MOTIO, INC.
PRIVACY POLICY
Last Updated: June 9, 2026
Introduction
Motio, Inc. (“Motio”, “we”, “our”, and “us”) have a commitment to safeguard the privacy of information entrusted to us and value the trust of our existing and prospective business relations. This Privacy Policy describes how we collect, retain, use, disclose, and safeguard personal information about you when you use our websites (“Sites”) and services (“Services”), in accordance with applicable law. Motio is the data controller and responsible for deciding how we use and hold your personal information.
Where Motio products include browser extensions or other standalone software, supplemental data practices specific to those products are described in the applicable Product Privacy Annex attached to this policy. The following annexes are attached hereto and form part of this Privacy Policy:
- Annex A — Soterre DevOps Analytics Chrome Extension
- Annex B — Gitoqlok Chrome Extension
Collection and Sources of Personal Information
When you use our Sites or Services, or when you register as a Member or Guest, we may collect information that identifies, relates to, or could reasonably be linked to you or another identifiable person or household (“Personal Information”), including:
- Personal Details and Contact Information: Name, mailing address, e-mail address, telephone and fax details, signature;
- Professional Affiliations: Business name, professional title, industry, business address;
- Financial Information: Payment card number and details, bank account number and details;
- Technical Data: Internet Protocol (IP) address, browser type and version, operating system, other device information, webpages you visit and links/features you interact with;
- Operational Data: Transaction amount and details, supplier information, credentials to online services and platforms; and
- Any further information required for credit verification, compliance/ethics checks, or customer due diligence.
We may collect Personal Information in various ways and from various sources, including:
- when you interact with one of our Sites;
- when you register as a Member or Guest;
- when you enter Motio-sponsored or -affiliated promotions or sweepstakes;
- when you enter into a transaction or contractual arrangement with us;
- when you participate in our programs or activities;
- when you provide information at industry events and trade shows;
- when you visit our facilities or we visit you at your offices;
- when you contact our customer service; or
- in connection with your inquiries and communications with us.
Note that Motio may combine Personal Information about you from various sources, for example combining Personal Information we have collected directly from you with Personal Information we obtain from business partners or other third parties.
For data collection and handling practices specific to Motio’s Chrome extensions, please see Annex A (Soterre DevOps Analytics) and Annex B (Gitoqlok) to this Privacy Policy.
Use of Personal Information
We may use your Personal Information for legitimate business purposes, including:
- To provide the Services to you.
- To enhance, improve, and modify our current products or Services and develop new products and Services.
- To respond to your inquiries and fulfill your requests, for example, when you send us questions, suggestions, or when you request to book a demo or a quote or other information about our Services.
- To execute agreements with customers, suppliers, and business partners, including required screening activities (e.g., for access to our premises or systems, credit verification, compliance/ethics checks, customer due diligence).
- To complete your transactions and provide you with related customer service.
- To send administrative information to you, such as changes to our terms, conditions, and policies.
- To allow you to send messages to another person, if you choose to do so.
- To send you marketing related emails with information about our Services, new products, and other news about Motio. We will only engage in this activity with your consent or where we have a legitimate interest.
- To determine the effectiveness of our promotional campaigns and adapt our campaigns to the needs and interests of our users.
- To better understand how our Sites and Services are used, so that we can improve the Sites and Services.
- To better understand you and your preferences, so that we can personalize our interactions with you and provide you with information, content, and/or offers tailored to your interests.
- For audits, to verify that our internal processes function as intended and are compliant with legal, regulatory, or contractual requirements.
- For fraud and security monitoring purposes, for example, to detect and prevent cyberattacks or attempts to commit identity theft.
- To comply with our legal obligations (including under laws outside your country of residence), comply with valid legal process, and respond to requests from public and government authorities (including authorities outside your country of residence).
- To enforce our terms under the Terms of Use, this Privacy Policy, and other contracts to which we are a party and protect our rights, privacy, safety, and property, and/or that of our affiliates, employees, you, or others.
- To facilitate a reorganization, bankruptcy, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets, or stock.
Legal Basis for Processing
We process your Personal Information only where we have a legal basis for doing so. That legal basis may be:
- Where we have your consent;
- Where processing is necessary to manage our contractual relationship with you;
- Where processing is necessary to comply with a legal obligation; or
- Where we or a third party have a legitimate interest, and your interests and fundamental rights do not override that interest.
To Whom We Disclose Your Personal Information
We may disclose your Personal Information to certain third parties, including:
- Service providers who fulfill certain necessary functions for our business (e.g., website hosting, data analysis, payment processing, information technology and related infrastructure provision, customer service, email delivery, auditing, HR services & payroll).
- Business partners who work with or on behalf of Motio to help communicate with you about offers from Motio and our affiliates. These business partners are bound by confidentiality agreements to protect your Personal Information and prohibited from further disclosing your Personal Information or using it for purposes outside of the Motio partnership.
- Law enforcement, governmental authorities, or other third parties as necessary to comply with our legal obligations; respond to subpoenas, court orders, or other legal process; establish or exercise our legal rights; defend against legal claims; enforce our terms; and protect our rights, privacy, safety, and property, and/or that of our affiliates, employees, you, or others.
- Law enforcement, governmental authorities, or other third parties as necessary to reasonably investigate, prevent, or take action related to illegal activities, suspected fraud, or situations involving potential threat to the safety or wellbeing of any person.
- A related business entity (e.g., acquirer, advisor) in the event of any reorganization, bankruptcy, merger, sale, joint venture, assignment, transfer or other disposition of all or any portion of our business, assets, or stock. In such event, Motio will notify you before your Personal Information is transferred and becomes subject to a different privacy policy.
We do not rent, sell, trade, or disclose your Personal Information to third parties for cross-context behavioral advertising purposes.
Cookies
We use first-party and third-party cookies, web beacons, and other similar tracking tools on our Sites. Cookies are short strings of text sent between a web server and web browser whenever an individual accesses a website. They typically contain information like the cookie name, a unique identification number, an expiration date, and domain name information. Cookies can either be “session cookies” which generally last for only one visit and are automatically deleted thereafter, and “persistent cookies” which last for multiple visits and sometimes survive until manually cleared by the user or an event. They can also be either “first-party” which are cookies owned and operated by Motio, or “third-party” which are cookies owned and operated by a third-party entity (e.g., one of our business or marketing partners) and therefore controlled by that third party’s privacy policy rather than this Privacy Policy. We use first- and third-party session and persistent cookies to analyze traffic data on our Sites (e.g., number of visitors, pages viewed), make improvements based on that data (e.g., move features around), personalize or improve your experience on our Sites (e.g., save you the trouble of retyping your information), and identify personalized Services that may be of interest to you.
We also use third-party analytics services like Google Analytics to analyze traffic data on our Sites. These services may collect information like your device’s operating system, browser type, IP address, and the website you visited immediately before ours and may additionally track your clickthrough data on our Sites.
Security Measures
Motio has implemented administrative, physical, and technical security processes to protect your Personal Information from unauthorized access, loss, misuse, alteration, disclosure, or destruction. That said, no data transmission or storage system can be guaranteed to be 100% secure. If you have reason to believe that your interaction with us is no longer secure, please immediately notify us in accordance with the “Contacting Us” section below.
Data Retention
We will not retain your Personal Information for longer than is necessary and permitted in light of the purpose(s) for which it was collected. The criteria used to determine our retention periods include: (i) the length of time we have an ongoing relationship with you; (ii) whether there is a legal obligation to which we are subject; or (iii) whether retention is advisable in light of our legal position (such as in regard to applicable statutes of limitations, litigation or regulatory investigations).
Change of Purpose
We will only use your Personal Information for the purposes outlined in this Privacy Policy. If we need to use your Personal Information for a new purpose not yet disclosed in this Privacy Policy, we will notify you of this new purpose; explain the legal basis which allows us to process in the new manner; and, to the extent required by applicable law, seek your consent.
Communication Preferences
We may send you certain communications relating to the Service, such as service announcements, administrative messages, and the Motio Newsletter. If you do not want to receive these communications, you can opt out of receiving them by clicking the Unsubscribe link in the email or by updating your communication preferences in My Account Information.
Your Privacy Rights
Depending on your state or country of residence, you may be entitled to certain privacy rights with respect to your Personal Information, including but not limited to:
- Right to Know: you may have the right to request confirmation from us about whether we collect any of your Personal Information, and if so, to request information about what Personal Information we have collected, the purpose of our collection, the sources of Personal Information, with whom we have disclosed your Personal Information, and for what purpose it was disclosed.
- Right to Access: you may have the right to obtain a copy of any Personal Information we collect and process about you.
- Right to Opt-Out: you may have the right to opt-out of our sale or sharing of your Personal Information for the purposes of cross-context behavioral advertising or profiling. To exercise this right, you can click Do Not Sell or Share My Personal Information. Subject to certain exemptions, you may also have the right to opt-out of our use of your Sensitive Personal Information for certain business purposes and limit it to only those purposes necessary to provide the Services. To exercise this right, you can click Limit the Use of My Sensitive Personal Information.
- Right to Portability: under certain circumstances, you may have the right to ask us to provide you with your Personal Information, in a structured, commonly used, and machine-readable format and the right to transmit that Personal Information to another entity without hindrance from us.
- Right to Correction: you may have the right to request that we correct inaccurate Personal Information about you or, depending on the purposes of processing, supplement incomplete Personal Information about you.
- Right to Deletion: subject to certain exemptions, you may have the right to ask us to delete any Personal Information about you that we have collected. Please note that this may impact your ability to use our products or Services.
- Right to Restrict or Object to Processing: under certain circumstances, you may have the right to ask us to restrict the processing of your Personal Information, or object to our processing of your Personal Information altogether.
- Right to Withdraw Consent: to the extent our processing of your Personal Information is based upon your consent, you may withdraw your consent at any time with future effect.
- Right to Be Free from Discrimination: you may have the right to not be discriminated against by us for exercising your consumer privacy rights.
To exercise these rights, email [email protected] with the Subject Line “Motio – Privacy Rights Request” or use our Privacy Rights Request Form. We may require identity verification to process your request.
Jurisdiction and Cross-Border Transfer
Your Personal Information may be collected or processed by, and transferred to, Motio facilities in the United States, United Kingdom, Canada, and other countries where Motio does business. Your Personal Information may be stored and processed in any country where we have facilities or in which we engage service providers. By using the Services, you consent to the transfer of your Personal Information to countries outside of your country of residence, including the United States, which may have data protection rules that are different from and even less stringent than those of your country.
Linked Websites
We may provide links to third-party sites or applications. Since we do not control these third-party websites or applications, this Privacy Policy does not apply to them or their data collection, use, disclosure, or security policies or practices. We encourage you to review the privacy policies posted on these (and all) third-party websites and applications. Motio is not responsible for the privacy policies or practices of websites and services controlled by companies or organizations other than Motio. The inclusion of a link on the Sites or Services does not imply our approval or endorsement of the linked website or service.
In addition, we are not responsible for the data collection, use, disclosure, or security policies or practices of other organizations, app providers, social media platform providers, operating system providers, wireless service providers or device manufacturers, including with respect to any Personal Information you disclose to other organizations through or in connection with the apps or our social media pages.
Modifications to This Privacy Policy
We reserve the right to change, modify, or update this Privacy Policy at any time for any reason. The “Last Updated” date at the top of this Privacy Policy indicates when the Privacy Policy was last revised. Changes become effective on that Last Updated date, and your continued use of the Sites or Services after this date indicates your acceptance of the revised Privacy Policy.
Contact Information
If you have any questions about this Privacy Policy, please contact us by emailing [email protected] or completing the Contact Us Form. Because email communications are not always secure, please do not include credit card or other sensitive information in your emails to us.
If you would like to exercise one of your applicable privacy rights, please contact us via email with the Subject Line “Motio – Privacy Rights Request” or use our Privacy Rights Request Form, and we will endeavor to address your concerns.
Last Updated: June 9, 2026
MOTIO, INC.
ANNEX A
Soterre DevOps Analytics Chrome Extension
Product Privacy Annex
Last Updated: June 9, 2026
A1. Data the Extension Collects
The Extension reads structural and configuration metadata from the business intelligence platforms and integration servers open in or connected to the user’s active Chrome tab. The Extension works with application and report structure only — it does not access the underlying data contained within Qlik applications or Power BI reports.
From Qlik Sense (when a Qlik Sense server is open in the active tab)
The following is accessed based on the permissions of the user currently logged in to Qlik Sense:
- The logged-in user’s name and email address;
- Qlik Server version information;
- The list of Qlik applications the logged-in user has access to;
- The structural definition of the currently open Qlik application (structure only — no underlying data);
- List of Qlik Spaces and Streams;
- Data connections list and configuration details;
- Glossary items and metadata;
- Automation definitions and metadata;
- Reload task list and scheduling information;
- Content Library assets;
- Installed Qlik extensions list and definitions;
- Custom properties and tags configuration; and
- ODAG (On-Demand App Generation) application and link definitions.
From Microsoft Power BI (when a Power BI server is open in the active tab)
The following is accessed based on the permissions of the user currently logged in to Power BI:
- The list of reports in the current Power BI workspace; and
- The structural definition of the currently open Power BI report (structure only — no underlying data).
From the user’s Soterre server (via user-configured API token)
The following is accessed based on the scope of the API token configured by the user in the Extension settings:
- List of Nodes configured in Soterre;
- Details of the Node(s) accessible to the configured API token;
- List of Qlik application and Power BI report versions tracked in Soterre;
- JSON-format structural content of tracked Qlik applications and Power BI reports;
- QVD lineage data for Qlik applications;
- Soterre deployment plans;
- Soterre tag list;
- List of Jira projects associated with the current Node; and
- List of Jira tickets and Qlik application or Power BI report statistics associated with the current Node.
From the user’s QSDA Pro server (via authenticated user access)
The following is accessed based on the permissions of the authenticated user:
- List of data collectors configured for the current Qlik server;
- Collector configuration details for the current Qlik application;
- List of bookmarks for the current Qlik application; and
- List of data connections configured in QSDA Pro.
A2. How Extension Data Is Used
Data accessed by the Extension is used solely to provide the Soterre DevOps Analytics features, including comparing Qlik application and Power BI report structures, generating and managing deployment plans, and surfacing metadata, lineage, and configuration information within the Extension interface. The Extension does not use collected data for advertising, behavioral profiling, or any purpose unrelated to providing these features.
A3. How Extension Data Is Stored
Local browser storage
The Extension stores user-entered configuration settings in Chrome’s local storage (chrome.storage.local), encrypted using AES encryption:
- Soterre server URL and API token;
- QSDA Pro server URL and API token; and
- AI provider vendor name, model identifier, and API token (where the user has configured an AI provider).
HTTP request and response data exchanged with connected servers is held temporarily in the browser’s working memory for the active tab and cleared automatically when the tab is closed. All locally stored data is permanently deleted when the user removes the Extension from Chrome.
Remote storage
The Extension does not transmit data to Motio’s servers. All data accessed by the Extension either remains in the browser or is sent directly to the servers the user has explicitly configured in the Extension settings. Motio does not receive or have access to the data exchanged between the Extension and those servers.
A4. How Extension Data Is Shared
The Extension does not sell or share user data with third parties for advertising or behavioral profiling purposes. Data is transmitted only to the servers the user has explicitly configured in the Extension settings: the user’s Soterre server and QSDA Pro server (both Motio products governed by Motio’s terms of service and this Privacy Policy), and optionally a third-party AI provider of the user’s choosing. The AI provider, model, and credentials are selected entirely by the user; data sent to that provider is governed by that provider’s own privacy policy.
The Extension also uses Google Analytics to record anonymous counts of clicks on buttons within the Extension’s own interface. This telemetry does not capture data from Qlik Sense or Power BI pages. Users can disable this at any time in the Extension settings. Data collected by Google Analytics is governed by Google’s Privacy Policy.
End of Annex A
MOTIO, INC.
ANNEX B
Gitoqlok Chrome Extension
Product Privacy Annex
Last Updated: June 9, 2026
B1. Data the Extension Collects
The Extension reads structural and configuration metadata from Qlik Sense servers open in the user’s active Chrome tab, and accesses repository content from the user’s configured Git provider and QSDA Pro server. The Extension works with Qlik application structure only — it does not access the underlying data contained within Qlik applications.
From Qlik Sense (when a Qlik Sense server is open in the active tab)
The following is accessed based on the permissions of the user currently logged in to Qlik Sense:
- The logged-in user’s name and email address;
- Qlik Server version information;
- The list of Qlik applications the logged-in user has access to;
- The structural definition of the currently open Qlik application (structure only — no underlying data);
- List of Qlik Spaces and Streams;
- Data connections list and configuration details;
- Glossary items and metadata;
- Automation definitions and metadata;
- Reload task list and scheduling information;
- Content Library assets;
- Installed Qlik extensions list and definitions;
- Custom properties and tags configuration; and
- ODAG (On-Demand App Generation) application and link definitions.
From the user’s QSDA Pro server (via authenticated user access)
The following is accessed based on the permissions of the authenticated user:
- List of data collectors configured for the current Qlik server;
- Collector configuration details for the current Qlik application;
- List of bookmarks for the current Qlik application; and
- List of data connections configured in QSDA Pro.
From the user’s Git provider (via user-configured access token)
The following is accessed based on the scope of the access token configured by the user in the Extension settings. The Git provider is chosen and configured entirely by the user (e.g., GitHub, GitLab, Bitbucket, or Azure DevOps):
- The authenticated user’s name and email address from the Git provider;
- List of organizations or workspaces the user has access to, and the repositories within each;
- Repository names, descriptions, and metadata;
- The names, paths, and contents of files within the user’s accessible repositories; and
- List of branches and commit history for accessible repositories.
B2. How Extension Data Is Used
Data accessed by the Extension is used solely to provide the Gitoqlok features, including comparing Qlik application structures against version-controlled definitions stored in the user’s Git repositories, committing application structure changes to Git, and managing application versions through the Extension interface. The Extension does not use collected data for advertising, behavioral profiling, or any purpose unrelated to providing these features.
B3. How Extension Data Is Stored
Local browser storage
The Extension stores user-entered configuration settings in Chrome’s local storage (chrome.storage.local), encrypted using AES encryption:
- Git provider server URL and access token;
- QSDA Pro server URL and API token; and
- AI provider vendor name, model identifier, and API token (where the user has configured an AI provider).
The Extension also stores a cached list of Git repository names and metadata locally to improve performance. HTTP request and response data exchanged with connected servers is held temporarily in the browser’s working memory for the active tab and cleared automatically when the tab is closed. All locally stored data — including the repository cache — is permanently deleted when the user removes the Extension from Chrome.
Remote storage
The Extension does not transmit data to Motio’s servers. All data accessed by the Extension either remains in the browser or is sent directly to the servers the user has explicitly configured in the Extension settings. Motio does not receive or have access to the data exchanged between the Extension and those servers.
B4. How Extension Data Is Shared
The Extension does not sell or share user data with third parties for advertising or behavioral profiling purposes. Data is transmitted only to the servers the user has explicitly configured in the Extension settings: the user’s Git provider (e.g., GitHub, GitLab, Bitbucket, or Azure DevOps), QSDA Pro server (a Motio product governed by Motio’s terms of service and this Privacy Policy), and optionally a third-party AI provider of the user’s choosing. The Git provider and AI provider are selected entirely by the user; data sent to those providers is governed by their respective privacy policies.
The Extension also uses Google Analytics to record anonymous counts of clicks on buttons within the Extension’s own interface. This telemetry does not capture data from Qlik Sense pages or from the user’s Git repositories. Users can disable this at any time in the Extension settings. Data collected by Google Analytics is governed by Google’s Privacy Policy.
End of Annex B
