Updated and Effective: October 29, 2026
Welcome! Thank you for using StatVIN. By using the StatVIN website, messaging platform, or other online products and services (collectively, the “Services”), you accept and agree to the terms of the StatVIN Privacy Policy. Please review the terms below.
Definitions
Personal Information — information that identifies, relates to, describes, can reasonably be associated with, or could be linked, directly or indirectly, with a particular consumer or household.
You / Your — Customers or Visitors.
We / Us — PAR Soft, Inc.
1. Introduction
1.1 PAR Soft, Inc. (“StatVIN”) takes the protection of your privacy seriously. This Privacy Policy describes how StatVIN collects, uses, discloses, stores, and protects your Personal Information.
1.2 If you do not agree with any provision of this Privacy Policy or do not understand or accept its terms, do not use the StatVIN Services.
1.3 By using the StatVIN Services, you agree to this Privacy Policy, including the collection, use, disclosure, and transfer of your Personal Information as described herein.
1.4 You may print a copy of this Privacy Policy using your browser’s print function. StatVIN recommends saving a copy for future reference.
1.5 StatVIN may modify this Privacy Policy at any time without prior notice. You are responsible for regularly reviewing the Privacy Policy for any changes.
1.6 If you continue to use the StatVIN Services after notice of changes, you agree to the updated Privacy Policy.
1.7 This Privacy Policy forms part of the StatVIN Terms of Use and Terms of Service.
1.8 For the purposes of this Policy, the term “StatVIN” includes:
- subsidiaries
- affiliated companies
- investors
- owners
- members
- shareholders
- directors
- employees
- agents
- representatives
- successors.
2. Collection and Use of Information
2.1 General Provisions
2.1.1 StatVIN collects Personal Information from you and from devices (including mobile devices) that you use to access the Services.
2.1.2 Categories of information collected include, but are not limited to:
- identification information (name, address, email, phone number, driver’s license, ID or passport details)
- information about bids, purchases, sales, and transactions
- financial information (bank account or credit card number)
- other information that you provide when using the services
- any information that StatVIN is required or authorized to collect under applicable law.
2.1.3 StatVIN uses your Personal Information for the following purposes:
- providing access to the Services
- operating, improving, and personalizing the services
- communicating with you regarding the use of the services
- customer support
- marketing and advertising
- integration of third-party services
- analysis of website usage
- detecting and preventing fraud
- fulfilling any other purposes specified at the time of information collection.
2.2 Tracking Technologies and Cookies
2.2.1 Like most websites, StatVIN automatically collects certain information and stores it in log files.
2.2.2 Such information includes:
- IP address
- browser type
- internet service provider
- referring/exit pages
- operating system
- date and time of visit
- clickstream data.
2.2.3 StatVIN uses technologies such as:
- cookies,
- web beacons,
- tags,
- scripts.
2.2.4 These technologies are used for:
- analyzing user behavior
- administering the website
- tracking movements across the site
- collecting demographic information.
2.2.5 StatVIN may also obtain information about you from other sources, including:
- affiliated companies
- service providers
- identity verification services
- marketing agencies
- public sources.
2.3 Cookies
2.3.1 Cookies are small files that are stored on your device.
2.3.2 You may:
- disable cookies in your browser
- configure your browser to warn you before cookies are used.
2.3.3 If cookies are disabled, some features of the website may function improperly.
2.3.4 StatVIN does not control third-party cookies that may be placed on the website.
2.4 Links to Other Websites
2.4.1 The StatVIN website may contain links to third-party websites.
2.4.2 StatVIN is not responsible for the privacy policies of such websites.
2.4.3 You are encouraged to review the privacy policy of every website that collects your data.
2.5 Third-Party Advertising and Analytics
2.5.1 StatVIN may allow third-party companies to:
- provide analytics services
- display advertisements.
2.5.2 Such companies may use:
- cookies,
- web beacons,
- device identifiers.
2.5.3 This information is used for:
- data analysis
- tracking user activity
- measuring content popularity
- displaying personalized advertising.
3. Transfer and Disclosure of Information
3.1 StatVIN does not share Personal Information with third parties except in the following circumstances:
- with your permission
- for processing vehicle delivery
- to government authorities when registering ownership
- in response to a court request or court order
- to protect the rights of StatVIN
- when necessary to protect the interests of StatVIN or other persons.
3.2 Information may be shared with affiliated companies for the purpose of:
- processing transactions
- managing payments
- debt collection
- providing additional services.
3.3 If StatVIN is acquired by another company or merges with another company, your Personal Information may be transferred to the new company to the extent permitted by law.
4. Data Storage and Processing
4.1 Your Personal Information is stored and processed on servers located in the United States.
4.2 By using the Services, you consent to:
- processing
- transfer
- storage of data in the United States.
4.3 Information may be stored on computers located in other countries or jurisdictions.
4.4 StatVIN retains data for as long as necessary to provide services unless you request deletion of the data.
4.5 You may request deletion of information by contacting StatVIN.
4.6 However, certain data may not be deleted if it is required for:
- compliance with legal obligations
- fraud prevention
- dispute resolution
- debt collection
- investigations.
5. Privacy and Security
5.1 StatVIN takes reasonable measures to protect your data.
5.2 For the transmission of confidential information, the following is used: SSL encryption (Secure Socket Layer).
5.3 When transmitting bank card or driver’s license data, the information is encrypted.
5.4 However, no method of data transmission over the internet is 100% secure, and therefore absolute security cannot be guaranteed.
5.5 In the event of a data breach, StatVIN may notify you:
- by email,
- through a notice on the website.
5.6 You agree to receive such notifications in electronic form.
6. Removal and Data Subject Requests
6.1 Stat.vin aggregates and republishes vehicle information (VIN, lot photos, sale history, condition notes, odometer readings and similar data) from publicly accessible auction and salvage platforms operated by third parties.
We do not collect this information from vehicle owners directly and we do not generate any of it ourselves.
6.2 We understand that vehicle owners, prior owners and other interested parties may, in certain circumstances, wish for a specific listing to be removed or anonymised. We operate an open removal channel for such requests.
6.3. How to submit a request. Send an e-mail to [email protected]. Requests are accepted in free form — there is no specific template, court order, or formal documentation required to initiate a request. Please include in your message:
- The URL or VIN of the listing you are asking about;
- A short description of why you are asking for removal or anonymisation (e.g. you are the current registered keeper of the vehicle, the data is inaccurate, etc.);
- Any reasonable indication of your connection to the vehicle. We work with whatever you can plausibly provide — a copy of the registration certificate or title, an insurance document, prior auction paperwork, a copy of an ID matching the keeper's name, or any other document that reasonably demonstrates legitimate interest.
If the keeper is a legal entity, please provide corporate documents and an indication that you are authorised to act on its behalf.
6.4 How we respond. We aim to acknowledge each request within a reasonable time after receipt and to process it shortly thereafter. Depending on the request and the evidence provided, we will normally either:
- anonymise the listing (e.g. remove or mask the VIN and other identifying details),
- correct inaccurate information,
- explain why we are not able to act on the request (for example, because the underlying data is factual, was lawfully obtained from a public source, and a recognised legitimate interest justifies its continued publication — such as the interest of prospective buyers in verifying a used vehicle's history).
6.5 We do not, as a general matter, remove factual information about a vehicle's auction history solely because its publication is commercially inconvenient to a current or prior owner or reseller. Vehicle-history transparency is an important consumer-protection function on the second-hand market.
6.6 Scope and applicable law. To the extent that any information published on stat.vin qualifies as "personal data" within the meaning of Regulation (EU) 2016/679 ("GDPR") or comparable legislation, the data subject may exercise his or her rights of access, rectification, erasure, restriction and objection by writing to [email protected].
6.7 We will assess each request on its merits, balancing the data subject's rights against the legitimate interests we and third parties have in the continued availability of public auction records (Art. 6(1)(f) GDPR).
6.8 If you are unsatisfied with our response, you have the right to lodge a complaint with the supervisory authority in your country of residence.
7. Communications
7.1 If you do not wish to receive: promotional emails or marketing communications you may opt out by following the instructions in the emails.
7.2 However, StatVIN may continue to send service-related messages, including:
- notifications
- administrative messages
- service operation messages.
7.3 It is not possible to opt out of such messages.
8. Children’s Online Privacy Protection
8.1 Individuals under the age of 18 may not use the website or the services.
8.2 We do not knowingly collect personal information from minors.
9. StatVIN Contact Information
If you have questions regarding the Privacy Policy, you may contact StatVIN:
PAR Soft, Inc.
Email: [email protected]
Phone: +1 (267) 800-04-57
10. The "Stat Vin" browser extension for Google Chrome
10.1. Scope of this section
10.1.1 This section describes the processing of data by the "Stat Vin" browser extension for Google Chrome, identifier nnfmkaglijgngnephnkgmaldmejandhk, published in the Chrome Web Store (the "Extension").
10.1.2 Sections 1–9 of this Policy apply to the Extension to the extent that they do not conflict with this section. With respect to the Extension, this section 10 prevails, because it describes in detail the categories of data, the recipients and the retention periods that apply specifically to the Extension.
10.1.3 This section is written deliberately in detail. We would rather describe precisely everything the Extension does — including the history of lots viewed and actions on the auction page, including bids — than rely on generic wording.
10.2. Who operates the Extension
10.2.1 The Extension is developed, signed, maintained and published by PAR Soft, Inc. — the same company that operates the StatVIN Services and is defined as "We / Us" in this Policy. In the Chrome Web Store the Extension is published under the developer account «1VIN Dev», which belongs to PAR Soft, Inc.
10.2.2 The Extension shares the same code base, the same server infrastructure and the same APIs as the AuctionGate product (auctiongate.io), which is also operated by PAR Soft, Inc. Transfer of data between the StatVIN and AuctionGate systems is therefore an internal transfer within one and the same legal entity and is not a disclosure to a third party. The same applies to the AuctionHistory service (auctionhistory.io), which is also operated by PAR Soft, Inc.: StatVIN, AuctionGate and AuctionHistory are services of one company, and data exchanged between them is not a disclosure to a third party.
10.2.3 Security fixes, updates and functional changes are applied centrally to all builds of the product.
10.3. Single purpose of the Extension
10.3.1 The single purpose of the Extension is: managing access to buyer accounts at vehicle auctions. The Extension enables customers and employees of StatVIN and of partner dealers to work in auction accounts belonging to PAR Soft, Inc. (StatVIN) and to those dealers at the Copart, IAAI, Manheim, Happycar and Wind Motors auctions, subject to the limits set by the account owner (10.5.7). So that the buyer can make a bidding decision, the Extension displays on the lot page the vehicle's history and condition data, the calculation of the full landed cost of purchase, shipping and customs clearance, and comparable-sale statistics, and, on the AUTO.RIA listings marketplace, the vehicle's history at auctions.
10.3.2 Everything the Extension does — managed access to the auction account and enforcement of limits, reading the lot page, retrieving reports, calculating costs, saving lots, and the usage statistics described below — serves that single purpose and the improvement and security of the features that deliver it.
10.3.3 Express clarification. The Extension is a tool for commercial vehicle auctions. A "bid" is a price offered for a physical vehicle at a commercial auction. The Extension is not gambling, betting, a lottery, a prediction market, a financial or investment instrument, or a game of chance, and it offers no monetary prize, odds, wager or chance-based outcome.
10.4. Where the Extension runs
10.4.1 The Extension activates only on the following sites and their subdomains:
- copart.com and copart.ca;
- iaai.com and ca.iaai.com;
- manheim.com;
- happycarservice.com (Happycar, South Korea);
- windmotors.co.kr (Wind Motors, South Korea);
- auto.ria.com — vehicle listing pages only, see 10.4.4;
- stat.vin, auctiongate.io and auctionhistory.io — our own services (see 10.2.2).
10.4.2 Outside those domains the Extension injects no code, reads no page content, observes no user activity and collects no data at all. We have no access to your other tabs, to your general browsing history, to your email, to your online banking or to any other website.
10.4.3 Manheim, Happycar and Wind Motors. These are vehicle auctions whose pages the Extension handles exactly as it handles Copart and IAAI pages. Wherever this section 10 refers to Copart and IAAI — their pages, lots, accounts or credentials — the same applies equally to Manheim (manheim.com), Happycar (happycarservice.com) and Wind Motors (windmotors.co.kr). References to Copart and IAAI also include their Canadian sites copart.ca and ca.iaai.com.
10.4.4 AUTO.RIA. On auto.ria.com the Extension works only on individual vehicle listing pages. It reads the VIN and the public vehicle data shown in the listing (make, model, year, mileage, listing price and the listing URL) and sends the VIN to our servers in order to retrieve and display that vehicle's history at the Copart, IAAI and Manheim auctions (auction dates, damage, photographs, sale prices). A view of a listing page is recorded in the same way as a view of a lot page (10.6(d)), and clicks on the Extension's panel are also recorded (10.6(e)). On AUTO.RIA the Extension does not record views of other pages of the site, your searches and filters, cursor movement, scrolling or keyboard input, and does not read your AUTO.RIA account data, your messages to sellers or sellers' contact details.
10.5. Account and authentication data in the Extension
10.5.1 The Extension includes sign-in to a StatVIN account.
10.5.2 When you sign in, the Extension transmits the email address and password you enter to our servers over a secure TLS channel, for the sole purpose of verifying your credentials.
10.5.3 The password is never stored in the Extension, is never written to local storage in readable form, is never logged, is never sent to any analytics or advertising provider, and on our servers exists only as a salted cryptographic hash.
10.5.4 After successful sign-in, the Extension stores a session token in the extension storage. The token identifies the session, is revoked when you sign out or uninstall the Extension, and is transmitted only to our own servers.
10.5.5 Your name, email address, telephone number, balance, plan and account identifier are available to the Extension so that it can show your profile, your balance and your saved lots.
10.5.6 We do not collect, read, intercept or store the credentials, cookies or session tokens of your personal accounts at Copart, IAAI and other auctions, or with your bank, email or any other services. If you sign in to an auction with your personal account, the Extension does not use that session. The Extension works with the auction accounts of StatVIN and of dealers as described in 10.5.7.
10.5.7 Managed access to auction accounts. Bidding at auctions requires a registered buyer account. Such accounts are held by PAR Soft, Inc. (StatVIN) and by partner dealers (for example, Motory LLC). Through the Extension, their customers and employees work in these accounts subject to the limits set by the account owner. In this mode:
- the logins and passwords of the auction accounts are stored on our servers; they are not shown to you and are not stored in readable form on your device;
- the Extension sets the auction account's session (cookies) in your browser only on the auction domains listed in 10.4.1;
- in order to enforce the limits, the Extension records the lots opened, bids (lot number, amount, time, result) and vehicles won (10.6(d) and 10.6(e));
- this history is visible to you and to the account owner — StatVIN or the dealer through whose account you work (10.9.9).
10.5.8 Proxy for the Manheim auction. The Extension has a feature that you may enable yourself. When it is enabled, requests only to the Manheim auction (manheim.com) are routed through proxy servers owned by us, in order to ensure stable access to Manheim from your region. Until you enable this feature, no proxy is used. Requests to other auctions and all of your other traffic do not pass through our proxies; no third-party proxy providers are used.
10.6. Categories of data collected by the Extension
This is the complete list of the categories we declare on the Extension's Chrome Web Store listing.
a) Personally identifiable information
Name, email address, telephone number and account identifier, as described in 10.5.
Purpose: to authenticate you, link the Extension to your account, show your profile, balance and saved lots, provide support, and enforce plan limits and anti-abuse rules.
b) Authentication information
The credentials you enter in the Extension's own sign-in form, and the resulting session token, as described in 10.5; and the session of the StatVIN or dealer auction account that the Extension sets in your browser under managed access (10.5.7).
Purpose: solely to authenticate you to the StatVIN Services, keep your session alive and provide managed access to the auction account.
c) Location
Approximate country and region derived from your IP address; time zone and language configured in the browser. We do not use GPS, Bluetooth, nearby Wi-Fi networks or any other precise geolocation technique, and we do not know your address or your exact location. To determine your country, region and time zone, the Extension sends a request from your browser to the IP-geolocation services geoiplookup.io and ip-api.com (see 10.9.8); these services receive your IP address and return your approximate location. Our own servers, like any web server, also see your IP address with every request; it is kept in technical logs for the period stated in 10.11.
Purpose: to show the correct destination port and freight rates, adapt language and currency, apply the customs rules of the relevant country, comply with export-control and sanctions requirements, and detect anomalous access.
d) Web history
While the Extension is active on the sites listed in 10.4, we record only views of individual auction lot pages and vehicle listing pages:
- the page URL and time of viewing;
- the lot number and VIN;
- vehicle data — make, model, year of manufacture.
We do not record views of other pages of these sites — the catalogue, search results, the personal account area — or your search queries and filters.
Purpose: to retrieve and display the report for the lot you are viewing; to maintain the list of recently viewed lots in your account; to calculate price statistics for comparable lots; and to maintain usage statistics for the Extension's features.
We do not record the URLs, titles or content of any page outside the sites listed in 10.4, and we have no access to your general browser history.
e) User activity
We record two kinds of actions:
- clicks on elements of the Extension's panel — for example, opening the report or the calculator, saving a lot, switching tabs — and the time of the click;
- clicks on the bid-placement buttons on the auction page — the lot number, the bid amount you entered, the time of the click and the result of the bid, as well as vehicles won.
Purpose: to enforce the limits set by the owner of the auction account (10.5.7); to show you and the account owner the lots on which you have bid and their results; and to maintain usage statistics for the Extension's features.
The bid amount is the price you offer for a vehicle at a commercial auction (10.3.3). It is not payment information, but we describe it separately so that you know it is recorded; in the Chrome Web Store data disclosure form it is also declared under the "Financial and payment information" category.
We do not record: cursor movement, scrolling, time spent on the page, clicks on other elements of the auction page, or any text you type on the keyboard other than the bid amount at the moment the bid button is clicked. We do not see or store your bank card data, your payment method or your auction deposit.
f) Website content
The public vehicle data displayed on the lot page: VIN, lot number, make, model, year, trim; odometer, damage type and severity, title status, key status, engine and transmission type; physical lot location and scheduled auction date; prices and bids publicly displayed on the page, buy-now price, estimated market value; and the URLs of the lot photographs.
Purpose: to feed the cost calculator, to compare the lot with historical sales of equivalent vehicles, and to compose the report on the vehicle you are viewing.
We do not extract or store full page content, page scripts, complete HTML, or any authenticated content other than the public lot data visible on screen.
g) Technical and diagnostic data
Extension version, browser version, operating system, screen resolution, interface language, timestamps, the result (success or failure) of the Extension's own network requests, and error and crash logs.
10.7. What the Extension does NOT collect
10.7.1 We expressly declare that the Extension does not collect:
- medical information of any kind;
- payment information — card numbers, bank accounts, payment method, financial statements, credit ratings. The only amount the Extension records is the bid amount (10.6(e));
- cursor movement, scrolling, time spent on the page, clicks on elements of the auction page other than the bid buttons, or keyboard input other than the bid amount;
- credentials of third-party services — passwords, cookies, session tokens, PIN codes or security-question answers for your Copart, IAAI, banking, email or other accounts;
- personal communications — emails, SMS or chat messages;
- the content of tabs or websites other than those listed in 10.4;
- precise geolocation, camera, microphone, clipboard or file-system contents;
- special categories of data within the meaning of Article 9 GDPR;
- data of persons under 18 (see section 8 of this Policy).
10.8. Browser permissions and their justification
| Permission | Why it is needed |
|---|---|
| Access to data on copart.com and iaai.com | Core functionality: without reading the lot page it is impossible to identify the vehicle and insert the panel with the report and the calculator. |
| Access to data on stat.vin and auctiongate.io | To link the Extension to your account and synchronise your saved lots and balance. |
| Access to data on manheim.com | As for Copart and IAAI: to identify the vehicle on the lot page and insert the panel with the report and the calculator. |
| Access to data on auto.ria.com | To read the VIN on a listing page and display that vehicle's auction history (see 10.4.4). |
| Access to data on copart.ca and ca.iaai.com | The Canadian sites of Copart and IAAI: the same purpose as for copart.com and iaai.com. |
| Access to data on happycarservice.com and windmotors.co.kr | The Korean vehicle auctions Happycar and Wind Motors: as for Copart and IAAI — to identify the vehicle on the lot page and insert the panel with the report and the calculator. |
| Access to data on auctionhistory.io | Our own service (PAR Soft, Inc.): retrieving the auction history of the vehicle you are viewing. |
| Network requests to geoiplookup.io, ip-api.com, allreports.tools, ecb.europa.eu | See 10.9.8. |
| storage — local storage | To store your settings, language and currency, session state and a cache of recently retrieved reports. |
| scripting / content scripts | To insert the Extension's visual panel into the lot page. |
| activeTab / tabs | To determine whether the active tab is an auction lot page, activate the Extension, and synchronise your settings (for example, language) across tabs. |
| cookies | Only on the auction domains listed in 10.4.1 — to set the auction account's session under managed access (10.5.7), and on our own sites — for account sign-in to work. Cookies of other sites are not read or transmitted. |
| webRequest | To handle the Extension's requests to our servers and to the auction pages listed in 10.4.1 under managed access. It is not used to track your general web browsing. |
| proxy | To route, after you have enabled this feature yourself, only requests to the Manheim auction (manheim.com) through our own proxy servers (10.5.8). None of your other traffic passes through them. |
| webRequestAuthProvider | To allow the Extension to authenticate automatically to our proxy servers when the feature in 10.5.8 is enabled; the proxy credentials are not shown to you. |
| management | For the Extension's protective functions — reducing the risk of errors and data leaks when working with auction accounts. It is not used to collect or transmit data about other extensions you have installed. |
| debugger | To diagnose and fix errors in the operation of the Extension. Information obtained during debugging is used only for the development and improvement of the Extension and is not transferred to third parties. |
| Network communication with our servers | To request the vehicle report, price statistics and current tariffs, and to send the events described in 10.6. |
The Extension does not request access to all websites, to the full browser history, to the clipboard, or to the camera, microphone or precise device location.
10.9. Who receives data collected by the Extension
10.9.1 PAR Soft, Inc. personnel. We expressly disclose that authorised personnel performing technical support, account management, product analytics and development roles have access to the session logs, history of lots viewed, clicks on the panel and on the bid buttons, history of bids and vehicles won, account records and statistics described in 10.5 and 10.6, in order to: resolve incidents and support requests; maintain usage statistics for the product; improve the Extension's features; and detect errors, abuse, scraping and unauthorised automated use. Such access is subject to role-based access control, audit logging, confidentiality agreements and a prohibition on using the data for any purpose unrelated to operating, securing and improving the product.
10.9.2 No analytics or advertising providers. The Extension does not contain Google Analytics, Meta (Facebook) Pixel or any other third-party analytics or advertising SDK. The usage events described in 10.6 are recorded exclusively on PAR Soft, Inc.'s own servers and are not transmitted to any analytics, advertising or measurement company.
10.9.3 The analytics and advertising technologies described in sections 2.2 and 2.5 of this Policy operate on the stat.vin website and do not receive data collected by the Extension.
10.9.4 Apart from the services listed in 10.9.8 and the owner of the auction account under 10.9.9 — and only to the extent described there — no third party receives your password or session token, the VIN or lot number, the amounts of your bids, the text of your search queries, the URLs of the auction pages you visit, or the content of auction pages. No analytics or advertising company receives any of this data.
10.9.5 Infrastructure providers — cloud hosting and managed databases, content delivery network, DNS and DDoS protection, transactional email, error tracking and helpdesk services, engaged as processors under written contracts containing confidentiality and security obligations.
10.9.6 Authorities — we will disclose data to judicial, administrative, tax or customs authorities where there is a legal obligation or a valid legal request.
10.9.7 What we do NOT do with Extension data:
- we do not sell it and do not disclose it to data brokers;
- we do not use or transfer it to determine creditworthiness or for lending purposes;
- we do not use or transfer it for purposes unrelated to operating, securing and improving the Extension's single purpose;
- we do not build advertising profiles or retargeting segments from the data on lots viewed and bids;
- Extension data is transmitted only to our own servers (except for the services in 10.9.8 and the owner of the auction account under 10.9.9, to the extent described there) and is not used for advertising — either by us or by third parties;
- we carry out no automated decision-making producing legal or similarly significant effects on you. The calculations the Extension displays — full cost, comparable-sale statistics, price estimates — are informational estimates based on public auction data and current tariffs, and are not a valuation, an appraisal, financial advice or a guarantee.
10.9.8 External services the Extension contacts directly. To deliver its features, the Extension sends requests from your browser to the services below. They receive only what is listed in the table and do not receive your name, email address, account identifier, password or session token:
| Service | What it receives | Why |
|---|---|---|
| geoiplookup.io | Only your IP address, over a secure HTTPS connection; no data linking the IP address to you or your account is transmitted | To determine your approximate country, region and time zone (10.6(c)) |
| ip-api.com | Only your IP address, over a secure HTTPS connection; no data linking the IP address to you or your account is transmitted | The same purpose as geoiplookup.io |
| AllReports (allreports.tools) | The VIN of the vehicle you are viewing | To check whether paid vehicle-history reports (for example Carfax or AutoCheck) are available for that VIN, and to offer them to you |
| European Central Bank (ecb.europa.eu) | No user data — only a request for the public euro reference exchange rates; as with any web request, the ECB server sees your IP address | To convert prices and costs into your currency |
| AUTO.RIA (auto.ria.com) | Only what your browser already sends to AUTO.RIA when you open its pages (10.4.4) | To display additional vehicle information on AUTO.RIA listing pages |
These services process the data they receive under their own privacy policies.
10.9.9 Owner of the auction account. If you work through the auction account of a partner dealer (10.5.7), that dealer receives the data necessary to monitor limits and to process purchases under its account: your name and StatVIN account identifier, the lots opened, bids (lot number, amount, time, result) and vehicles won. The dealer receives only data about actions in its own account and processes it as an independent controller within the framework of its relationship with you. If the account belongs to StatVIN, this data remains with PAR Soft, Inc.
10.10. Chrome Web Store Developer Program compliance
PAR Soft, Inc. declares that the data handling performed by the Extension complies with the Chrome Web Store User Data Policy, including the Limited Use requirements:
1. The use and transfer of information received from Google APIs to any other app adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.
2. User data is collected and used solely to provide or improve the features that constitute the Extension's single purpose (10.3).
3. We do not sell user data, and we do not transfer it to third parties except in the permitted cases:
- (i) to provide or improve the single purpose, through processors bound by contract, and to the owner of the auction account through which you work (10.9.9);
- (ii) to comply with applicable law;
- (iii) for security purposes, including investigating fraud or abuse;
- (iv) with the user's explicit consent.
4. We do not use or transfer user data to determine creditworthiness or for lending purposes.
5. We do not allow humans to read user data, except:
- (i) with the user's explicit consent for specific pages;
- (ii) where necessary for security purposes;
- (iii) to comply with the law;
- (iv) where the data is aggregated and anonymised and used for internal operations.
The support-personnel access described in 10.9.1 occurs under cases (i), (ii) and (iv).
The data-category declaration published on the Extension's Chrome Web Store listing corresponds to the categories described in 10.6 of this Policy.
10.11. Retention of Extension data
10.11.1 Where and how Extension data is stored. Data the Extension sends to us is stored on servers of PAR Soft, Inc. and its hosting providers in the United States and the European Union (see also section 4 of this Policy). All data the Extension transmits — to our servers and to the services in 10.9.8 — is sent over encrypted HTTPS (TLS) connections. Stored data is encrypted; access to it is role-based, limited to the personnel described in 10.9.1, and logged.
| Category | Period |
|---|---|
| History of lots viewed (URL, lot number, VIN, vehicle data) | 1 month from recording, then deleted |
| Clicks on the Extension's panel and on the bid buttons; bid history (lot number, amount, time, result) and vehicles won | 1 month from recording, then deleted |
| Saved lots and favourites | While the account is active; deleted on account deletion |
| Technical and error logs, including IP address | 90 days (up to 12 months where a security incident investigation is in progress) |
| Authentication records (password hash, active tokens) | Until account deletion; tokens are revoked on sign-out |
| Aggregated and anonymised statistics that cannot identify any individual | No limit |
Once these periods expire, data is deleted or irreversibly anonymised. Data transferred to the dealer that owns the auction account (10.9.9) is retained by the dealer under its own rules. Section 6 of this Policy applies to deletion requests.
10.12. How to manage your data
- Delete your account. In your personal account area on stat.vin. Together with the account, the saved lots are deleted, as well as the viewing history, clicks and bids whose retention period has not yet expired.
- Request deletion or a copy of your data. Write to [email protected] — subject to 10.11 and section 6 of this Policy.
- Uninstall the Extension. chrome://extensions → "Stat Vin" → Remove. Uninstalling deletes all of the Extension's local storage and stops data collection.
- Incognito mode. By default, Chrome does not run the Extension in incognito windows unless you enable it yourself at chrome://extensions.
10.13. Contact regarding the Extension
10.13.1 Questions about the processing of data by the Extension, and requests to exercise your rights in relation to it, should be sent to [email protected] (PAR Soft, Inc., see section 9 of this Policy).
10.13.2 Please include in your message the email address of your StatVIN account — this allows us to locate your data without requiring you to provide identity documents.