General
This policy explains how VinBax (Tax ID: —, address: —) processes the personal data of users of the VinBax service. Data is processed in accordance with the Law of the Republic of Azerbaijan "On Personal Data".
What we collect
When you create an account: email, name (optional) and a password hash (the password itself is not stored). At checkout: email and payment details (card data is entered on the payment provider's page and never reaches our servers). Technical: searched VINs, a hash of your IP address, browser type and cookie identifiers.
How we use it
To provide the service (preparing and delivering reports), process payments, count free limits, prevent abuse, provide support and comply with the law.
Who we share it with
Only with partners needed to run the service: payment provider, report provider (VIN only), email delivery service, hosting and storage. Analytics (Google Analytics) runs only with your consent. Some partners' servers may be located outside Azerbaijan; such transfers are made under contract and with data protection safeguards.
Retention
Account data is kept while the account is active. Payment records are kept for the period required by accounting law. Technical logs are kept for up to 90 days.
Your rights
You have the right to access, correct and delete your data. You can delete your account yourself on the account page: personal data is anonymized, while payment records are kept for the legally required period. Requests: —.
Cookies
Necessary cookies: session (login), CSRF protection, language choice, free limit counter. Analytics cookies (Google Analytics) are set only if you choose "Accept all". You can change your choice via "Cookie settings" at the bottom of the site.
Security
Data is transmitted over encrypted connections (HTTPS), passwords and API keys are stored only as hashes, and access to the admin panel is protected with two-factor authentication.
Changes and contact
When this policy changes, the update date is shown on this page. Questions: —, phone: —.