Privacy Policy

1.Information We Collect

1.1 Information You Provide Directly

We collect information that you voluntarily submit to us through the Services, including when you create an account, request an inspection, submit a vehicle for assessment, complete forms, or communicate with us. This may include:

• Name, email address, phone number, and mailing address
• Account credentials (username and password)
• Company or organization name, title, and business contact information
• Payment and billing information (processed by our third-party payment processor)
• Vehicle identification numbers (VINs), vehicle descriptors, and related vehicle data
• Inspection requests, assessment orders, and service preferences
• Communications you send to us, including support requests and feedback

1.2 Information Collected Automatically

When you access or use the Services, we automatically collect certain technical and usage information, including:

• Device type, operating system, browser type and version
• IP address, approximate geographic location derived from IP
• Pages viewed, features used, access times, and referring URLs
• Interaction data such as clicks, scrolling behavior, and session duration
• Error logs and diagnostic data

1.3 Information from Third-Party Sources

We may receive information about you or your vehicles from third-party sources, including:

• Vehicle history and title data providers
• Dealer management systems and auction platforms
• Public records, government databases, and DMV records where lawfully accessible
• Business partners, including inspection network participants and enterprise clients
• Identity verification and fraud prevention services

2.How We Use Information

We use the information we collect for the following purposes:

• Service Delivery. To operate, maintain, and provide the Services, including conducting vehicle condition assessments, generating TACIS™ scores, and producing condition intelligence reports.
• Account Administration. To create and manage your account, authenticate your identity, and process transactions.
• Communications. To respond to your inquiries, provide customer support, send service-related notices, and deliver operational updates.
• Analytics & Improvement. To analyze usage patterns, monitor Service performance, and improve functionality, accuracy, and user experience.
• Condition Intelligence. To develop, calibrate, and refine our vehicle condition scoring models, indices, and analytical methodologies.
• Safety & Security. To detect, prevent, and respond to fraud, abuse, security incidents, and other harmful activity.
• Legal Compliance. To comply with applicable laws, regulations, legal processes, and enforceable governmental requests.
• Aggregated Intelligence. To generate anonymized, aggregated, or de-identified data sets for market analysis, benchmarking, and industry research that cannot reasonably be used to identify any individual.

3.Condition Intelligence & Scoring Disclaimer

4.Sharing & Disclosure

We do not sell your personal information. We may share information in the following circumstances:

• Service Providers. With trusted third-party vendors who perform services on our behalf, such as payment processing, cloud hosting, email delivery, analytics, and customer support. These providers are contractually obligated to use your information only to provide the services we have engaged them to perform.
• Enterprise Clients & Platform Participants. Vehicle condition data, scores, and reports may be shared with authorized enterprise clients (e.g., dealerships, auction houses, fleet operators, insurers) who have a legitimate business relationship with respect to the assessed vehicle. Such sharing pertains to vehicle condition data, not personal consumer profiles.
• Inspection Network. With certified inspectors and inspection partners to facilitate the scheduling, execution, and quality assurance of vehicle condition assessments.
• Legal Requirements. When disclosure is required by law, regulation, legal process, or governmental request, or when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business Transfers. In connection with a merger, acquisition, reorganization, sale of assets, or bankruptcy, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.
• With Your Consent. We may share information for purposes not described in this Privacy Policy when we have obtained your explicit consent.

5.Cookies & Tracking Technologies

We use cookies and similar technologies to operate and improve the Services. These include:

• Essential Cookies. Required for core functionality such as authentication, session management, and security. These cannot be disabled without impairing Service operation.
• Functional Cookies. Enable enhanced features such as user preferences, language settings, and personalized display options.
• Analytics Cookies. Help us understand how users interact with the Services, measure performance, and identify areas for improvement. We may use third-party analytics providers for this purpose.

You may manage cookie preferences through your browser settings. Note that disabling certain cookies may limit your ability to use some features of the Services. For additional detail, please refer to our Cookie Notice.

6.Data Retention

We retain personal information for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Retention periods are determined based on:

• The nature and sensitivity of the information
• The purposes for which we process the information
• Applicable legal, regulatory, and contractual obligations
• Legitimate business interests, including dispute resolution and record-keeping

Vehicle condition data, inspection records, and TACIS™ scores are retained as part of the longitudinal condition registry and may be maintained indefinitely in aggregated or de-identified form for the purpose of condition trend analysis, benchmarking, and registry integrity.

7.Data Security

We implement commercially reasonable administrative, technical, and physical safeguards designed to protect information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit (TLS/SSL) and at rest
• Access controls and role-based authentication
• Regular security assessments and vulnerability monitoring
• Incident response procedures and breach notification protocols

No method of transmission or storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for any activity that occurs under your account.

8.Your Rights & Choices

Depending on your jurisdiction, you may have certain rights with respect to your personal information, including:

• Access. The right to request a copy of the personal information we hold about you.
• Correction. The right to request correction of inaccurate or incomplete personal information.
• Deletion. The right to request deletion of your personal information, subject to certain legal exceptions.
• Portability. The right to receive your personal information in a structured, commonly used, machine-readable format.
• Opt-Out. The right to opt out of certain data processing activities, including targeted advertising and the sale or sharing of personal information (to the extent applicable).
• Non-Discrimination. We will not discriminate against you for exercising any of your privacy rights.

To exercise any of these rights, please contact us at privacy@vindexregistry.com. We will verify your identity before processing your request and respond within the timeframe required by applicable law.

9.U.S. State Privacy Disclosures

The following disclosures supplement this Privacy Policy and apply to residents of states with comprehensive consumer privacy legislation. These disclosures are provided in compliance with applicable state law requirements.

9.1 California (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA/CPRA”). These include the right to know what personal information we collect, the right to delete personal information, the right to correct inaccurate information, and the right to opt out of the sale or sharing of personal information. We do not sell personal information as defined under the CCPA/CPRA. To submit a request, contact privacy@vindexregistry.com.

Categories of personal information collected in the preceding twelve (12) months include: identifiers, commercial information, internet or electronic network activity information, geolocation data, and professional or employment-related information.

9.2 Colorado (CPA)

Colorado residents have the right to access, correct, delete, and obtain a portable copy of their personal data, as well as the right to opt out of targeted advertising, the sale of personal data, and profiling in furtherance of decisions that produce legal or similarly significant effects. To exercise these rights, contact us at the address provided in Section 13.

9.3 Connecticut (CTDPA)

Connecticut residents may exercise their rights to access, correct, delete, and obtain a copy of their personal data in a portable format. Connecticut residents also have the right to opt out of the processing of personal data for targeted advertising, the sale of personal data, and profiling. You may appeal our decision regarding a privacy request by contacting us directly.

9.4 Utah (UCPA)

Utah residents have the right to access and delete their personal data and to opt out of the sale of personal data and targeted advertising. Requests may be submitted to the contact information provided in Section 13.

9.5 Virginia (VCDPA)

Virginia residents may access, correct, delete, and obtain a portable copy of their personal data. Virginia residents also have the right to opt out of the processing of personal data for targeted advertising, the sale of personal data, and profiling. You may appeal our decision regarding a privacy request by contacting us at privacy@vindexregistry.com.

10.International Data Considerations

The Services are operated from the United States. If you access the Services from outside the United States, you acknowledge that your information may be transferred to, stored in, and processed in the United States, where data protection laws may differ from those in your jurisdiction. By using the Services, you consent to such transfer, storage, and processing.

11.Children’s Privacy

The Services are not directed to individuals under the age of sixteen (16). We do not knowingly collect personal information from children under 16. If we become aware that we have inadvertently collected personal information from a child under 16, we will take commercially reasonable steps to delete such information promptly. If you believe that a child under 16 has provided personal information to us, please contact us at privacy@vindexregistry.com.

12.Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will update the “Last Updated” date at the top of this page and, where required by applicable law, provide additional notice (such as a prominent notice on the Services or an email notification). We encourage you to review this Privacy Policy periodically. Your continued use of the Services after any changes constitutes your acceptance of the updated Privacy Policy.

13.Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: