Privacy Policy
What data auto.stat.vin collects, why we need it, who else sees it and how you can control or delete it.
1. Who controls your data
The controller is Stat.vin, operator of auto.stat.vin. Contact for any privacy request: [email protected]. This policy applies to the website, the mobile app and the notifications we send.
2. What we collect
| Data | Purpose | Kept for |
|---|---|---|
| Account data | First and last name, email, phone, password hash, account type (private or company), language and currency | Until the account is deleted |
| Company data | Company name, description, logo, showroom photos, branch addresses and phones | Until the account is deleted |
| Listings | VIN, specs, photos, video links, price, status, location, description, price history | 12 months after the listing is removed |
| Communication | Chat messages, phone reveal events, call-back requests | 24 months |
| Usage data | Listing views, favourites, search queries, saved searches, device and browser type, approximate region by IP | 14 months |
| Technical logs | IP address, sign-in time, session identifiers, security events | 12 months |
| Payments | Amounts and dates of promotion purchases, invoice details for companies | As required by tax law |
3. Why we process it
- To run the service: publish listings, show search results, deliver chat messages.
- To verify identity and prevent fraud: phone and email confirmation, two-factor authentication, blocking suspicious accounts.
- To provide statistics to sellers: views, favourites, phone reveals, video plays — always aggregated, never showing who exactly viewed a listing.
- To send notifications you chose: price drops, status changes, messages, saved-search alerts.
- To meet legal obligations and answer lawful requests from authorities.
4. Legal grounds
We rely on: performance of a contract (giving you the service you signed up for), our legitimate interest (security, anti-fraud, product improvement), your consent (marketing emails, browser push, optional cookies) and legal obligation (accounting, law-enforcement requests). Consent can be withdrawn at any time in the settings.
5. What other users see
A listing is public by design. Buyers see the car data, photos, city, seller name or company, and the seller’s registration year.
- Phone numbers are shown masked (country and operator code) until the buyer taps "Show" — that event is counted in your statistics.
- Your email is never shown on a listing.
- Chat messages are visible only to the two participants and, in read-only mode, to moderators handling a report.
- A private seller’s exact address is never published — only the city and the agreed inspection place.
6. Who else receives data
We do not sell personal data and do not pass it to advertisers.
- Hosting and infrastructure providers that store the platform data on our behalf.
- Stat.vin VIN-history service, to match a listing with its auction record.
- Push and email delivery providers, to send the notifications you enabled.
- Payment providers, for promotion purchases — they receive the amount and the invoice data, we never store your card number.
- Authorities, when we are legally required to disclose data (for example, in an investigation into a stolen vehicle).
7. Cookies and analytics
Essential cookies keep you signed in and remember your language, currency and theme. Analytics cookies help us see which parts of the service are used and where people give up; they are set only with your consent and can be withdrawn at any time.
8. Storage and security
Data is stored on servers inside the EU. Passwords are hashed, transfers are encrypted with TLS, and access by our staff is limited to what their role requires and is logged.
Two-factor authentication via an authenticator app is available to every account and is recommended for companies.
9. Your rights
Write to [email protected]; we answer within 30 days.
- Access — request a copy of the data we hold about you.
- Rectification — correct wrong data yourself in the settings or ask us.
- Deletion — delete the account with all listings, favourites and chats; some records are kept where the law requires it.
- Restriction and objection — ask us to stop certain processing, including profiling for recommendations.
- Portability — receive your listings and account data in a machine-readable format.
- Complaint — lodge a complaint with your local data protection authority.
10. Children
The service is not intended for people under 18. We do not knowingly collect data from minors; if we learn that an account belongs to one, we delete it.
11. Changes to this policy
The current version is always published here with its version number and effective date. Material changes are announced by email and in the notification feed at least 14 days in advance.