This Privacy Policy explains how Initiate Sàrl (“Motivation Drivers”, “we”, “us”) collects, uses, stores, and protects personal data when you use motivationdrivers.com and the Motivation Drivers coaching platform. We are committed to processing personal data in accordance with the General Data Protection Regulation (GDPR) and the Swiss Federal Act on Data Protection (FADP).
1. Who We Are
The data controller is Initiate Sàrl, a company registered in Geneva, Switzerland. Our primary contact for data protection matters is support@motivationdrivers.com.
2. What Personal Data We Collect
2.1 Account data (coaches)
- First name, last name, email address, job role, and organisation name collected at registration
- Subscription and billing information (payment is processed by Stripe; we do not store card details)
- Login credentials (password is stored as a one-way hash; we never store plain-text passwords)
2.2 Respondent data (your clients)
- First name, last name, email address, job title, and organisation name, provided by the coach when sending an assessment invitation
- Assessment responses: 68 questionnaire items answered by the respondent
- Completed motivation profile scores and the AI-generated reports derived from them
2.3 Usage and analytics data
- Pages visited, session duration, and browser/device information collected via Google Analytics 4
- Session recordings and heatmap data collected via Microsoft Clarity
- Server access logs retained for security and diagnostic purposes
2.4 Communications
If you contact us by email or through the contact form, we retain your message and contact details to respond to your enquiry.
3. How We Use Personal Data
- To deliver the service: account management, assessment delivery, report generation, and the AI coaching workspace
- To process payments: subscription billing via Stripe
- To improve the platform: aggregated, anonymised usage analytics
- To communicate with you: transactional emails (account activation, payment receipts), and service updates
- To comply with legal obligations: records required under Swiss and EU law
4. Legal Basis for Processing
- Contract performance: processing necessary to deliver the subscription service you have signed up for
- Legitimate interests: platform security, fraud prevention, and service improvement through anonymised analytics
- Legal obligation: compliance with applicable Swiss and EU regulations
- Consent: analytics cookies, where consent is required and obtained via our cookie banner
5. AI Report Generation — GDPR Design
When generating individual and team reports, we send only a respondent’s first name and job title to the Claude API (operated by Anthropic PBC). No last names, email addresses, organisation names, or other identifying information are transmitted to the AI service. All other personal data remains on our servers. Full names and organisation details are added to report covers from our database after the AI response is received, and never leave our infrastructure.
6. Sub-processors
We use the following third-party sub-processors to deliver the service:
- Anthropic PBC (USA) — Claude API for AI report generation. Only first name and job title transmitted. Data Processing Agreement in place.
- Stripe Inc. (USA) — Payment processing. We do not store card data; it passes directly to Stripe.
- Google LLC (USA) — Google Analytics 4. Anonymised usage analytics.
- Microsoft Corporation (USA) — Microsoft Clarity. Session recording and heatmap analytics.
- Unlimited.rs (Serbia) — Web hosting and server infrastructure.
Transfers to sub-processors outside the EEA/Switzerland are governed by Standard Contractual Clauses (SCCs) or adequacy decisions where applicable.
7. How Long We Retain Data
- Coach account data: retained for the duration of the subscription plus 12 months after cancellation, then deleted or anonymised
- Respondent and report data: retained for the duration of the coach’s active subscription. Coaches may delete individual respondent records at any time.
- Analytics data: Google Analytics retains data for 14 months. Clarity retains session data for 90 days.
- Contact form submissions: retained for 12 months then deleted
- Server logs: retained for 30 days for security purposes
8. Your Rights
Under GDPR and the Swiss FADP you have the right to:
- Access the personal data we hold about you
- Rectify inaccurate or incomplete data
- Erase your personal data (“right to be forgotten”)
- Restrict processing in certain circumstances
- Data portability — receive your data in a structured, machine-readable format
- Object to processing based on legitimate interests
- Withdraw consent at any time where processing is based on consent
To exercise any of these rights, email support@motivationdrivers.com. We will respond within 30 days.
9. Cookies
We use cookies for analytics purposes. You can manage your cookie preferences through our cookie banner when you first visit the site. See our Cookie Policy for full details.
10. Data Security
We implement appropriate technical and organisational measures to protect personal data, including HTTPS encryption in transit, hashed password storage, and access controls limiting who can access personal data within our systems.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated by email to registered coaches. The date at the top of this page reflects the most recent revision.
Questions about this document? Contact us at support@motivationdrivers.com