Privacy Policy
Last updated: June 2, 2025
VinScan Pro (“we,” “our,” or “us”) is operated by Vadim Liakhov as a sole proprietor based in Ontario, Canada. We are committed to protecting your personal information and your right to privacy in accordance with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Ontario privacy legislation.
This Privacy Policy explains what information we collect when you use the VinScan Pro mobile application and web platform, how we use it, who we share it with, and what rights you have regarding your data.
By using VinScan Pro you acknowledge that you have read and understood this policy. If you do not agree with these terms, please discontinue use of the service.
1. Who We Are
2. Information We Collect
We collect only the information necessary to provide and improve the VinScan Pro service. This includes:
Account Information
- Email address (used for login and report delivery)
- Dealership or business name
- Subscription and billing details (processed by Stripe — see Section 5)
Vehicle Scan Data
When you perform an OBD2 scan, the app reads data directly from the vehicle via a Bluetooth-connected OBD2 adapter and transmits it to our servers for AI analysis. This data may include:
- Vehicle Identification Number (VIN)
- Diagnostic Trouble Codes (DTCs) — active, pending, and permanent
- Odometer reading (where available from the vehicle ECU)
- OBD2 readiness monitor status (emissions test readiness)
- Distance since last code reset
- Raw OBD2 response data used for diagnostics
Usage and Technical Data
- Scan history and generated PDF reports
- IP address and device type (collected by our hosting infrastructure)
- App usage logs for debugging and service improvement
We do not collect: precise GPS location, contacts, photos, microphone audio, or any other device data beyond what is described above.
3. How We Use Your Information
We use the information we collect for the following purposes:
- •Providing the service — authenticating your account, storing scan results, generating AI-powered diagnostic reports, and delivering those reports to your email.
- •AI-powered vehicle analysis— your VIN, DTC codes, and mileage are sent to Anthropic’s Claude AI API to generate plain-English explanations, severity ratings, repair cost estimates, and estimated wholesale valuations.
- •Billing and subscription management — processing payments and managing your subscription through Stripe.
- •Email delivery — sending PDF reports and transactional messages through Resend.
- •Service improvement — analysing aggregated, anonymised usage patterns to improve accuracy, performance, and features.
- •Legal compliance — retaining records as required by applicable law.
4. Legal Basis and Consent
Under PIPEDA, we rely on your implied consent when you create an account and use the service, as the purposes for collecting your information are clearly described in this policy prior to or at the time of collection. Where we require express consent (e.g., for any new use of your data not described here), we will ask for it explicitly.
You may withdraw consent at any time by contacting us at support@vinscanpro.com, subject to legal and contractual restrictions. Withdrawing consent may affect our ability to provide you with the service.
5. Third-Party Service Providers
We share your data with the following trusted service providers solely for the purpose of operating and improving VinScan Pro. These providers are contractually bound to handle your data securely and only for the purposes we specify.
| Provider | Purpose | Data Shared |
|---|---|---|
| Supabase | Database & authentication | Account details, scan data, reports |
| Stripe | Payment processing | Email, billing information |
| Resend | Transactional email | Email address, report PDFs |
| Anthropic (Claude AI) | AI vehicle analysis | VIN, DTC codes, mileage, vehicle details |
| Railway | Backend hosting | All data processed by our API |
| NHTSA (U.S. Gov) | VIN decoding | VIN only (public API) |
Some of these providers are located outside of Canada (United States). By using VinScan Pro, you acknowledge that your data may be transferred to and processed in the United States, subject to the privacy laws of that jurisdiction. We select providers who maintain appropriate data protection standards and, where applicable, comply with frameworks designed to protect cross-border data transfers.
6. We Do Not Sell Your Data
We do not sell, rent, trade, or otherwise disclose your personal information to third parties for their own marketing or commercial purposes. Your scan data and account information are used exclusively to operate and improve VinScan Pro.
7. Data Retention
We retain your personal information for as long as your account is active or as needed to provide the service. Scan records and generated reports are retained indefinitely unless you request deletion, as they form part of your dealership’s historical appraisal records.
Billing records are retained for a minimum of 7 years as required by Canadian tax regulations. Upon account deletion, we will remove your personal information from our active systems within 30 days, except where retention is required by law.
8. Data Security
We implement appropriate technical and organizational safeguards to protect your personal information against unauthorized access, disclosure, alteration, or destruction. These measures include:
- Encryption of data in transit using TLS/HTTPS
- Encryption of data at rest in our database (Supabase)
- Row-level security (RLS) policies ensuring each dealership can only access its own data
- JWT-based authentication with short-lived access tokens
- No storage of raw payment card data (handled entirely by Stripe)
No method of transmission over the Internet or electronic storage is 100% secure. If you believe your account has been compromised, contact us immediately at support@vinscanpro.com.
9. Your Rights Under PIPEDA
As an individual whose personal information we hold, you have the right to:
- •Access — request a copy of the personal information we hold about you.
- •Correction — request that we correct inaccurate or incomplete information.
- •Deletion — request deletion of your account and personal information (subject to legal retention requirements).
- •Withdraw consent — withdraw your consent to our use of your personal information at any time, with the understanding that this may affect our ability to provide the service.
- •Challenge compliance — challenge our compliance with PIPEDA by contacting our Privacy Officer (see Section 11).
To exercise any of these rights, contact us at support@vinscanpro.com. We will respond within 30 days of receiving your request.
10. Cookies and Tracking
VinScan Pro uses only essential session cookies required for authentication. We do not use advertising cookies, tracking pixels, or analytics tools that share data with third-party advertisers. Our Stripe-powered checkout may set cookies governed by Stripe’s own privacy policy.
11. Contact and Complaints
Questions, concerns, or requests regarding this Privacy Policy or our handling of your personal information should be directed to our Privacy Officer:
If you are not satisfied with our response, you may file a complaint with the Office of the Privacy Commissioner of Canada (OPC) at www.priv.gc.ca.
12. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date at the top of this page and, where appropriate, notify active users by email. Your continued use of VinScan Pro after any changes constitutes your acceptance of the updated policy.
© 2026 VinScan Pro. All rights reserved.
← Return to vinscanpro.com