Your privacy is important to us. This policy explains how we collect, use, and protect your information.
Update Effective: September 19, 2025
VINchex and its affiliates (collectively or individually, as applicable, referred to as "VINchex", "we", "our", "us") respect your right to privacy. This Privacy Policy ("Policy") explains who we are, how we collect, share, transfer and use personal information about you, and how you can exercise your privacy rights. This Policy applies to interactions we have with you via our website, applications, and other products and services including events, where you otherwise contact us and where we otherwise display or link to this Policy ("Services") or in the course of our receipt of products or services from you or your employer.
Please note that some privacy rights and obligations may differ in certain locations based on applicable local data protection laws. We have included supplemental information for certain jurisdictions in this Policy. Third parties that link from or to our Services, or from whom we collect personal information may have their own privacy policies and practices. This Policy does not apply to sites or applications offered by other companies or individuals, including third party products and services, that may be displayed as content in a search on our website. Please review any third-party policies to learn more about their practices.
To the extent a notice provided at the time of collection from a website or specific product conflicts with this Policy, the terms of that specific notice or supplemental privacy statement will apply.
If you enter into a separate agreement with us which requires, or contemplates, collecting, sharing, transferring, using or otherwise processing information about you in a manner that is different than that which is described in this Policy, the terms of that agreement will apply.
The information that we collect from or about you falls into the following broad categories:
As part of our Services, you may provide certain information to us, such as your contact details, user credentials, and employment information. A few examples include when you fill out an on-line form to register to use our Services or to receive reports through our website. You may also provide us with your business card information or other contact information as you conduct business with us or you request information from us.
| Types of Personal Information | Why We Collect It |
|---|---|
| Billing information (including your payment card information) |
|
| Contact details such as name, telephone numbers, email address and postal address |
|
| User credentials including name, email address, signature and login information |
|
| Employer and employment information such as job title, company affiliation, function, seniority, department and office location | To manage your individual user account when it is covered by an account of a VINchex corporate customer, such as the corporate account of your employer. |
| Issues, questions and problems you have when using our Services, user preferences and how you use our Services | To maintain your account, provide technical support, remedy issues, train you in the use of our Services and keep an auditable record of all such communications. |
We may collect information automatically from your device, including information regarding how you use our Services. Where required by law, we will obtain your consent before we place any cookies on your device that are not strictly necessary for the functioning of our websites.
Information we may collect automatically includes your log-in events, IP or MAC address, device make, model and operating system, mobile network information, internet service provider, unique device identification number, advertising ID, browser type and language, geographic location and other technical information. We may collect "click stream" data about how your device interacts with our Services.
We use this automatically collected information:
We may receive personal information about you from other sources (including your employer or business partner if you use Services covered by a subscription). Where you register as a user, we will endeavor to check that these third parties have your consent or are otherwise legally permitted or required to disclose your personal information to us.
The automotive business collects and compiles motor vehicle registration and title information to provide products and services to authorized entities pursuant to 18 U.S.C.A. §2721 and similar state laws governing the use of such information. Consumer information from motor vehicle records is used in compliance with the governing laws and regulations and thus not used by VINchex or provided to other entities for direct marketing purposes. To access or correct your motor vehicle registration and/or title information, you must contact your state's department of motor vehicles or other state agency that processes motor vehicle titles and registration.
To the extent we maintain and use personal information in a deidentified or anonymized form, we will not attempt to reidentify the information, except for the purpose of determining whether our deidentification/anonymization processes satisfy our legal obligations.
When you download, access or otherwise use one of our mobile apps, the information that we collect depends on your device, in-app and operating system permissions. Our apps may require access to applications and/or data on your mobile device to function. When you agree, some of our apps collect the precise geo-location of your mobile device and some of our apps also collect information that may be personal information about you or others, from or about:
We may also automatically collect app logs and usage statistics. To stop collection of all information through one of our apps, please uninstall the app.
The categories of personal information listed above may be disclosed to the following categories of recipients:
Our group companies and joint venture companies, service providers including professional advisers, financial institutions, external auditors, product content providers, business partners and any organization that arranges your access to our products or services.
We share personal information with those authorized parties for purposes consistent with those described in this Policy. In addition to the purposes described in this Policy, personal information handled by our service providers may be subject to their terms of use and privacy policies.
We may provide personal information to your employer for purposes such as to fulfill and enforce our contract with them, to inform them of potential group training needs, to inform them of Service use by certain categories of users and for pricing purposes.
We may provide personal information to any competent law enforcement body, regulatory, government agency, court or other third party in accordance with applicable law when we believe disclosure is necessary (i) as a matter of applicable law or regulation, (ii) to protect against fraud or for risk management purposes, (iii) to cooperate with relevant agencies for the investigation and prevention of crimes, (iv) to exercise, establish or defend our legal rights, (v) to protect your vital interests or those of any other person, or (vi) to protect the interests, rights, safety or property of us or others.
We may provide personal information to a potential buyer or a target in connection with any proposed sale, purchase, merger, transfer, acquisition or liquidation or similar event, of all or any part of our businesses. If such a change happens, the buyer or target will use your personal information in the same way as set out in this Policy or will inform you about how it will use your personal information as required by applicable law.
Personal information that you disclose on message boards, chat areas or social media pages or in direct messages to other users may be collected and used by third parties without our knowledge or control. The Services may offer you the ability to share personal information through social networking sites using integrated tools. We encourage you to use caution when publicly disclosing your personal information.
We may ask for your consent to share your information with other unaffiliated third parties who are not described elsewhere in this Policy.
Our legal basis for collecting and processing personal information depends on the personal information concerned, the context in which we collect it and the applicable laws and regulations.
Generally, we collect personal information from you where: we have your consent to do so; we need the personal information to perform a contract with you; or, in some jurisdictions such as the European Economic Area ("EEA"), the processing is in our legitimate interests and not overridden by your data protection interests or fundamental rights and freedoms, or the processing is otherwise consistent with applicable law.
If we ask you to provide personal information to comply with a legal requirement or to perform a contract with you, we will inform you whether the provision of your personal information is mandatory and the possible consequences if you do not provide your personal information.
Generally, we may use cookies and similar tracking technology (collectively, "Cookies") in certain Services (in particular our websites and some mobile applications) to collect and use personal information about you, in order to better understand and improve the usability, performance, and effectiveness of our Services, to help us tailor content or offers for you, and to serve our targeted, interest-based advertising. Where required by applicable law, we will obtain your consent before we place any Cookies on your device that are not strictly necessary for the functioning of our websites.
We may use Google Analytics to better understand how visitors use our Services. Google Analytics uses Cookies to help us analyze how users use our Services. Personal information generated by these Cookies about your use of our Services (including your IP address) will be transmitted to and stored by Google on servers in the United States of America.
Some browsers allow you to send a "Do Not Track" signal. Because there is no consistent industry understanding of how to respond to such signals, we do not respond to browser-initiated "Do Not Track" signals. We will however treat any opt-out preference signal as a valid opt-out request where required under applicable law.
We protect personal information that we process with appropriate technical and organizational measures designed to provide a level of security appropriate to the risk of processing your personal information. We will notify you about any security incident involving your personal information through email, correspondence, telephone, push notification or other means, as required by applicable law. If you think your data is the subject of a security incident and we have not notified you, or if you are concerned about the security of your data, please contact us using the information provided below.
Your personal information may be transferred to, and processed outside, the jurisdiction in which you reside. These other jurisdictions may have data protection laws that are different from the laws of the jurisdiction of your residence (and, in some cases, not as protective).
Our servers may be located outside of the jurisdiction where we collected the data. We may store and replicate your personal information on servers in other jurisdictions, in order to provide speed of access, robustness and protection against server failure.
Where your personal information is transferred by us or on our behalf, we implement appropriate safeguards to protect your personal information in accordance with this Policy. These safeguards include implementing applicable standard contractual clauses for transfers of personal information between our group companies, which require group companies to protect personal information they transfer from the jurisdiction in which it was collected in accordance with applicable data protection law.
Our applicable information governance policies, procedures and standards require that personal information be retained for as long as we have an ongoing legitimate business need to do so (for example, to provide you with a Service you have requested, or to comply with applicable legal, tax or accounting requirements).
Once we no longer have a legitimate business need to process your personal information, our applicable information governance policies require that we either delete or anonymize your personal information, or if deletion or anonymization is not possible, then pseudonymize and/or securely store your personal information and isolate it from any further processing until deletion is possible.
Depending on which laws apply to your personal information, you may have the right to make the following requests:
Please note, not all of the rights described above are absolute, and they do not apply in all circumstances. In some cases, we may limit or deny your request because the law permits or requires us to do so. We will not discriminate against individuals who exercise their privacy rights under applicable law.
You may contact us at privacy@vinchex.com to exercise any of your rights. If you disagree with how we handled a request, you may appeal our decision by contacting us with the subject line "Appeal."
We respond to requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws, which typically require a response within 30 days. Please be aware that in order to accommodate some requests, we must verify your identity, and this may require you to provide photographic or other forms of identification.
We review and update this Policy from time to time. When we do, we will bring those updates to your attention, for example, by noting the date of the version on the Policy, posting the updated version here or sending you a notification. To the extent that this Policy changes in a material way, the Policy that was in place at the time that you submitted personal information to us will generally govern that information unless we receive your consent to the new policy.
This United States of America Addendum ("US Addendum") supplements this Policy and applies in relation to the processing of personal information of residents of the State of California, Colorado, Connecticut, Virginia, and Utah by VINchex. In case of any inconsistencies between this US Addendum and the rest of this Policy, this US Addendum prevails.
We also recognize Global Privacy Control (GPC) signals and other user-enabled opt-out preference signals as valid opt-out requests where required by applicable law.
Residents of the State of California also have the right to request information regarding third parties to whom the company has disclosed certain categories of personal information during the preceding year for the third parties' direct marketing purposes.
Certain information we collect may be exempt from applicable US State privacy laws because it is considered public information or covered by a federal privacy law, such as the Gramm-Leach-Bliley Act, the Health Insurance Portability and Accountability Act, the Fair Credit Reporting Act or the Driver Privacy Protection Act.
Subject to certain limitations and depending on your state of residence, you have certain rights with respect to your personal information, as described in the "What Are Your Data Protection Rights?" section of this Policy.
To submit a request to exercise your rights (or to submit a request on behalf of a consumer as an authorized agent):
If you have any questions or concerns about our use of your personal information, or if you need to access this Privacy Policy in an alternative format due to having a disability, please contact us:
Email: privacy@vinchex.com