VINsure Privacy Policy

Last updated: 4 November 2026

VINsure Pty Ltd (ABN 97 703 864 788, ACN 703 864 788) ("VINsure", "we", "us") runs the VINsure app and website. This policy explains what we collect, why, who can see it, and your choices. We handle personal information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

VINsure is in a private beta

Right now VINsure is being tested by a small group of invited people. While it's in this beta:

• Your details are kept in VINsure's test system, stored with Supabase in Sydney, Australia. The test system also holds made-up sample vehicles, records and workshops that we use for testing.
• The workshops listed in the beta are test workshops run by VINsure (they're named "Trial Motors"). If you ask one for a quote, your request comes to VINsure, not to a real business.
• Payments are switched off. Any purchase screens are demonstrations: no money is taken and no card details are collected.
• We may need to reset the test system. If we do, we'll email you first so you can download a copy of your data.
• Please don't enter anything you wouldn't want held in a test system. You can delete your account at any time.

What we collect

Your account

• Your email address, or your Apple sign-in. There are no passwords: you sign in with a 6-digit code we email you, or with Sign in with Apple.
• How you use VINsure (owner, buyer, workshop or dealer), how you heard about us if you tell us, and whether you want news and offers by email.

Your vehicles

• The VIN or HIN, rego plate and state, make, model, year, colour and specifications.
• Odometer or engine-hour readings.
• The name on the registration. Only VINsure sees it. Buyers and workshops never do.
• Ownership photos: the registration certificate, the VIN plate and the odometer.
• If you take all three in the app, you're registered as the owner straight away. The photos are kept privately on file in case anyone questions the ownership.
• Photos chosen from your library are checked by VINsure staff first and deleted after the check.
• Photos on file are kept until VINsure staff have reviewed them or you delete your account.
• Optional photos of your vehicle for My Garage. Only you see them.
• Your rego expiry date and service interval, used for reminders.

Service history

• The details of work logged against a vehicle: date, reading, category, description, parts, cost and invoice number.
• Photos or PDFs of invoices, logbooks, inspection reports and PPSR certificates.
• Who logged it: a workshop, a dealer, or you as the owner. If you upload a workshop's invoice yourself, the workshop's name on the invoice is recorded.
• Invoices and receipts are private. Only the owner, the workshop that uploaded them and VINsure staff see the original. Anyone else only ever sees a copy with names, addresses and phone numbers blacked out.

The Glovebox (if you use it)

• Insurance and roadside details: insurer, policy and membership numbers, type of cover, excess, CTP details and renewal date.
• Papers you photograph, with expiry dates.
• Running costs.
• Accident notes, which can include the other driver's name, phone, rego and insurer, the police event number and witnesses' details. Please only record what you need for your claim.
• The Glovebox is private to you. Buyers, workshops, the next owner and VINsure staff can't see it.

Workshops and dealers

• The business name, ABN, licence or AIS number, address, phone and the representative's details.
• We check the ABN with the Australian Business Register.

Purchases

• What you bought (VIN-SURE Checks, Share Reports, the Glovebox plan, the dealer plan) and when.
• Payments are made through Apple or Google and recorded through RevenueCat. We never see your card details.

Messages and support

• Messages you send us through Help, and alerts we send you in the app.

Usage counts

• Anonymous counts of which steps people reach in the app, for example "started registering" and "sent". Each count has only an event name, the phone type and a random number for that app session: never your name, email, VIN or location.
• Switch it off in Account › Privacy and data.
• Kept for 13 months.

Reminders

• Reminders you set ("Remind me") are scheduled by your phone itself. We don't send them from a server.

How we use it

• To keep each vehicle's permanent service history and show it to the people allowed to see it.
• To register owners, check ownership claims, and let a previous owner object to a claim.
• To work out the History Score and reminders (next service, rego, papers).
• To read uploaded documents automatically, when that feature is on. This includes a receipt an owner uploads for their own vehicle, to fill in the details for them to check. Document pages are sent to Anthropic, our AI provider, which extracts the service details. Anthropic processes them to return the result and does not use them to train its models.
• To explain a vehicle's records in plain English when its owner asks ("Explain this"). Only the vehicle's type, make, model and year and the records' details (dates, readings, work done, results, and whether a verified workshop recorded them) are sent to Anthropic: never names, contact details, the VIN, rego, costs, invoice numbers or photos. Answers are kept for 30 days so the same question can be answered again without sending anything, and are deleted when the vehicle changes owner. We keep only a count of how many answers each person has used.
• To check workshops and dealers, and to look for fraud (for example, odometer readings that go backwards or an invoice used twice).
• To manage your account, purchases and subscriptions, and to respond to support requests.
• To send account and service-reminder emails, and news and offers only if you've said yes.

We don't sell your information or use it for advertising.

Who can see what

• Anyone: a free summary of a vehicle. This covers the make, model, year, the number of records and since when, the month of the last service, whether readings go up, and whether an owner is registered. It never says who the owner is. A search by rego plate shows only the last 4 characters of the VIN.
• Buyers who buy a VIN-SURE Check, and people you send a share link to: the service history by month. They never see prices, invoices, your name or contact details, or records from the last 30 days.
• Workshops: the history of vehicles they work on, but never the owner's name or contact details. A workshop you invite with a link sees the vehicle, the last 4 characters of the VIN and the dates you asked about.
• The registered owner: their vehicle's full history, invoices and their own Glovebox.
• VINsure staff: what's needed to check ownership, workshops and reported problems. Every staff decision is logged. Staff can't see your Glovebox.
• Service records are permanent. A history is only worth something if it can't be quietly changed later. Mistakes are fixed with a correction that sits alongside the original.

Where it's stored and who helps us

• Data is stored with Supabase in Sydney, Australia.
• Sign-in emails (the 6-digit codes) are sent through Resend. Resend receives your email address and the code to send the email; our Resend account is set to process in Tokyo, Japan, and Resend is a United States company.
• Emails you send to support@vin-sure.com.au are kept by our email host, VentraIP (Australia).
• Purchases: Apple, Google and RevenueCat.
• Reading documents and explaining records: Anthropic.
• Web pages for shared links: Netlify.
• Some of these providers are based in or may process data in other countries, including the United States and Japan.

Keeping and deleting

• Delete your account any time from Account › Delete account.
• Your login, purchases, alerts, Glovebox, car photos and ownership photos are deleted.
• Service records stay on each vehicle's permanent history, without your name.
• Download your data any time: Account › Privacy and data › Download a copy of my data gives you a PDF.
• Usage counts are kept for 13 months.

Your choices and rights

• You can ask for a copy of your information, or ask us to correct it.
• To correct a service record, use Report a problem on that record.
• If you're unhappy with how we've handled your information, contact us first. If we don't resolve it, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).

Contact

VINsure Pty Ltd (ABN 97 703 864 788, ACN 703 864 788)
support@vin-sure.com.au