Privacy policy
How information is used to provide Vinver.
Controller and contact
Information we process
We process account identity and contact details, authentication sessions, order and billing records, payment references, support messages and security logs. VINs and report-use records are processed to retrieve vehicle data and administer your allowance. We do not offer a search for private owners.
Purposes and legal bases
We use necessary data to perform the service contract, meet legal accounting duties and protect the service against abuse under legitimate interests. Optional analytics or marketing require consent where applicable and are off by default in this package.
Payments
Where Stripe is enabled, card details are handled by the configured Stripe payment integration. This theme and service module do not collect or store full card numbers or CVC. We retain order and transaction references. See Stripe’s privacy notice for its processing.
Providers and international processing
Vinver LLC operates vinver.net and handles account administration and customer support at [email protected]. The website application and its account, order and report database are hosted in the Netherlands. The company's registered address is in the United States. WordPress and WooCommerce are self-hosted website software; their presence alone does not send account or order records to their developers.
Vehicle records are requested server-to-server from CarAPI.dev (api.carapi.dev). Requests contain the VIN, requested report sections and technical request information. Account passwords and complete payment-card details are not sent to the vehicle-data supplier. Source coverage may involve data from other countries. The supplier's processing locations and contractual transfer arrangements depend on the service agreement; a current supplier and processing-location list can be requested at [email protected].
Where Stripe is enabled at checkout, the Stripe entity identified in the merchant agreement handles payment details, fraud-prevention information and transaction processing. Stripe may process data in the United States and other countries described in its privacy notice at https://stripe.com/privacy. For relevant international transfers, Stripe describes mechanisms including the EU-US Data Privacy Framework and standard contractual clauses, as applicable to the entity and transfer.
When personal data is transferred outside the EEA or another protected jurisdiction, the applicable transfer must be covered by an adequacy decision or an appropriate contractual safeguard such as standard contractual clauses, with additional measures where required. The specific arrangement depends on the recipient and actual processing locations. Contact [email protected] for the relevant information. The supplied site includes no external analytics, advertising tracker or third-party support-ticket service.
Retention
Account profiles are retained while the account is open. Following a verified account-closure or erasure request, unnecessary profile and VIN-use data are removed within 30 days, except records that must be retained for legal obligations or an unresolved dispute.
Order, billing and transaction-reference records are retained for 7 years after the order is completed or cancelled for accounting, tax and dispute administration. Full card numbers and CVC are not stored by Vinver. A documented legal hold may require longer retention; access is restricted to the relevant purpose.
Cached vehicle reports and vehicle-image copies expire after no more than 24 hours from retrieval. Expired entries cannot be served and are removed on access or scheduled maintenance. VIN-use counters store hashed query identifiers for the paid billing period and are replaced when the next period is accessed; they are also removed when an account is erased, subject to applicable legal holds. Downloaded PDF copies are controlled by the customer.
Support correspondence is retained for 24 months after the last response or case closure, whichever is later. Messages that form part of a billing dispute or legal claim follow the relevant order-record or legal-hold period. Account and support deletion is administered by our team; the report module does not access or erase a support mailbox. Send retention and erasure requests to [email protected].
The site's consent-choice cookie lasts 90 days. Authentication rate-limit records expire after 15 minutes. These periods are separate from payment-provider records, which follow the provider's own policy.
Your rights
Where applicable, you can request access, correction, erasure, restriction or portability, object to processing, and withdraw consent. Some records must be retained by law. Email support from your account address; we may verify identity proportionately. You can complain to the competent data protection authority in your country.
Cookies and security
Essential cookies support sessions, checkout and request security. See the Cookie policy and Cookie settings for browser preferences. We use access controls and secure transport; no internet service can guarantee absolute security.