Privacy Policy
1) What we collect
- Account data: email address, password hash, and basic account settings.
- Transaction data: purchases, redemptions, subscription status, and order identifiers.
- VIN inputs: VINs you submit to generate reports.
2) What we do not collect
- We do not store full payment card details. Payments are processed by PayPal or other payment providers.
- We do not sell personal information to third parties.
3) How we use information
- Provide the Service, generate reports, and deliver purchased products.
- Process payments, prevent fraud, and handle disputes/chargebacks.
- Operate, secure, and maintain the platform (logging, monitoring, abuse prevention).
- Support: respond to requests and troubleshoot issues.
- Optional marketing emails if enabled and if you opt in (you can opt out at any time).
4) Sharing
We share information only as needed to run the Service:
- Payment processors (e.g., PayPal) to complete transactions.
- Infrastructure providers (hosting, logging, email delivery) to operate the Service.
- Legal: when required by law, subpoena, or to protect rights, safety, and prevent fraud.
5) Email
We may send transactional emails (receipts, account notifications, redemption confirmations). Promotional emails are optional and may be disabled in account settings or via the unsubscribe link when provided.
6) Cookies and identifiers
We use first-party storage (such as localStorage/cookies) to maintain login sessions and basic settings. We may also store basic identifiers used for security (e.g., fraud prevention and rate limiting).
7) Data retention
- Account and transaction records are retained as needed for operations, support, and legal compliance.
- Security/audit logs are retained for a limited period or as required to investigate abuse and disputes.
- You may request deletion of your account where legally permissible; some records may be retained for compliance and fraud prevention.
8) Security
We use reasonable technical and organizational measures to protect data (access controls, logging, and encrypted transport where available). No system is 100% secure; you are responsible for keeping your login credentials confidential.
9) Changes
We may update this policy from time to time. We will post the updated version here with a new effective date.