Privacy Policy

1. Introduction

Welcome to PlateInsight. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and our website — including the pay-per-report vehicle checks at plateinsight.co.uk/check, which you can use without creating an app account.

By using PlateInsight, you agree to the collection and use of information in accordance with this policy.

Data Controller:
Vehicle Analytics Ltd.
Company No. 17062416
128 City Road, London, United Kingdom, EC1V 2NX
Email: [email protected]

2. Information We Collect

2.1 Account Information

• Email address (required for account creation)
• Password (encrypted, never stored in plain text)
• Account creation date

2.2 Vehicle Search Data

• Vehicle registration numbers you search
• Search history and timestamps
• Vehicles saved to your Garage (maximum 10)

2.3 Payment Information

• Purchase date and time
• Credit package purchased
• Transaction ID from Apple
• We DO NOT store payment card details (processed by Apple)

2.4 Technical Data

• Device type and model
• Operating system version (iOS)
• App version
• Error logs and crash reports

2.5 UK Government Data

We retrieve public vehicle data from:

• DVLA (Driver and Vehicle Licensing Agency)
• DVSA (Driver and Vehicle Standards Agency)

2.6 Website Vehicle Reports (plateinsight.co.uk/check)

When you use our website to check a vehicle and buy a report — without an app account — we collect:

• Vehicle registration number you enter
• Email address — to send your report link and payment receipt
• IP address and basic request data — used for rate-limiting, fraud prevention and security (including our bot-protection check, Cloudflare Turnstile)
• Payment information — handled entirely by Stripe; we never see or store your card number. We retain the transaction reference, amount, date and report purchased
• The report we generate — the vehicle data and our analysis, stored so you can re-open it from your link

3. How We Use Your Information

3.1 To Provide Our Service

• Process vehicle searches and generate reports
• Manage your credit balance
• Store your search history and Garage
• Provide customer support

3.2 To Process Payments

• Process credit purchases via Apple In-App Purchase (app)
• Process report purchases via Stripe (website)
• Maintain transaction records (required by UK tax law)
• Prevent fraud

3.3 To Provide Website Reports

• Run the vehicle check and generate your report
• Email you the link to your purchased report and your receipt
• Let you re-open a report you have already bought

3.4 To Communicate with You

We only send:

• Purchase confirmations and receipts
• Your website report link
• Password reset emails
• Critical app updates
• Responses to support inquiries

4. Data Sharing and Disclosure

4.1 We Share Your Data With:

• Firebase/Google Cloud: Account authentication and data storage (app)
• Apple: Payment processing — In-App Purchase (app)
• DVLA/DVSA APIs: Vehicle data retrieval (UK Government)

4.2 Website Report Service Providers

To run the pay-per-report checks at plateinsight.co.uk/check, we share limited data with:

• Stripe: Secure payment processing. Stripe receives your payment details directly — we do not. See Stripe's privacy policy.
• Resend: Sends your report link and receipt by email. See Resend's privacy policy.
• CheckCarDetails: A trusted vehicle-data provider that supplies additional history (such as finance, write-off, stolen and valuation data) used in paid reports. We send the registration number to retrieve this data.
• Cloudflare: Hosts and secures our website and runs our bot-protection check (Turnstile), which processes your IP address and request data to confirm you are not a bot. See Cloudflare's Turnstile privacy policy.
• OpenAI: Generates the written summary in your report from the vehicle data above. We do not send your email or payment details. See OpenAI's privacy policy.

4.3 We Will NEVER:

• Sell your personal data to third parties
• Share your search history with advertisers
• Rent or lease your information

5. Data Storage and Security

5.1 Where Your Data is Stored

5.2 Security Measures

• All data transmitted using HTTPS encryption (TLS 1.3)
• Passwords hashed using industry-standard algorithms
• Secure cloud infrastructure (Firebase/Google Cloud)

6. Data Retention

7. Your Rights Under UK GDPR

You have the following rights regarding your personal data:

• Right to Access: Request a copy of your data
• Right to Rectification: Correct inaccurate data
• Right to Erasure: Delete your account and data
• Right to Data Portability: Receive your data in machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Lodge a Complaint: File complaint with ICO (ico.org.uk)

To Exercise Your Rights:
Email: [email protected]
We will respond within 30 days.

8. Children's Privacy

PlateInsight is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you via:

• In-app notification
• Email notification (for significant changes)
• Updating the "Last Updated" date

10. Contact Us

Questions about this Privacy Policy?

Email: [email protected]
Address: 128 City Road, London, United Kingdom, EC1V 2NX