What we never store
Images of identity documents and biometric data never reach our systems. Identity checks happen with our verification provider; we keep only a reference, the result, the reasons given and the time.
We use your IP address only as a risk signal to decide when stronger verification is needed. It is never treated as proof of who you are.
What we collect
Account details (email address and display name), the records you contribute along with when and how they were captured, the vehicles you follow, your purchases, and device and usage signals we use to prevent abuse.
What is public
Records you publish to a VIN Passport are public, together with your display name and verification level. Drafts stay private to you until you publish them.
Original documents you upload (receipts, invoices, title papers, inspection forms) are not public: only you and our review team can open the file. The vehicle's record shows what a document records, such as the date, the mileage and the work done, without names, addresses or card details from it.
Shop visits and service reminders
When a shop uses WIN by VIN for your visit, the shop enters your name, your e-mail and what you asked for, records your car's condition at check-in, and lists the work it recommends with its own prices. That visit is private to the shop's staff and to whoever holds the link the shop sends you; it is never on your car's public record. If you approve work, we keep your typed name, your answers and the time, for you and the shop. If the shop publishes the finished work to the car's record, it shows the work, the date and the mileage only: no name, contact details or prices.
If you review a shop, the review shows your first name and the first letter of your last name, never your e-mail or the car's VIN.
Service reminders, the intervals you set and the mileage you enter are private to your account and are not added to the car's record.
A copy of your data
You can download the data we hold about your account at any time from your garage (Download my data). It includes your account details, purchases, subscriptions, the vehicles you follow, your submissions, inspection requests and the records you contributed.
Deleting your account
You can delete your account at any time from your garage. We first cancel any subscription, so you won't be charged again, and sign you out everywhere. We then remove your email address, name, public handle and sign-in methods, the contact details on your inspection requests, and your service reminders. A shop's own record of a visit with you stays with that shop, no longer linked to your account.
Records you published stay on the vehicle's history, because a vehicle's history must not silently change, but they are shown as "Former contributor" instead of your name. Purchase and refund records are kept for accounting, without your contact details.
Contact
Privacy requests and questions: support@winbyvin.com.