, disabilities, pregnancy, mental health.
- Your religion or beliefs, including a diet or practice that follows from them, such as halal or kosher food.
- Your sex life and your sexual orientation.
- Your racial or ethnic origin.
- Your political opinions.
- Whether you are a member of a trade union.
- Genetic data, and biometric data used to identify you.
Sensitive details about other people that you mention, such as a friend's allergy, are used for the request in front of the assistant and not kept.
Google user data
Connecting Google is optional. Motif accesses Google data only if you connect your Google account, and only for the permissions you choose to grant:
- Your Google account email (openid, userinfo.email): to show which account is connected.
- Gmail read (gmail.readonly): to read, search and summarise the messages you ask about.
- Gmail drafts (gmail.drafts): to prepare replies as drafts for you to review.
- Gmail send (gmail.send): to send email you have approved.
- Calendar read (calendar.readonly, calendar.freebusy): to read your calendar and find free time.
- Calendar manage (calendar.events): to create, change or cancel events for you.
How it is accessed and stored. Your Google connection is held by Composio, our integration provider, which stores the tokens Google issues and makes each request to Gmail and Calendar when our gateway asks it to; those requests and Google's answers pass through Composio, in the United States. The sandbox where the assistant runs never holds the tokens: every action on your Google account goes through our gateway and is logged. Anything that reaches other people, such as sending an email to someone new or creating an event with guests, waits for your yes in WhatsApp.
How it is used and shared. Google data is used only to provide the features you asked for. To answer a request, the content it needs is sent to our AI model provider, OpenAI, through its API; OpenAI does not use it to train its models. Google data is not sold, not used for advertising, and not used to develop, improve or train generalised AI or machine-learning models, by us or by anyone we share it with. People do not read it, except with your permission, where needed for security, or as required by law. It is not shared with anyone else except as described in this notice.
Motif's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Who processes your data
We use these service providers. Each receives only what it needs for its role and is bound by a data processing agreement:
- Google Cloud: hosting, database, storage and encryption keys, in the Netherlands.
- Bird: WhatsApp Business messaging and delivery of your sign-in codes, on its EU platform.
- OpenAI: the AI model that writes the assistant's replies and transcribes your voice notes. Prompts include your conversation, your files and any Google data needed for the request.
- E2B: the isolated sandboxes where the assistant runs, on its EU cluster.
- ElevenLabs: the voice for voice and video notes the assistant sends you, and your own saved voice if you ask the assistant to learn it from a recording you send.
- PostHog: product analytics and a record of each AI model call, so we can find and fix problems, in the EU. Events carry an internal account id or, on our websites, an anonymous browser id, never your phone number, and the conversation in a model call record is encrypted.
- Sentry: error reports from our services and your workspace, in the EU. They carry internal ids, never your messages.
- Composio: holds your Google connection and passes the assistant's Gmail and Calendar requests to Google, in the United States, only if you connect Google.
- Webshare: a fixed internet address, in Belgium, for the assistant's web browser, so websites see the same address on every visit. It carries the browser's traffic, which is encrypted for secure sites, and receives nothing about who you are.
- trivago: hotel search, when you ask the assistant to find a hotel. It receives the destination or a location, the dates and the number of guests and rooms, not who you are.
- Firecrawl: watches a public web page for a change you asked the assistant to watch for, when our own reader cannot read it. It receives the page's address and a short description of the change you are waiting for, not who you are, and never a page you sign in to.
- Cloudflare: hosting for our websites and your workspace, and DNS for our domain.
Our servers, our database and the assistant's sandboxes are in the European Union. Some providers above process data outside the European Economic Area, among them Composio, Webshare and Firecrawl, which are based in the United States; for these transfers we rely on the European Commission's Standard Contractual Clauses or an adequacy decision.
Your rights and choices
- See and change your details, download a copy of your data, and delete your account, all in your workspace at menu.heymotif.ai.
- Disconnect Google at any time in your workspace, or at myaccount.google.com/permissions. Either revokes Motif's access.
- Deleting your account deletes its data and revokes Motif's Google access.
- You can also ask us to access, correct, delete, restrict or export your data, or object to how we use it, by writing to hello@heymotif.ai. We answer within one month.
- You can complain to your data protection authority, such as the one in the EU country where you live.
How long we keep it
- Account and conversation data: while your account exists.
- Photos, voice notes and files you send, and the files the assistant sends you: removed from your assistant's workspace once they are older than 30 days, the next time the workspace is saved. A copy the assistant filed elsewhere in your workspace for a task stays until it is deleted, or until you delete your account.
- Your saved voice, if you asked the assistant to learn it: until you replace it or delete your account.
- Your Google connection at Composio: until you disconnect Google or delete your account.
- Saved website logins: until you remove them or delete your account.
- Pages published in Motif Studio: until you or the assistant withdraw them, or you delete your account.
- The delivery copy of a file the assistant sends you: 24 hours on our servers.
- Sign-in sessions: 90 days after you last use them.
- Backups: up to 30 days, after which deleted data is gone from them too.
- When you delete your account: your data is removed from our systems within 7 days, and from backups within the 30 days above.
- Product analytics, records of AI model calls and error reports at PostHog and Sentry (above), kept to understand and fix the service: they carry an internal account id, not your phone number, and are not yet removed when you delete your account, so they can be kept longer than the rest of your data.
Security
Data is encrypted in transit and at rest. In our database your conversation content is also encrypted, with keys protected by Google Cloud's key service. Our operators see no conversation content in our admin tools by default. When one needs to read a conversation to fix a problem with your assistant, they must open it on purpose, and every such opening is recorded with who opened it and when. Access is limited to the services and people that need it. How saved website logins are protected, and what the assistant can and cannot do with one, is on its own page.
Age
Motif is for adults: you must be at least 18. We do not knowingly collect data from anyone younger, and we delete it if we learn we have.
Early access
Motif opens gradually. When you sign up at menu.heymotif.ai and there is no spot yet, your account waits on the waitlist with the details listed above; we collect nothing extra for it. Being on the waitlist does not give Motif access to your email, accounts or payments. To leave the waitlist, delete your account in your workspace.
Changes to this notice
We may update this notice as Motif changes. When we do, we change the date at the top of this page.
Contact
Questions about this notice or your data: hello@heymotif.ai. See also our Terms of Service.