Privacy Policy

Account Information. When you register, we collect your email address, name, and a hashed password (or OAuth provider token). We do not store plaintext passwords.

Usage Data. We automatically collect information about how you interact with the Service, including VINs you submit, Reports you generate, pages visited, timestamps, IP addresses, browser type, and device identifiers.

Payment Information. Payment card details are collected and processed directly by Stripe, our third-party payment processor. We receive only a tokenized reference and the last four digits of your card. We do not store full card numbers.

Communications. If you contact us by email or through a support form, we retain the content of that communication and your contact details.

Cookies & Tracking. We use first-party cookies and similar technologies to maintain session state, remember preferences, and analyze usage patterns. We do not sell data to advertising networks.

We use the information we collect to:

• Provide, operate, and improve the Service.
• Process transactions and manage your Credits and subscription.
• Send transactional emails (account confirmation, password reset, receipts).
• Send service-related notices, including credit balance alerts and renewal reminders.
• Detect, investigate, and prevent fraudulent or unauthorized activity.
• Comply with legal obligations and enforce our Terms of Service.
• Analyze aggregate, de-identified usage trends to improve product features.

We will not use your personal information for purposes materially different from those described above without your consent.

If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal data under the following legal bases:

• Contract performance — to provide the Service you have requested.
• Legitimate interests — to improve the Service, prevent fraud, and ensure security.
• Legal obligation — to comply with applicable laws and regulations.
• Consent — for optional marketing communications, which you may withdraw at any time.

We do not sell your personal information. We share information only in the following circumstances:

Service Providers. We share data with trusted vendors who process it on our behalf (e.g., Stripe for payments, Supabase for database hosting, email delivery providers). These vendors are contractually bound to use your data only to provide services to us.

Data Providers. To generate Reports, we submit VINs to third-party data sources (e.g., NHTSA, FEMA, market data feeds). These submissions contain only the VIN and no personally identifiable information.

Legal Requirements. We may disclose information if required by law, subpoena, court order, or to protect the rights, property, or safety of Auto VIN Scout, our users, or the public.

Business Transfers. In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via email or prominent notice on the Service before your data is transferred and becomes subject to a different privacy policy.

We retain your account information for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal, tax, or fraud-prevention purposes.

Report data (VINs queried and results) may be retained in de-identified, aggregated form for product analytics after account deletion.

We implement industry-standard technical and organizational measures to protect your information, including encryption in transit (TLS), encryption at rest, access controls, and regular security reviews. However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

In the event of a data breach that affects your personal information, we will notify you as required by applicable law.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your personal data (subject to legal retention obligations).
• Restrict or object to certain processing activities.
• Data portability — receive a copy of your data in a structured, machine-readable format.
• Withdraw consent for marketing communications at any time via the unsubscribe link in any email.

To exercise any of these rights, contact us at mail@example.com. We will respond within 30 days. We may need to verify your identity before processing your request.

If you are a California resident, you have the right to know what personal information we collect, disclose, or sell; the right to delete your personal information; and the right to opt out of the sale of personal information. We do not sell personal information as defined under the CCPA. To submit a verifiable consumer request, contact us at mail@example.com.

The Service is not directed to children under the age of 13, and we do not knowingly collect personal information from children. If we learn that we have inadvertently collected information from a child under 13, we will delete it promptly. If you believe we have collected such information, please contact us immediately.

We use strictly necessary cookies to operate the Service (e.g., session management). We may use analytics cookies to understand usage patterns. You can control cookie preferences through your browser settings. Disabling cookies may affect Service functionality.

We do not use cross-site tracking cookies or share data with advertising networks.

Auto VIN Scout is operated from the United States. If you access the Service from outside the US, your information may be transferred to and processed in the United States, where data protection laws may differ from those in your country. By using the Service, you consent to this transfer. Where required, we rely on Standard Contractual Clauses or other lawful transfer mechanisms.

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date above and notify you by email or in-app notice where appropriate. Your continued use of the Service after the effective date constitutes acceptance of the revised policy.

If you have questions, concerns, or requests regarding this Privacy Policy, please contact us at mail@example.com.