Privacy Policy

Effective Date: 28 May 2025

PlateToVIN Ltd ("PlateToVIN," "we," "our," or "us"), Company No. 14107525, provides a B2B API and dashboard that convert U.S. licence‑plate numbers into VINs. This Privacy Policy explains how we collect, use, retain and disclose information when you ("Customer") create an account or use our Service.

1. Scope of This Policy

This Policy applies to information we process when you visit platetovin.com, sign up for an account, or integrate with our API. It does not cover the privacy practices of third‑party sites or services that may interact with PlateToVIN.

2. Information We Collect

Category	Details
Account Information	Name, business e‑mail address, hashed password, PayPal Customer ID
Security Logs	IP address used at login and other authentication metadata
API Usage Data	Licence plate, state, VIN, decoded VIN fields, timestamp, and API key used
Device & Analytics Data	Browser type, operating system, referrer URL, and Google Analytics cookies

We do not intentionally collect information directly about individual vehicle owners beyond the plate and VIN data required for the lookup.

3. How We Use Information

Provide and maintain the Service (account creation, authentication, API responses).
Security and fraud prevention (IP‑log analysis, abuse monitoring).
Billing and account management through PayPal.
Compliance and audit under the U.S. Driver Privacy Protection Act (DPPA) and other applicable laws.
Analytics and product improvement using aggregated, statistical reports.
Research and industry insights—we may publish anonymised, aggregate statistics such as "most‑queried vehicle models" that cannot reasonably be linked back to any specific Customer.

We do not sell personal information.

4. Cookies and Tracking Technologies

We use Google Analytics to understand how visitors use our marketing site and dashboard. Google Analytics sets first‑party cookies that record page views, events, and other usage metrics. You can opt‑out by installing the Google Analytics opt‑out browser add‑on.

Recipient	Purpose
PayPal, Inc.	Payment processing (we receive only the PayPal Customer ID and related metadata).
U.S. hosting provider(s)	Infrastructure that stores and processes all Service data.
Law‑enforcement or regulators	Where required to comply with applicable law, court order, or DPPA‑related request.

We do not otherwise share, rent or sell personal information.

6. Data Retention

We retain account records, API logs, and lookup data indefinitely for security auditing, historical analytics, and DPPA compliance, unless you instruct us to delete your account data (see Section 9).

7. Security Measures

Hashing and salting of passwords in line with industry standards.
TLS 1.2+ encryption in transit.
Internal access‑control policies.
Continuous monitoring and logging of authentication IPs and API usage.

8. International Transfers

All data is stored and processed on servers located in the United States. By using the Service, you consent to this transfer and storage.

9. Your Choices and Rights

Because PlateToVIN serves U.S. businesses, specific statutory data‑subject rights (e.g., GDPR or CCPA) do not apply. Nevertheless, Customers may email [email protected] to:

Access a copy of their account information.
Correct inaccurate account details.
Delete their account and associated lookup history (subject to legal retention obligations).

10. Children’s Privacy

The Service is intended solely for business users age 18 +. We do not knowingly collect data from anyone under 18. If you believe a minor has provided us with personal information, contact us immediately.

11. Changes to This Policy

We may update this Policy from time to time. Material changes take effect upon posting the revised Policy on our site. Continued use of the Service after changes become effective constitutes acceptance.

12. Contact Us

If you have any questions about this Policy or our data‑handling practices, please email [email protected].