Data Processing Conditions

Provisional conditions of Motovolo Inc. (Panama) for CurateGrid workspaces that entrust it with processing personal data. Date: 16 October 2026, GMT-5.

Scope and instructions

The service hosts materials, organizes access and reviews and retains versions, evaluations and decisions for the purpose defined by the workspace organizer. Processing includes receipt, storage, consultation, technical transformation, transmission to authorized participants and retention or removal operations needed to provide the service.

Data may concern organizers, reviewers, participants, authors and people represented in materials. Categories include identifiers and contact information, permissions, files and metadata, comments, votes and activity. The organizer must limit data to what is needed and establish a valid basis for providing it.

The organizer controls those purposes. Motovolo acts as processor insofar as it follows the organizer's instructions and retains its own responsibilities for accounts, security and purchases. Instructions are communicated through workspace settings and agreed service channels. An unlawful instruction must be reviewed and does not authorize processing.

Protection and cooperation

Access is limited to authorized people and providers according to their function and appropriate confidentiality obligations. Measures include authentication and workspace permissions, protected communications and recovery copies. These measures reduce risk and do not constitute an absolute guarantee or certification.

Motovolo assists with data-subject requests, security questions and available information for reviewing processing. Incidents are assessed and communicated according to applicable legal and contractual obligations; no universal operational notification or resolution period is asserted. Evidence review must protect other workspaces' data and service security.

Providers and their functions are described in Providers and Subprocessors. Institution-specific conditions or authorizations must be documented through the contracting channel; this page does not itself establish an international transfer agreement or replace legally required annexes.

Duration and ending processing

Processing continues during service provision and justified closing, legal retention and recovery operations. Organizers may request delivery or erasure through their existing support or contracting channel. Scope and authority are checked and relevant limitations explained; no complete-export button or immediate deletion of every copy is promised.

Content is not intended for model training. Educational workspaces must minimize data and obtain required permissions; using the service does not automatically establish FERPA, COPPA or GDPR compliance. Where a specific processing agreement is required, it must be concluded with the institution and supplement these conditions.