Skip to content

Your records stay private to your dealership.

Motorvar shows your dealership's records only to your own team, and each person sees what their role allows. Your data is also backed up every night.

Each dealership's data is kept apart.

Every screen, report and export is limited to the dealership you're signed in to, and automated tests run on every change we make to check that one dealership can't read another's records.

Public car pages use a fixed list of fields, so costs, internal notes, customers and your license number never appear on them.

Dealership separationExample
Your dealership

Can be public

  • published photos
  • price
  • description
  • address
  • hours

Never public

  • cost
  • notes
  • customers
  • license number
Another dealership

Their own team.

Their own records.

People see only what their role allows.

Five roles decide who can change what. On every car and deal page, Motorvar removes gross and the car's cost on the server for anyone who isn't an owner or manager, and only owners and managers can export.

Example
What each role can do (example of the permissions in Motorvar)
CapabilityOwner adminManagerSalespersonReconOffice
See gross and what each car costYesYesNoNoNo
Add, edit and publish carsYesYesNoNoNo
Move a car's status and recon stageYesYesNoYes (not into or out of Pending sale or Sold)No
Work recon tasksYesYesNoYesNo
Archive or wholesale a carYesYesNoNoNo
Work leads and customersYesYesYesNoNo
Assign leadsYesYesClaim unassignedNoNo
Create and work dealsYesYesYesNoNo
Set deal creditYesYesNoNoNo
Close or cancel dealsYesYesNoNoNo
Work readiness and deal checklistsYesYesNoNoYes
Upload documentsYesYesNoNoYes
Read documents and the inboxYesYesYesNoYes
Export CSVsYesYesNoNoNo
Manage the teamYesYes (not owner admins)NoNoNo
Edit checklist templatesYesYesNoNoNo
Change dealership settings, lender programs and rooftopsYesNoNoNoNo
Full table on Team and roles

Sign-in links go only to people you've invited.

There are no passwords. A sign-in link only goes to an active member or someone with an open invitation, people who've been deactivated can't sign in, and sign-in requests are rate-limited. Owner admins can review the team's recent sign-ins.

Member sign-in activityExample

Member sign-in activity

MemberEventWhen
keisha@example.comChrome on WindowsSigned inOct 5, 6:55 PM
luis@example.comSafari on iPhoneSigned inOct 5, 5:40 PM
dana@example.comChrome on MacSigned inOct 5, 8:05 AM

Changes and downloads are recorded.

The activity log records who changed what and when, and every export and document download is logged too.

Emails dealerships send through Motorvar can include a small image and link redirects that tell the dealership when an email was opened or a link was clicked.

ActivityExample
WhenActorActionEntityDetail
Oct 9, 9:41 AMDana WhitfieldDocument downloadedDocumentInsurance.pdf
Oct 9, 9:30 AMLuis OrtegaInventory exportedVehicle23 records
Oct 5, 6:55 PMLuis OrtegaPrice changed from $18,950 to $18,450Vehicle2018 CR-V EX

Files stay private unless you publish them.

Photos and documents are only served to signed-in members of your dealership. Public listing photos are separate copies, kept in a separate store with location data removed.

Motorvar checks that each uploaded document really is a PDF, a JPEG or PNG photo, or a Word file before accepting it. Customer upload links expire after 7 days, and Motorvar keeps only a one-way hash of each link.

Private and public filesExample
Private store

Originals
Documents

Public store

Published photo copies

Published photo copies, location removed

Every page loads over a secure connection and can't be shown inside another site.

Each page also sends a strict content security policy that limits which scripts can run on it. The forms on your car pages use a hidden field, a timing check and rate limits to keep spam out.

Web protectionsExample
  • Strict-Transport-Security
  • Content-Security-Policy
  • X-Frame-Options
  • X-Content-Type-Options
  • Referrer-Policy
  • Permissions-Policy

Your data is backed up every night.

The database is copied every night to a separate private store, each copy is checked after it's written, and the last 30 are kept. Vehicle photos are copied nightly too, and a deleted photo's backup is kept for 30 days.

Nightly backupsExample

Last 30 nightly backups

You can take everything with you.

An owner can download the whole dealership from Settings, with every record as a spreadsheet and the original photos, documents and attachments in ZIP files. Owners and managers can also export records to CSV at any time.

Settings / Export everythingExample

Export everything

Complete dealership archive

Every record and file your dealership has in Motorvar, as spreadsheets and the original files, in one or more ZIP downloads. Your files come to about 126 MB, and the spreadsheets add a little to that. The archive doesn't count toward your storage limit.

It keeps building while Settings is open, and otherwise carries on once a night until it's done. We'll email you when it's ready, or if it can't finish. You then have 7 days to download it.

Anything you change while it's being built may or may not be in the archive.

No archive has been requested yet.

Download everything (ZIP)

Large exports over a cap are refused: no file is produced, and a page explains why. Most exports stop at 5,000 rows, the messages export at 100, and the appointments export at 500. The reports export is refused when any section exceeds its separate cap, from 500 to 5,000 rows. For leads, lead activity, customers, deals and recon exports, the refusal page offers a date range to export in parts.

This dealership is using 126 MB of measured storage: 18 MB of documents and 108 MB of private vehicle photos. Public listing photo copies and backup copies are not included.

No storage limit is set for this dealership, so uploads are not capped by total size.

Inventory CSVLeads CSVLead activity CSVMessages CSVCustomers CSVDeals CSVAppointments CSVRecon CSVReadiness CSVActivity log CSVStaff roster CSVReports CSVSettings CSV

Customers who ask not to be emailed are left alone.

Mark a customer do-not-contact when they ask you to stop, and every automatic email skips them.

Contact preferencesExample

Automated email contact

Automated emails stopped

Resume automated emails

If you find a security problem, please tell us.

Try Motorvar free for 14 days.

We set up your dealership with you and help bring your records over. Already using Motorvar? Sign in.

Start your free trial