Last updated: August 29, 2026
1. Who we are
VinSift is a vehicle history report service operated by HenryLab SIA ("we", "us"), registered at Rīga, Brīvības iela 74 - 10, LV-1011 (registration number 50203544881). This policy explains what personal data we collect when you use VinSift, why, and how you can control it. For any question, contact us at support@vinsift.com.
2. No account, minimal data
VinSift doesn't have user accounts — you never create a password or profile with us. Each visit is essentially anonymous until you choose to buy a report, at which point we collect only what's needed to deliver it.
3. Data we collect
- The VIN you search, and the report data returned for it. We cache this for 24 hours so repeat searches of the same VIN don't require a fresh lookup.
- Your email address, collected at checkout, used only to send you the report you purchased and any related receipt or support correspondence.
- Payment details, handled entirely by Stripe. We never see or store your card number — Stripe also acts as the merchant of record for these transactions, handling VAT/sales tax collection and remittance.
- Your IP address, used to apply rate limits that keep the service available and prevent abuse of the underlying data providers.
- Contact form submissions, if you use the "Get in touch" page — the email address and message you enter are sent directly to our support inbox.
- Analytics data, only if you consent — see the Cookies section below for what this involves and how to opt out.
4. How we use your data
We use your data to generate and deliver the report you purchased, process payment, respond to support requests, prevent abuse of the service, and — only if you've consented — understand how visitors use the site so we can improve it. We do not sell your personal data, and we don't run any advertising tracking on this site.
5. Sharing with third parties
We share data only with the service providers that make VinSift work, each under agreements that limit their use of your data to providing that specific service:
- Stripe — payment processing, and merchant of record for VAT/sales tax
- Cebia and AutoRef — the vehicle data providers whose records make up your report
- Resend — delivers your report and any transactional email by email
- Supabase — hosts our database and stores purchased report PDFs
- Google Analytics — only if you've consented to analytics cookies; see Cookies below
6. Your rights (GDPR)
If you are located in the EU/EEA, you have the right to access, correct, delete, or export your personal data, and to object to or restrict certain processing. To exercise any of these rights, email support@vinsift.com.
7. Data retention
Free VIN preview data is cached for 24 hours, then discarded. Purchased report PDFs and the order records tied to them are retained for as long as needed to meet legal, tax, and accounting obligations, after which they are deleted or anonymized.
8. Cookies
VinSift uses one essential cookie, always on, to remember your language preference (English or Polish) between visits — this doesn't require your consent, as it's necessary for the site to function.
We also use Google Analytics to understand how visitors use the site (which pages get read, roughly how much traffic comes from search versus other sources), but only with your consent. When you first visit, a banner asks you to accept or decline analytics cookies; nothing from Google Analytics loads, and no analytics cookie is set, until you accept. You can change your mind at any time via the "Cookie preferences" link in the footer — declining there also deletes any analytics cookies already on your device from an earlier choice.
We don't use advertising or remarketing cookies of any kind.
9. Changes to this policy
We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above.
10. Contact
Questions about this policy? Email support@vinsift.com, or write to us at Rīga, Brīvības iela 74 - 10, LV-1011.