Privacy Policy
Last updated on
1. Overview
This Privacy Policy explains how Overbots OÜ, doing business as VINFound (“Company”, “we”, “us”, or “our”), collects, uses, stores, and protects information when you access or use VINFound, available at vinfound.com (the “Website”).
The Website provides vehicle research tools and resources, including VIN decoding and vehicle information pages.
We do not require users to create an account, and we do not ask for names, postal addresses, phone numbers, email addresses, payment details, or other account information to use our VIN decoding tools.
By using the Website, you acknowledge that information may be processed as described in this Privacy Policy. If you do not agree with this Privacy Policy, you should not use the Website.
Capitalized terms used in this Privacy Policy have the meanings given in our Terms of Use, unless otherwise defined here.
2. Information We Collect
We collect limited information needed to operate, protect, and improve the Website.
2.1. Information You Provide
When you use the Website, you may provide:
- VINs submitted for decoding;
- Information you send to us if you contact us directly, such as your email address and message content.
Please do not submit sensitive personal information through the Website, such as government identification numbers, financial account details, health information, precise personal location data, or other sensitive information.
2.2. Information Collected Automatically
When you access or use the Website, we may automatically process limited technical and usage information, including:
- IP address;
- Browser user-agent information, such as browser, device, and operating system details;
- Referrer domain;
- Pages visited and basic interaction data;
- VIN decode request events;
- Affiliate link click events;
- Vehicle information returned by data providers.
We use this information to provide VIN decoding results, operate the Website, prevent abuse, apply rate limits, understand general traffic sources, maintain affiliate records, troubleshoot technical issues, and improve the Website.
3. VIN Decode Requests and Vehicle Data
When you submit a VIN, we use it to provide a VIN decoding result. This may include sending the VIN to public or commercial automotive data providers and receiving available vehicle information in return.
If vehicle information is found, we may temporarily store or cache the decoded vehicle information, such as make, model, year, trim, engine, transmission, drivetrain, country of origin, and other available vehicle details.
VIN decode requests, decoded vehicle information, and affiliate click records are generally retained for up to 30 days and then deleted or cleaned from our active systems, unless a longer retention period is necessary to protect the Website, investigate abuse, comply with legal obligations, or resolve disputes.
4. How We Use Information
We use collected information for the following purposes:
- To provide, operate, and maintain the Website;
- To process VIN decode requests and display vehicle information;
- To prevent abuse, spam, automated misuse, and excessive requests;
- To apply rate limits and maintain service security;
- To understand general website usage and traffic sources;
- To improve Website functionality, content, and user experience;
- To track affiliate link interactions and maintain affiliate records;
- To respond to inquiries or support requests;
- To enforce our Terms of Use;
- To comply with legal obligations and protect our legal rights.
Where applicable law requires a legal basis for processing, we may rely on one or more of the following bases: performance of a service requested by you, our legitimate interests in operating and protecting the Website, compliance with legal obligations, and your consent where required.
5. Cookies and Browser Storage
The Website uses only necessary cookies.
The Website uses a session cookie named “vinfound_session”. This cookie helps maintain a basic website session, is set as HTTP-only, and expires after 2 hours of inactivity. It is not used for advertising or cross-site tracking.
The Website may use browser local storage to support basic website functionality. Local storage is not used by the Website for advertising or cross-site tracking.
You can control or delete cookies and browser storage through your browser settings. Blocking necessary cookies may affect Website functionality.
6. Analytics
The Website may use cookie-free analytics services to understand basic website usage. These analytics services do not use cookies and are not used by the Website for advertising or cross-site tracking.
Analytics information may include general usage data such as page views, referrer information, browser type, device type, operating system, country, and similar aggregated or technical information.
7. Affiliate Links and Third-Party Services
The Website may contain links to third-party websites, products, or services, including vehicle history report providers and other automotive-related services.
Some links may be affiliate links. If you click an affiliate link and make a purchase, we may earn a commission or referral fee at no additional cost to you. You can learn more in our Affiliate Disclosure.
Third-party websites are operated independently from VINFound. We do not control their privacy practices, terms, pricing, reports, data sources, or services. If you visit or use a third-party website, that third party’s own privacy policy and terms apply.
8. Sharing of Information
We do not sell personal information.
We may share limited information where necessary with:
- Hosting, infrastructure, and technical service providers;
- Vehicle data providers used to process VIN decode requests;
- Cookie-free analytics providers, if used;
- Affiliate partners or networks when you interact with affiliate links;
- Professional advisors, such as legal, accounting, or security advisors;
- Authorities, regulators, or other parties where required by law or necessary to protect our legal rights;
- A successor or acquiring entity in connection with a merger, acquisition, restructuring, or sale of the Website or business assets.
We share information only as reasonably necessary for the purposes described in this Privacy Policy.
9. Data Retention
We keep information only for as long as reasonably necessary for the purposes described in this Privacy Policy.
VIN decode requests, decoded vehicle information, and affiliate click records are generally retained for up to 30 days and then deleted or cleaned from our active systems.
We may retain certain information for a longer period if necessary to comply with legal obligations, resolve disputes, enforce our Terms, prevent abuse, or protect the Website and our rights.
10. Security
We use reasonable technical and organizational measures to protect information processed through the Website.
However, no website, server, database, or internet transmission is completely secure. We cannot guarantee absolute security.
If you believe there has been a security or privacy issue involving the Website, please contact us at info@vinfound.com.
11. International Processing
The Website is operated by an Estonia-based company and may use service providers located in different countries.
Your information may be processed in countries other than the country where you live. Where required by applicable law, we take reasonable steps to protect information transferred internationally.
12. Your Privacy Rights
Depending on your location, you may have rights regarding your personal information, such as the right to:
- Request access to information we hold about you;
- Request correction of inaccurate information;
- Request deletion of information;
- Object to or restrict certain processing;
- Withdraw consent where processing is based on consent;
- Request a copy of certain information in a portable format;
- Lodge a complaint with a data protection authority.
To exercise your rights, contact us at info@vinfound.com. We may need to verify your request before responding.
Because the Website does not require user accounts, we may not always be able to identify information related to a specific user unless you provide enough details for us to locate it.
13. Children’s Privacy
The Website is not directed to children.
We do not knowingly collect personal information from children under the age where parental consent is required by applicable law. If you believe that a child has provided information to us, please contact us at info@vinfound.com, and we will take appropriate steps to delete it where required.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised “last updated” date.
Your continued use of the Website after changes are posted means that you acknowledge the updated Privacy Policy.
15. Contact
If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at info@vinfound.com.