Privacy Policy

Last updated: 23 June 2026  |  FrameLogic Limited (Companies House: 17193146)

Plain English

We are FrameLogic Limited. This policy explains what personal data we collect when you use Autera, why we collect it, who we share it with, and your rights under UK GDPR. We do not sell your data.

1. Who we are

This Privacy Policy is issued by FrameLogic Limited (“we”, “us”, “our”), a company registered in England and Wales (Companies House number 17193146) with registered office at 58 Rochester Avenue, Feltham, TW13 4EJ, United Kingdom. We are the data controller for personal data we collect about Autera users (workshop owners, technicians, and team members). For personal data your workshop holds about its own customers, your workshop is the controller and we act as a processor (see section 8).

We are registered with the UK Information Commissioner’s Office (ICO), registration number ZC180026.

For privacy queries, contact: privacy@getautera.com.

2. Data we collect

About workshop owners and team members

About workshops’ customers, technicians, and vehicles

You enter this data into Autera when running your workshop. We process it on your behalf as a processor (see section 8). Typical fields include customer name, contact details, vehicle registration and make/model, job and invoice records, and uploaded documents.

Vehicle data we obtain from third parties

When you look up a vehicle by its registration, Autera retrieves vehicle data from official UK sources: the DVLA Vehicle Enquiry Service (VES) and the DVSA MOT history service. The categories obtained include make, model, colour, fuel type, year of manufacture, tax and MOT status, and MOT test history. We did not collect this data directly from you or from the vehicle keeper; we obtain it from these public-sector sources by registration lookup. We use it to populate and verify vehicle records in your workshop and to power MOT-due reminders. This data is provided by DVLA and DVSA, and we are not responsible for its accuracy.

Automatic data

Payment data

Card details are collected and stored by Stripe, our payment processor. We never see or store your card number; we only see the last 4 digits, expiry date, and a Stripe customer ID.

Photos and camera access (mobile app)

The Autera Android and iOS apps request camera and photo-library access so you can attach photos to a job (e.g. before/after shots, damage records, parts received). Photos you capture or pick are uploaded to Autera and stored against the job they were attached to. We do not access the camera or your photo library at any other time, and we never upload photos in the background. You can revoke camera or photo-library access at any time in your device settings; the app will still work, you just won't be able to capture or pick photos until you re-enable it.

Notifications (mobile app)

The Autera mobile apps request permission to send push and local notifications. When granted, we may notify you about workshop events you've opted into, e.g. a job assigned to you, a new booking request, an invoice paid, or an MOT-due reminder for one of your customers' vehicles. Notification content is generated from your own workshop data; we never include third-party advertising. You can revoke notification permission at any time in your device settings.

3. Purposes we use data for

4. Legal bases (UK GDPR)

5. Who we share data with

Plain English

We never sell your data. We share it only with the processors we use to run Autera, and only when legally required.

We use these third-party processors:

We may also share data with law enforcement, regulators, or in response to a court order when legally required to do so. We will challenge requests we believe to be improper and notify you where we are legally permitted to.

We do not sell your personal data, and we do not share it with advertisers.

6. International transfers

Some of our processors (including Stripe, Resend, Firebase, Apple, Intuit QuickBooks, Anthropic, Sentry, Trustpilot and Calendly) operate in the United States. Where personal data is transferred outside the UK, we rely on the UK’s adequacy decision (where one applies), the UK International Data Transfer Agreement, or Standard Contractual Clauses with appropriate safeguards. Our primary database and file storage remain in the UK and EU (IONOS and Cloudflare), and our product analytics use PostHog’s EU region.

7. Data retention

We keep personal data only as long as needed for the purposes set out in section 3, in line with the retention timelines in section 8 of our Terms of Service:

8. Customer data your workshop holds

For personal data your workshop enters about its own customers (motorists), technicians, and suppliers, your workshop is the data controller and Autera acts as a data processor. Our obligations as a processor are set out in our Data Processing Agreement, which forms part of these Terms.

Your workshop is responsible for: providing privacy notices to its own customers; having a lawful basis for the data it processes; and handling data subject rights requests received from those customers. We will assist you where reasonably required.

9. Your rights

Plain English

You can ask to see your data, correct it, delete it, take it elsewhere, or complain to the ICO if you think we have got it wrong.

Under UK GDPR you have the right to:

To exercise these rights, email privacy@getautera.com. We will respond within one calendar month.

10. Security

Data breaches

Where we are the controller (for example, for the account data of workshop owners and team members), if a personal data breach occurs we will notify the Information Commissioner’s Office (ICO) without undue delay and, where feasible, within 72 hours of becoming aware of it, where the breach is likely to result in a risk to people’s rights and freedoms. Where a breach is likely to result in a high risk to affected individuals, we will also notify those individuals without undue delay. Where your workshop is the controller of the data affected (data about its own customers), our breach obligations to you as a processor are set out in our Data Processing Agreement.

11. Internal access by Autera staff

Authorised Autera staff may access workshop data solely to provide customer support, troubleshoot issues, or comply with legal obligations. All such access is logged and auditable. Staff cannot modify customer data without your explicit request.

12. Cookies

For information about cookies and tracking technologies we use, see our Cookie Policy.

13. Children

Autera is a business product not intended for children. We do not knowingly collect personal data from anyone under 18.

14. Contact

Privacy queries: privacy@getautera.com
General contact: hello@getautera.com
Postal: FrameLogic Limited, 58 Rochester Avenue, Feltham, TW13 4EJ, United Kingdom

15. Changes to this policy

We may update this Privacy Policy from time to time. For material changes, we will notify you by email and post a banner in the app. The “Last updated” date at the top of this page reflects the latest version.

16. Data Protection Officer

At our current scale we are not required to appoint a statutory Data Protection Officer. Privacy matters are handled by Narcis Bujor, Director, who can be reached at privacy@getautera.com.