Privacy Policy

VIN Analytics, LLC ("VIN Analytics", "we", "us", or "our") operates the https://vinanalytics.com website and related products and services (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect information about you when you use the Service, and the choices you have.

By using the Service, you agree to the practices described here. Capitalized terms not defined here have the meanings given in our Terms of Service.

Controller & Contact (EEA/UK)

For purposes of EU/UK data protection law, VIN Analytics, LLC is the Controller of Personal Data we process about you, unless stated otherwise. You can contact us at [email protected].

1. Definitions

Personal Data: information that identifies, relates to, describes, or could reasonably be linked with an identified or identifiable person.
Usage Data: information collected automatically when you use the Service (e.g., device/browser type, IP address, pages viewed, timestamps, referring URLs).
Cookies: small data files stored on your device that help operate, analyze, and personalize the Service.
Controller: the entity that determines the purposes and means of processing Personal Data (here, VIN Analytics for data it controls).
Processor / Service Provider: a third party that processes data for us under instructions.

2. What We Collect

We collect the following categories of information:

Account & contact data: email address, name, password hash, business name (if provided), communication preferences.
Transaction data: purchase history, receipts, billing address (if provided). We do not store card numbers; payments are processed by our provider(s) (e.g., Stripe and/or PayPal).
Support & communications: messages you send us (e.g., email, forms), and metadata related to those messages.
Service usage: pages viewed; actions taken (e.g., document generation and downloads); error logs; IP address; device/browser type; user agent; timestamps; referral URLs.
Vehicle lookup inputs: vehicle identifiers you enter (e.g., VIN) and related query history. (While vehicle identifiers typically do not identify a person by themselves, we treat them as inputs you provide.)
Cookies & similar technologies: as described in the Cookies section below.

3. Sources of Information

Directly from you (e.g., account registration, purchases, support requests, search inputs).
Automatically through the Service (e.g., logs, cookies, analytics).
From service providers that help operate the Service (e.g., payment processing, security/CDN, hosting, analytics, email).

4. How We Use Information

Provide, operate, secure, and troubleshoot the Service.
Process transactions and deliver digital content you purchase.
Prevent fraud and abuse; enforce our Terms and acceptable use (including rate-limiting and anti‑bot measures).
Analyze usage to improve the Service and develop new features.
Communicate with you about your account, purchases, and important updates; send marketing communications where permitted (you can opt out).
Comply with legal obligations and protect our rights and users.

Legal Bases for Processing (EEA/UK only)

Where EU/UK data protection laws apply, we process Personal Data under these legal bases:

Contract necessity: to provide the Service, process transactions, and fulfill your requests.
Legitimate interests: to secure and improve the Service; prevent fraud and abuse; understand usage; and communicate with you about similar products or updates. We balance these interests against your rights and expectations and you may object to processing based on legitimate interests (see your rights below).
Consent: for certain analytics, cookies, or marketing where required. You may withdraw consent at any time.
Legal obligations: to comply with laws (e.g., tax, accounting, regulatory requirements).

5. Cookies & Similar Technologies

We use cookies and similar technologies for:

Strictly necessary: core site functionality, security, fraud prevention (e.g., session cookies, human verification).
Analytics: understanding how the Service is used (e.g., page views, features used).
Advertising/remarketing: showing relevant ads and measuring performance where applicable.

You can manage cookies via your browser settings and, where available, our cookie preferences tool (see Manage Cookies). If you disable certain cookies, parts of the Service may not function properly.

6. Disclosures of Information

We disclose information to the following categories of recipients for the purposes described above:

Service providers / processors: e.g., payment processing (such as Stripe and/or PayPal), security/CDN and bot mitigation (such as Cloudflare, including Turnstile), hosting/storage (such as AWS), analytics (such as Google Analytics), email and support tools.
Business transfers: as part of a merger, acquisition, financing, or sale of assets.
Legal & safety: to comply with law or legal process; to protect the rights, safety, and property of VIN Analytics, our users, and the public; to enforce our Terms.

No resale. We do not sell your Personal Data. Where we engage in advertising or analytics that could be considered a "sale" or "sharing" of Personal Data under certain U.S. state privacy laws, you can opt out as described in Section 10.

7. Retention

We retain Personal Data for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. Retention varies by category and purpose (for example, transaction records may be retained for tax/audit requirements). When no longer needed, we delete or de‑identify data consistent with our retention practices.

8. Security

We use administrative, technical, and physical safeguards designed to protect information. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. International Transfers

We are based in the United States and process data there and in other countries where our service providers operate. Where required, we rely on appropriate safeguards (e.g., contractual clauses) for cross‑border transfers.

10. Your Privacy Choices & Rights

Marketing communications

You can unsubscribe from marketing emails via the link in the message. We may still send non‑marketing messages (e.g., transactional or account notices).

We do not sell your Personal Data for money. Some states define "sale" or "sharing" to include certain analytics or advertising uses. Where applicable law treats these uses as a sale/sharing, you can opt out by using our cookie preferences tool and/or by sending a request to [email protected]. We also honor Global Privacy Control (GPC) signals for applicable browsers where required by law.

State‑specific rights (U.S.)

If you are a resident of certain U.S. states (e.g., California, Colorado, Connecticut, Utah, Virginia, and others with similar laws), you may have rights to:

access/know, correct, or delete certain Personal Data;
opt out of sale/sharing or targeted advertising;
receive your data in a portable format;
limit use/disclosure of sensitive Personal Data where applicable; and
appeal our decision if we deny your request.

To exercise these rights, contact us at [email protected]. We may need to verify your identity. Authorized agents may submit requests where permitted by law. We will respond within the timeframes required by applicable law and explain any denials and appeal options.

EEA/UK data subject rights

If the EU/UK data protection laws apply to our processing, you may have rights to access, rectify, erase, restrict, or object to processing, and to data portability. You may also lodge a complaint with your supervisory authority. Where we rely on consent, you can withdraw it at any time.

11. Managing Cookies

You can control cookies via your browser settings (e.g., blocking, clearing, or alerting when cookies are set). You can also adjust preferences via our cookie settings tool when presented (e.g., from the site banner or footer link). Note that disabling certain cookies may impair core functionality.

12. Children

The Service is not directed to individuals under 18, and we do not knowingly collect Personal Data from children. If you believe a child provided Personal Data, contact us and we will delete it.

13. Do Not Track & Signal Handling

Browser "Do Not Track" (DNT) signals are not consistently interpreted. We do not respond to DNT signals, but we do honor Global Privacy Control (GPC) signals where required by applicable law. You can also use our cookie preferences tool to manage analytics/advertising cookies.

14. Third‑Party Links

Our Service may contain links to third‑party sites. Their privacy practices are governed by their own policies. We are not responsible for those practices.

15. Changes to This Policy

We may update this Policy from time to time. We will post the updated Policy with a new effective date and, if changes are material, provide additional notice (e.g., by email or in‑product notice). Your continued use after the effective date means you accept the updated Policy.

16. Contact Us

Questions? Contact VIN Analytics, LLC.