Clear terms.Built on trust.

These terms (the "Agreement") govern the use of the motorsales.ai platform. They are entered into between the subscribing dealer client ("Customer") and Auto Finance Technology Ltd, registered at Unity House, Bird Hall Lane, Stockport, Cheshire, SK3 0UX, company number 15121835 ("Supplier"). By accessing or using the platform, or by clicking "I agree", the Customer accepts these terms in full.

1. Interpretation

In this agreement: "Authorised Users" means employees of the Customer authorised to use the Services; "Customer Data" means all data input into the platform by or on behalf of the Customer; "Documentation" means the user guides and help materials provided by the Supplier; "Effective Date" means the date the Customer first accesses the platform or accepts these terms; "Normal Business Hours" means 9am to 5.30pm UK time, Monday to Friday (excluding UK public holidays); "Order Summary" means the Customer's Order Summary and Confirmation document; "Personal Data" has the meaning given in the UK GDPR; "Services" means the motorsales.ai platform and related services; "Subscription Term" means the duration of the Customer's subscription; "User Subscription" means the right for one Authorised User to access the Services.

2. User Subscriptions

The Supplier grants the Customer a non-exclusive, non-transferable right to permit Authorised Users to use the Services during the Subscription Term for the Customer's internal business operations.

The Customer must not exceed the number of User Subscriptions purchased. User Subscriptions may be reassigned but not shared.

Each Authorised User must keep their password confidential and may be required to accept an End User Licence Agreement.

The Customer shall use all reasonable endeavours to prevent unauthorised access and shall promptly notify the Supplier of any unauthorised use.

3. Services

The Supplier shall provide the Services and Documentation during the Subscription Term.

The Supplier shall use commercially reasonable endeavours to make the Services available 24/7, except for planned maintenance (10pm to 2am UK time) and unscheduled maintenance (with reasonable notice).

Standard customer support is provided during Normal Business Hours. Enhanced support may be purchased separately.

The Supplier does not warrant that the Services will be uninterrupted or error-free, or that they will meet the Customer's specific requirements.

4. Customer Data and Data Protection

The Customer owns all right, title and interest in Customer Data that is not personal data. The complete data protection terms are set out in the Data Processing Agreement below. Both parties will comply with all applicable Data Protection Laws including the UK GDPR, the Data Protection Act 2018, and the Data (Use and Access) Act 2025.

5. Third-Party Providers

The Services may enable the Customer to access third-party services (including lender APIs, communication services, and finance tools). The Supplier makes no warranty regarding third-party services. Any contract with a third party is between the Customer and that third party. Where the Customer provides login credentials for third-party communication services, those services are provided directly by the third party and the Supplier has no responsibility for them.

6. Supplier's Obligations

The Supplier shall perform the Services with a high degree of skill, care, and professionalism.

The Supplier shall process all personal data in compliance with applicable data protection laws and implement appropriate technical and organisational security measures.

The Supplier maintains current Cyber Essentials certification and utilises automated vulnerability scanning tools for ongoing security assessment.

The Supplier maintains a cybersecurity incident response plan including 24-hour notification, cooperation in investigation, and post-incident review for material incidents.

For material security incidents, the Supplier shall provide a summary analysis within 30 days of resolution.

7. Customer's Obligations

• Provide all necessary cooperation and information required for the Supplier to deliver the Services.
• Comply with all applicable laws, regulations, and regulatory codes.
• Ensure Authorised Users use the Services in accordance with these terms.
• Maintain network connections and telecommunications links to the Supplier's data centres.
• Not access, store, or distribute viruses, spam, unlawful, harmful, defamatory, obscene, or discriminatory material.
• Not copy, modify, reverse engineer, or create derivative works from the Services or Documentation.
• Not access the Services to build a competing product.
• Cooperate with the Supplier in the event of a cybersecurity incident.

8. Fees, Payment and Order Summary

Subscription fees and commercial terms are set out in the Customer's Order Summary. All fees are payable in pounds sterling, exclusive of VAT (added at the applicable rate). Payment may be made by Direct Debit, bank transfer, or card as specified in the Order Summary.

Subscriptions are billed monthly in advance. Usage-based charges are billed monthly in arrears.

If payment is not received within 7 days of the due date, the Supplier may disable access and charge interest at 4% above the Bank of England base rate.

The Supplier may increase fees with at least 30 days prior written notice. The Customer may terminate without penalty if they do not agree to the increase.

9. Pro Pack Add-Ons

The Supplier may offer additional feature packages ("Pro Packs"). New Pro Packs are offered with an initial trial period of 3 months at no additional charge. At the end of the trial, the Supplier will provide a quote. If the Customer wishes to continue, the Customer confirms acceptance (by email or via the platform) and the fee is added to the next invoice. No updated Order Summary is required. An email confirmation is sent for every Pro Pack added.

If the Customer does not wish to continue a Pro Pack after the trial, the functionality is removed. There is no obligation to continue.

10. Fair Usage

All subscriptions are subject to the Fair Usage Policy published at motorsales.ai/legal#fair-usage. The Supplier may update the Fair Usage Policy with 30 days prior written notice. Continued use after the notice period constitutes acceptance.

11. Payment Agents

The Customer may nominate a third party ("Payment Agent") to pay subscription fees on the Customer's behalf. This does not transfer any rights or obligations. The Customer remains fully liable for all fees. If the Payment Agent ceases funding:

• The Supplier will notify the Customer with 30 days notice.
• The Customer must establish a direct payment method within 14 days of the Payment Agent's last payment.
• The existing Order Summary continues to apply. No reissue is required. The Customer assumes responsibility for all fees on the same terms.
• Pro Pack fees, overage charges, and usage-based charges beyond fair usage are the Customer's responsibility unless the Payment Agent has confirmed coverage in writing.
• If the Customer does not establish a payment method, the Supplier's rights under the fees and termination clauses apply.

12. Intellectual Property

The Supplier and/or its licensors own all intellectual property in the Services and Documentation. This agreement does not grant the Customer any IP rights except the limited licence to use the Services as described. The Supplier warrants that it has all necessary rights to grant the licences in this agreement.

13. Confidentiality

Each party shall keep the other's confidential information confidential and not use it for any purpose other than performing this agreement.

Confidential information does not include information that is publicly available, was already known, was independently developed, or was lawfully received from a third party.

Disclosure is permitted where required by law, regulation, or court order (with maximum notice to the other party where legally permitted).

Customer Data is the Customer's confidential information. The Supplier may use the Customer's name in marketing materials (the Customer may request removal).

Confidentiality obligations survive termination.

14. Indemnity

The Customer indemnifies the Supplier against claims arising from the Customer's use of the Services. The Supplier indemnifies the Customer against claims that the Services infringe any UK intellectual property right, subject to the Customer providing prompt notice and reasonable cooperation.

15. Limitation of Liability

Nothing excludes liability for death, personal injury caused by negligence, or fraud.

The Supplier shall not be liable for loss of profits, loss of business, loss of data, or any indirect or consequential loss.

The Supplier's total aggregate liability is limited to the total subscription fees paid in the 12 months preceding the claim.

The Services are provided on an "as is" basis. All implied warranties are excluded to the fullest extent permitted by law.

16. Term and Termination

Either party may terminate with 30 days written notice.

Either party may terminate immediately if the other commits a material breach that is not remedied within 30 days of written notice.

The Supplier may terminate immediately if the Customer fails to pay within 7 days of written demand, becomes insolvent, or enters into any insolvency process.

On termination: all licences terminate, the Customer must cease using the Services, and the Supplier will delete or return Customer Data within 90 days (at the Customer's election). If no election is made, data is deleted after 90 days.

17. Changes to These Terms

The Supplier may update these terms with 90 days prior written notice (or 30 days for data protection and fair usage changes). The Customer will be notified by email and prompted to accept on next login. Continued use after the notice period constitutes acceptance. If the Customer does not agree, they may terminate without penalty before the effective date.

18. Online Acceptance

This agreement may be accepted electronically by clicking an acceptance button, ticking an acceptance checkbox, or by accessing or continuing to use the Services after being presented with the terms. Electronic acceptance is legally equivalent to a handwritten signature. The Supplier maintains records of each acceptance.

19. General

This agreement is governed by the laws of England and Wales, with exclusive jurisdiction of the English courts.

Both parties agree to attempt to resolve disputes through negotiation or mediation before litigation.

This agreement constitutes the entire agreement between the parties.

The Customer may not assign this agreement without the Supplier's consent.

Nothing in this agreement creates a partnership or agency relationship.

If any provision is found to be invalid, the remaining provisions continue in force.

Force majeure: the Supplier is not liable for delays caused by events beyond its reasonable control.

This Data Processing Agreement (DPA) forms part of the motorsales.ai Terms of Service. It sets out how Auto Finance Technology Ltd (the Processor) processes personal data on behalf of dealer clients (the Controller) in accordance with Article 28 of the UK GDPR.

Roles

When you use the motorsales.ai platform, your dealership is the data controller. You decide what data to collect and why. Auto Finance Technology Ltd is the data processor. We process your customers' data on your instructions and for your purposes only. We do not use your customer data for our own marketing, analytics, or any other purpose.

Our Obligations

• We process personal data only on your documented instructions.
• All persons authorised to process personal data are bound by confidentiality obligations.
• We implement appropriate technical and organisational security measures (see below).
• We do not transfer personal data outside the United Kingdom without appropriate safeguards.
• We notify you within 24 hours of becoming aware of a personal data breach.
• We assist you in responding to data subject requests and regulatory obligations.
• On termination, we delete or return your data within 90 days (at your election).
• We make information available to demonstrate compliance and allow for audits.
• We assist you in carrying out data protection impact assessments and prior consultations with the ICO where required.

Processing Details

Subject Matter: The Supplier processes Personal Data on behalf of the Customer for the purpose of providing the motorsales.ai SaaS platform and related functionality, including vehicle inventory management, customer enquiry handling, finance application processing, dealer communications, analytics, and advertising functionality.

Nature and Purpose: The processing involves the collection, storage, organisation, retrieval, use, transmission, and erasure of Personal Data as necessary to deliver the Services. This includes hosting and displaying vehicle inventory and customer enquiry data, facilitating finance applications and electronic signing, managing dealer communications (including email, SMS, and messaging), providing analytics and reporting, and operating advertising and lead generation functionality within the platform.

Types of Personal Data: Names, postal addresses, email addresses, telephone numbers, dates of birth, employment and income details (where provided in connection with finance applications), vehicle registration and ownership details, IP addresses and device identifiers, communication records (emails, SMS messages, call logs), financial information (bank details for Direct Debit, finance application data), identification documents (driving licences, proof of address), and website browsing and interaction data.

Categories of Data Subjects: The Customer's prospective and existing retail customers (vehicle buyers and enquirers), the Customer's Authorised Users and employees, finance applicants and guarantors, website visitors to the Customer's dealership website(s) hosted or powered by the Services, and third-party contacts whose details are entered into the platform by the Customer or its Authorised Users.

Duration: Processing commences on the Effective Date and continues for the duration of the agreement plus the post-termination retention period (90 days).

Security Measures

All access to systems containing personal data is made exclusively through AWS WorkSpaces, a company-controlled virtual desktop hosted in AWS eu-west-2 (London, UK). No personal data is stored on or transferred to staff endpoint devices. Additional measures include:

• Encryption at rest (AES-256) and in transit (TLS 1.2+)
• Multi-factor authentication on all system access
• IP-based access restrictions on databases, servers, and admin interfaces
• Role-based access controls with least-privilege principles
• Comprehensive audit logging of all data access
• Cyber Essentials certification maintained

Sub-Processors

We use sub-processors to help deliver the platform. You provide general authorisation for the sub-processors listed below. We will notify you at least 30 days before adding or changing a sub-processor. You may object on reasonable data protection grounds. See the full list in the Sub-Processor List section below.

International Transfers

All primary data storage is in the United Kingdom (AWS eu-west-2, London). Some sub-processors may process limited data outside the UK (transient CDN traffic, email delivery, error tracking). Where data is transferred outside the UK, appropriate safeguards are in place including Standard Contractual Clauses and/or the UK-US Data Privacy Framework. No customer financial data (bank details, credit data, NI numbers) is transferred outside the UK.

Your Obligations

As data controller, you are responsible for: having a valid lawful basis for processing, providing privacy notices to your customers (which should identify us or our category as a processor), responding to data subject requests (with our assistance), and complying with FCA requirements including CONC and DISP.

Cookie Consent on Dealer Storefronts

Where the Supplier hosts dealer-branded storefronts or websites, the Supplier provides injectable cookie consent snippet functionality that can be integrated into the dealer's storefront. The Customer (as data controller) is responsible for ensuring that cookie consent is properly implemented on their branded storefront and that non-essential cookies (including analytics, advertising, and tracking cookies) are not set until the end user has given informed consent in accordance with the Privacy and Electronic Communications Regulations 2003. The Supplier will provide reasonable technical assistance to facilitate the implementation of cookie consent mechanisms.

Changes to This DPA

We may update this DPA with 30 days notice. Continued use of the platform after the notice period constitutes acceptance. If you do not agree, you may terminate the agreement.

Auto Finance Technology Ltd (AFT) uses the third-party providers below to deliver the motorsales.ai platform. Each acts as a sub-processor of AFT under clause 5 and Schedule 4 of the motorsales.ai SaaS Agreement and is bound by written terms that meet Article 28(3) UK GDPR. All Customer Data is stored in the United Kingdom (AWS eu-west-2, London). Where a provider is outside the UK, the transfer mechanism is shown. You may object on reasonable data protection grounds by contacting racheal@autofintech.co.uk.

Not sub-processors

Lenders, brokers and finance intermediaries to whom a customer submits an application through the platform receive it as independent controllers on the customer's instruction. Google Analytics, Google Ads and Meta Platforms Inc. (Meta Pixel) act as independent controllers in respect of data collected through their tags on dealer storefronts, under the dealer's own cookie consent and privacy notice.

Changes to this list

We give customers at least 30 days' notice by email or in-platform notification before adding or replacing a sub-processor. Customers may object on reasonable data protection grounds within that period, as set out in clause 5.12 of the SaaS Agreement.

Change history

July 2026 — List republished with the SaaS Agreement v2.0. Twilio, SparkPost, OpenAI and Anthropic added; Supabase, Hetzner and Vercel removed (not used by motorsales.ai).

This list was last updated in July 2026. For questions about our sub-processors, contact racheal@autofintech.co.uk.

Who We Are

The motorsales.ai platform is operated by Auto Finance Technology Ltd (company number 15121835), registered at Unity House, Bird Hall Lane, Stockport, Cheshire, SK3 0UX. ICO registration: ZB593422. Data Protection Officer: Racheal Campbell-Browne (racheal@autofintech.co.uk).

For Car Buyers

When you use the motorsales.ai platform to enquire about a vehicle, apply for finance, or interact with a dealership, your personal data is controlled by the dealership you are dealing with. Auto Finance Technology Ltd acts as a data processor on behalf of that dealership. We process your data on their instructions and for their purposes only.

We may process: your name, address, email, phone number, date of birth, employment and income details, bank details, driving licence number, National Insurance number, vehicle details, soft search credit check results, and communications with the dealership.

We do not use your data for our own marketing or any purpose other than providing the platform service. If you have questions about how your data is used, contact the dealership directly. For questions about the platform, contact racheal@autofintech.co.uk.

For Dealer Contacts and Business Partners

We process dealer business contact data (name, email, phone, company) for the purpose of managing our commercial relationship (lawful basis: contract performance) and, where applicable, marketing our services (lawful basis: legitimate interest for existing contacts, consent for cold outreach). You can unsubscribe from marketing at any time.

For Job Applicants

We process applicant data (name, contact details, CV, interview notes) for the purpose of assessing suitability for employment (lawful basis: legitimate interest). Unsuccessful applicant data is deleted within 6 months.

Data Retention

Dealer customer data: retained for the duration of the dealer's subscription plus 90 days. Dealer account data: duration plus 6 years. Marketing data: until unsubscribe or 2 years of inactivity. Job applicant data: 6 months after decision.

Your Rights

You have the right to access your data, have it corrected, have it deleted, restrict its processing, receive it in a portable format, and object to processing. For car buyer data, contact the dealership first. For all other requests, contact racheal@autofintech.co.uk. You also have the right to complain to the ICO at ico.org.uk.

Cookies are small text files placed on your device when you visit our website. We use cookies for the following purposes:

We record each cookie choice (time, banner version and what you chose) so we can show consent was given. You can change or withdraw your choice at any time through "Cookie settings" in the footer; withdrawing deletes what was kept.

All subscriptions include generous usage allowances designed to support typical day-to-day business activity for independent dealerships. These limits ensure consistent performance and fair access for all users. Where usage exceeds these levels, overage charges or plan adjustments may apply as outlined below.

This policy may be updated with 30 days notice. Your continued use of the platform after the notice period constitutes acceptance. If you do not agree, you may terminate your agreement.

Messaging (SMS and WhatsApp)

Includes 150 messages per month. Overage: £0.04 per message.

Email Sending

Includes 3,000 emails per month. Overage: £3.00 per 1,000 emails, charged in increments as usage exceeds the included allowance.

Verification and Data Services

Includes 150 requests per month (combined across all services): Mobile Verification, Email Verification, Bank Validation, Postcode Lookup. Overage: £0.03 per request (standard services), £0.04 per request (bank validation and postcode lookup).

Hosting

Storefront Hosting: includes up to 5,000 visitors per month. Overage: £5 per additional 5,000 visitors. Email Hosting: includes 5 inboxes. Additional inboxes: £5 per mailbox per month.

AI Usage

AI usage is included under fair usage and supports typical business activities including conversations, content generation, and standard automations. Guideline usage: approximately 2,000–3,000 requests per month. Larger prompts, extended outputs, or automated/bulk workflows may consume usage at a higher rate. Usage that significantly exceeds typical patterns may be limited, subject to performance controls, or charged at £5 per 1,000 additional requests.

Finance Proposals

Up to 250 finance proposals per month is considered within normal plan usage. Where usage consistently exceeds this level, additional usage charges may apply, or a higher usage tier or custom plan may be required.

Automation and Customisation

Initial onboarding and setup (first 4 weeks): included. Ongoing custom work: £25 per hour, depending on scope.

Finance Tools

Codeweavers Finance Calculator: £75 per month (optional add-on). Integrated Auto Quote: included (up to 150 vehicles), additional usage costs may apply.

For questions about fair usage or to discuss a custom plan, contact support@autofintech.co.uk.

Making a Request

You have the right to access, correct, delete, restrict, or port your personal data, and to object to certain processing. To exercise any of these rights, contact our Data Protection Officer:

If your request relates to data held by a dealership through the motorsales.ai platform, please contact the dealership directly in the first instance. If you contact us, we will forward your request to the relevant dealership.

We will respond to your request within 1 calendar month.

Making a Complaint

If you believe your personal data has not been handled correctly, you may submit a complaint to our Data Protection Officer at racheal@autofintech.co.uk or by post to the address above. We will acknowledge your complaint within 5 business days and respond substantively within 1 calendar month.

If you are not satisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO):