TRUST AND SECURITY
A Vehicle Passport is only worth something if it cannot be edited after the fact, and if the person reading it can tell verified from self-reported at a glance. Both of those are engineering decisions, and here is how they were made.
A six-digit code is required every time you sign in, including after Apple or Google. In Pakistan it arrives on WhatsApp first, with SMS and email as fallbacks.
Direct messages in Connect are encrypted end to end. Motorspree cannot read them, which also means we cannot recover them for you.
Passport entries, financial ledgers, invoices, payouts, consent records and audit logs cannot be updated or deleted. Database triggers enforce it, so no future code change can quietly relax it.
Face or fingerprint unlocks the app on your device. It is a local convenience and never a substitute for the server-side check, so a stolen phone does not become a stolen account.
You see every device signed in, get alerted on a new one, and can end any session from anywhere. Recovery runs through an email you set in advance.
Back your Passport data up to iCloud or Google Drive, encrypted. It restores onto a new phone without a support ticket.
YOUR DATA
Every consent you give is written to a consent ledger with a timestamp, and withdrawing one is a new entry rather than a quiet deletion. You can see the whole history of what you agreed to.
Signing up does not require identity documents. Adding a vehicle requires a registration card, and that check confirms the car, not you.
AUTOMATION AND AI
Automation is used where it genuinely helps: safety checks on new posts, reading a registration card, matching a chassis number on an inspection report, drafting a summary. It is not used to decide things that matter to you on its own.
A person decides above the line
Claim value, fraud scoring, total loss and any injury go to a human assessor. There is no threshold at which the machine gets the last word.
Moderation explains itself
A removed post is surfaced to its author with the reason and a route to appeal. Nothing disappears silently.
Your content is not training data
Posts, records and messages are not used to train general-purpose models.
Most requests never reach a model
Rules and cached results answer the overwhelming majority. That is a cost decision and a privacy one at the same time.
We would rather hear about a security issue from you than read about it later. Responsible disclosure gets a fast, human reply.
Confirm this address exists and is monitored before publishing the page.
