Privacy policy

The controller for data processing is the provider named in the imprint. You will find the full contact details there.

Salomoto is an AI-assisted motorcycle buying companion with a free rider platform. We process the data you give us to provide exactly these features.

We do not sell personal data and we do not run personalized advertising. There are no advertising trackers and no sharing with ad networks.

For an account we process your email address, name or username and a password (stored only as a cryptographic hash). Sign-in uses technically necessary session cookies ("better-auth.session_token", or with the "__Secure-" prefix) which are set HttpOnly and enable no profiling.

You use Bike Match with your account. A technically necessary cookie ("bike_match_guest") from the former public trial may still be present in your browser; if you sign in, we move the conversation linked to it into your account and delete the cookie. We no longer set new guest cookies.

We only set technically necessary cookies: the sign-in session cookies and — only left over from the former public Bike Match trial — the guest cookie "bike_match_guest", which we no longer set. There are no third-party advertising or tracking cookies.

Should consent-requiring cookies ever be added, we will actively ask for your consent first.

Profile, Rider DNA, BikeDex, garage, rides, photos, notes and the listings (URLs and content) you collect in Bike Hunt are stored in our database so the platform can do its job: your motorcycle life in one place.

Photos and documents live in S3-compatible object storage and are reachable only via short-lived, signed links.

For Checks, Bike Match, the inspection assistant and negotiation support we send the content needed for the answer (e.g. listing text, your questions, your inspection findings) to an AI provider (OpenAI or OpenRouter) acting as a processor. What is transmitted is what the respective answer requires — no address book, no payment data.

AI output can be incomplete or wrong; it is decision support, not an assurance. Details are in the Terms.

When you enter a place (e.g. your home base in the profile, a listing's location or a place in the route planner), we send the typed query to a geocoding service (OpenStreetMap Nominatim or a Photon instance) to turn it into coordinates. Only the search query itself is transmitted.

In the route planner the search query likewise goes only to this service; we neither store nor log it.

You can use the route planner without an account. We calculate start, destination, stops and your chosen options on our own servers with a self-hosted routing service based on OpenStreetMap data. Planned routes are neither stored nor logged; they stay in your browser tab. To prevent abuse we count requests per network using a daily-rotating, non-reversible key — the IP address itself is not stored.

The map view loads map tiles directly from OpenFreeMap (openfreemap.org); for technical reasons OpenFreeMap receives your IP address and the map areas shown. Map data © OpenStreetMap contributors.

With “Open in Google Maps” you hand the start, destination and some points of the route to Google Maps; this only happens when you tap it, and from then on Google's privacy policy applies. A GPX export is created entirely in your browser and is not sent to us.

Transactional emails (e.g. the Early Access confirmation) are sent via the provider Resend. Your address is used for that — not for newsletters you never asked for.

To improve the product we use PostHog with EU data residency (events such as page views and feature usage, pseudonymous via the account ID for signed-in accounts). For error diagnostics we use Sentry; error reports are transmitted without deliberately included personal content.

Both services serve operating and improving the platform, not advertising.

Payment processing for Salomoto Plus is handled by Stripe as payment processor: the purchase is completed on Stripe's secured payment pages, and card numbers and other payment data never reach Salomoto. Salomoto remains the seller and your contract partner.

From Stripe we receive the subscription state (e.g. active, cancelled, payment issue) and the details we need to provide the service — never full payment data. Until purchase is enabled, this integration exists but is not yet activated.

We store personal data for as long as it is needed for the purposes described or as long as statutory retention duties exist. If you delete your account, your content is deleted or anonymized unless a retention duty prevents it.

Under the GDPR you have the right of access, rectification, erasure, restriction of processing, data portability and objection. Use the contact details in the imprint for this.

You also have the right to complain to a data protection supervisory authority.

When the platform changes, this policy changes with it. You will always find the current version on this page.