Privacy Policy

1. Introduction

This Privacy Policy explains what information we collect, how we use it and how we protect it. It covers our mobile app, our website (including the pay-per-report vehicle checks at plateinsight.co.uk/check, which work without an app account) and our browser extension.

By using PlateInsight, you agree to this policy.

Data Controller:
Vehicle Analytics Ltd.
Company No. 17062416
128 City Road, London, United Kingdom, EC1V 2NX
Email: [email protected]

2. Information We Collect

2.1 Account Information

• Email address (required for account creation)
• Password (encrypted, never stored in plain text)
• Account creation date

2.2 Vehicle Search Data

• Vehicle registration numbers you search
• Search history and timestamps
• Vehicles saved to your Garage (maximum 10)

2.3 Payment Information

• Purchase date and time
• Credit package purchased
• Transaction ID from Apple or Google
• We DO NOT store payment card details (payments are processed by Apple or Google)

2.4 Technical Data

• Device type and model
• Operating system version (iOS or Android)
• App version
• Error logs and crash reports

2.5 UK Government Data

We retrieve public vehicle data from:

• DVLA (Driver and Vehicle Licensing Agency)
• DVSA (Driver and Vehicle Standards Agency)

2.6 Website Vehicle Reports (plateinsight.co.uk/check)

When you check a vehicle on our website and buy a report (no app account needed), we collect:

• Vehicle registration number you enter
• Email address, so we can send your report link and payment receipt
• IP address and basic request data, used for rate limiting, fraud prevention and security (including our bot check, Cloudflare Turnstile)
• Payment information, which Stripe handles entirely; we never see or store your card number. We keep the transaction reference, amount, date and report purchased
• The report we generate (the vehicle data and our analysis), stored so you can open it again from your link

2.7 Browser Extension (Chrome and Edge)

The PlateInsight browser extension sends us only: (a) the vehicle registration numbers you ask it to check, (b) the web address of a listing photo when you ask it to read a number plate, and (c) an anonymous install token we use for rate limiting, together with standard request metadata such as your IP address.

Page scanning for number plates happens locally in your browser; the content of the pages you visit is never sent to us, and we do not collect your browsing history. Photos are fetched once to read the plate and are not stored. Your list of checked plates is stored only in your browser and can be cleared at any time from the popup.

Free checks create the same vehicle report records as a check on plateinsight.co.uk/check.

3. How We Use Your Information

3.1 To Provide Our Service

• Process vehicle searches and generate reports
• Manage your credit balance
• Store your search history and Garage
• Provide customer support

3.2 To Process Payments

• Process credit purchases through Apple or Google in-app purchase (app)
• Process report purchases via Stripe (website)
• Maintain transaction records (required by UK tax law)
• Prevent fraud

3.3 To Provide Website Reports

• Run the vehicle check and generate your report
• Email you the link to your purchased report and your receipt
• Let you re-open a report you have already bought

3.4 To Communicate with You

We only send:

• Purchase confirmations and receipts
• Your website report link
• Password reset emails
• Critical app updates
• Responses to support enquiries

4. Data Sharing and Disclosure

4.1 We Share Your Data With:

• Firebase/Google Cloud: Account authentication and data storage (app)
• Apple and Google: Payment processing for in-app purchases (app)
• DVLA/DVSA APIs: Vehicle data retrieval (UK Government)

4.2 Website and Extension Service Providers

To run the vehicle checks on our website and in the browser extension, we share limited data with:

• Stripe: Card payment processing for website reports. Your card details go straight to Stripe and never reach us. See Stripe's privacy policy.
• Resend: Sends your report link and receipt by email. See Resend's privacy policy.
• CheckCarDetails: The vehicle-data provider behind the extra history in paid reports (finance, write-off, stolen and valuation data). We send them only the registration number.
• Cloudflare: Hosts our website and runs our bot check (Turnstile), which processes your IP address and request data to confirm you are not a bot. See Cloudflare's Turnstile privacy policy.
• OpenAI: Generates the written summary in your report from the vehicle data above, and reads the number plate from a listing photo when you ask the browser extension to do so. We do not send your email or payment details. See OpenAI's privacy policy.

4.3 We Will NEVER:

• Sell your personal data to third parties
• Share your search history with advertisers
• Rent or lease your information

5. Data Storage and Security

5.1 Where Your Data is Stored

5.2 Security Measures

• All data transmitted using HTTPS encryption (TLS 1.3)
• Passwords hashed using industry-standard algorithms
• Secure cloud infrastructure (Firebase/Google Cloud)

6. Data Retention

7. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• Right to Access: Request a copy of your data
• Right to Rectification: Correct inaccurate data
• Right to Erasure: Delete your account and data
• Right to Data Portability: Receive your data in machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Lodge a Complaint: Complain to the ICO (ico.org.uk)

To Exercise Your Rights:
Email: [email protected]
We will respond within 30 days.

8. Children's Privacy

PlateInsight is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13.

9. Changes to This Privacy Policy

We update this Privacy Policy when our practices change. For material changes we will let you know by:

• In-app notification
• Email notification (for significant changes)
• Updating the "Last Updated" date

10. Contact Us

Questions about this Privacy Policy?

Email: [email protected]
Address: 128 City Road, London, United Kingdom, EC1V 2NX