Privacy Policy Epicvin.com

1. Definitions

Policy: This Privacy Policy document.
We, us, our: EpicVIN, Inc., a company registered at: EpicVIN, Inc., 2980 NE 207th St, Suite 300-189, Aventura, FL 33180, USA
You, your: Any individual using or accessing the Website or Services, including users, customers, and Affiliates.
Website: The website operated by EpicVIN at epicvin.com.
Services: The products, features, and services offered by EpicVIN under our Terms of Service.
Affiliate: An individual or legal entity participating in our affiliate program who provides advertising or marketing services on our behalf.
Terms: Our Terms of Service governing your use of the Website and Services.
Personal Information: Any information relating to an identified or identifiable natural person, under applicable laws, including but not limited to information that can be used to directly or indirectly identify an individual.
Business Customer: An entity that utilizes our API or other business solutions provided by EpicVIN.

2. Information We Collect and How We Collect It

We collect Personal Information about you when you use our Website, Services, or interact with us directly. Categories include:

a) Information You Provide Directly

Full name, email address, phone number (for account setup and two-factor authentication), date of birth, and other contact details.
Vehicle identifiers (VINs), state registration info, and related data you submit for vehicle history reports.
Payment metadata (ZIP/postal code, card network type, last four digits, expiration date) from our payment processor. We do not store full card numbers or CVV codes.
Personal and business details for participants in our affiliate program.

b) Information Collected Automatically

Device & usage data: IP address, device identifiers, browser type/version, screen resolution, time zone, operating system, device model.
Behavioral data: referring URLs, landing pages, clicks, pages visited, session duration/frequency, error logs.
Data via third-party analytics and advertising tools (e.g., Google Analytics, Facebook Ads) through cookies and similar technologies.

Essential Cookies: Required for user authentication, session management, and security.
Performance & Analytics Cookies: To measure site usage and improve functionality.
Targeting Cookies: To deliver relevant advertising.
You can opt out of the use of your information for cross-context behavioral advertising at any time on our Do Not Sell or Share My Personal Information page.
Functional Cookies: To remember preferences (e.g., language, region).

You may manage or disable cookies via your browser settings; doing so may limit certain features.

3. How We Use Personal Information

We use your Personal Information to operate, provide, and enhance our Services and Website, including to:

Deliver requested Services and Website features.
Process payments, subscriptions, and billing.
Manage user accounts and administrative functions.
Provide customer support and resolve issues.
Research, test, and develop new features for an improved experience.
Generate aggregated reports, analytics, and business insights.
Communicate updates, promotions, and marketing offers.
Prevent, detect, and respond to fraud, abuse, and security threats.
Comply with legal obligations and enforce our Terms of Service.
Administer our affiliate program and manage customer reviews.

Without this processing, we may be unable to provide full functionality of the Services.

4. Disclosure of Personal Information

We may disclose your Personal Information to:

Service Providers & Partners: Payment processors, hosting providers, analytics vendors, customer support platforms, marketing and advertising partners, security and authentication services, and affiliate program managers.
Professional Advisors: Lawyers, auditors, and consultants, when necessary for our operations or compliance.
Government & Law Enforcement: When required by law or to protect our rights.
Business Transitions: Successors or assigns in connection with a merger, acquisition, reorganization, or sale of assets.
Other Third Parties: With your consent or direction.

Post-purchase offers. We work with Rokt, an advertising partner, to present relevant offers, content, or experiences to customers during or after their transaction. In connection with this service, information about your transaction and interaction with the Rokt placement may be collected or used to help determine which offers or content are most relevant, to measure performance, and to support the operation of the service. This may include your name and email address (which we provide in hashed form), billing geography (such as ZIP code and, where available, city and state), transaction details such as order amount, currency, and order reference, device and browser information, and your interactions with the placement. Cookies or similar technologies may be used in connection with this service. Links to Rokt’s privacy policy are displayed within the Rokt placement, and you can also review it at rokt.com/policies/privacy-policy. Because Rokt uses this information for its own advertising purposes, this constitutes “sharing” for cross-context behavioral advertising under the CCPA. You can opt out at any time on our Do Not Sell or Share My Personal Information page, as described in Section 11 (“California Privacy Notice”).

All recipients are contractually bound to protect your information in accordance with this Policy.

5. Data Retention

We retain your Personal Information only as long as necessary to:

Provide and maintain the Services.
Comply with legal, tax, or accounting obligations.
Investigate and prevent fraud, abuse, or unauthorized access.
Resolve disputes and enforce our agreements.

Upon request, or when no longer needed, data is securely deleted or anonymized.

6. Security Measures

We implement appropriate technical, organizational, and physical safeguards—aligned with industry standards—to protect your Personal Information against unauthorized access, use, alteration, or destruction. Third-party vendors undergo security and privacy assessments before engagement.

7. Information Concerning Children

Our Website and Services are not intended for individuals under 16 years old. We do not knowingly collect Personal Information from anyone under 16 without verified parental or guardian consent. If you believe we have collected information from a child under 16, please contact us at support@epicvin.com; we will delete the data or obtain consent as required by law.

8. Third-Party Links and Services

Our Website may contain links to third-party sites, apps, or services. Their privacy practices are governed by their own policies, and we encourage you to review them before use. EpicVIN is not responsible for third-party content or practices.

9. Modifications to This Privacy Policy

We may update this Privacy Policy at any time in our discretion. The revised version will be posted on this page with an updated Effective Date. Continued use of the Website or Services after changes constitutes acceptance. If you disagree, please discontinue use.

10. Privacy-Related Inquiries

For questions, concerns, or requests regarding this Privacy Policy or your Personal Information, contact our Privacy Team at:
support@epicvin.com
EpicVIN, Inc.
Attn: Privacy Compliance
2980 NE 207th St, Suite 300-189, Aventura, FL 33180, USA

We will respond promptly and transparently.

For sale/sharing opt-out requests you can also use our Do Not Sell or Share My Personal Information page.

11. California Privacy Notice

This notice supplements this Privacy Policy and describes the rights of California residents under the California Consumer Privacy Act (CCPA). The opt-out mechanisms described below — our Do Not Sell or Share My Personal Information page and our handling of the Global Privacy Control signal — are available to all users, regardless of state of residence.

Categories of Personal Information Collected & Retention

CCPA Category	Retention Period
Identifiers (name, alias, postal address, email — including hashed, phone, IP address)	As long as you maintain an account with us
Protected classifications (e.g., age 40+)	As long as you maintain an account with us
Commercial information (purchase/subscription history)	As long as you maintain an account with us
Internet/electronic network activity (browsing/search history)	No longer than 1 year
Geolocation data (device or computer location)	No longer than 1 year
Audio/visual/electronic info (call recordings)	As long as you maintain an account with us
Inference data (preferences, profile data)	As long as you maintain an account with us
Sensitive Personal Information (account credentials)	As long as you maintain an account with us
Records of privacy requests and opt-out preferences	At least 24 months

Sensitive Personal Information is used only as permitted under the CCPA (e.g., to verify your identity or fulfill your requests).

Categories of Sources & Third-Party Disclosures

Sources: As described in Section 2 (“Information We Collect…”).
Disclosures: We share data with providers listed in Section 4 (“Disclosure of Personal Information”).
Service providers: We disclose Personal Information to service providers — such as payment processors, hosting, analytics, and customer support providers — that process it on our behalf under contractual restrictions and may not use it for their own purposes.
Advertising partners: We share Personal Information with advertising partners, including Rokt (see Section 4 and “‘Sale’ or Sharing of Personal Information” below), for cross-context behavioral advertising, under contracts required by the CCPA that limit their use of the information.

Categories Disclosed, Sold, or Shared

Category	Disclosed for a business purpose — recipients	Sold or shared — recipients
Identifiers (name, email — including hashed, phone, IP address)	Payment processors; customer support and email tools; affiliate-program platform; error-monitoring provider	Advertising and analytics partners (e.g., Google, Meta) and our post-purchase offers partner (Rokt) for cross-context behavioral advertising
Commercial information (orders, subscriptions, amounts)	Payment processors; analytics providers	Advertising partners (purchase/conversion events); post-purchase offers partner (Rokt)
Internet or other electronic network activity	Analytics providers; error-monitoring provider	Advertising partners
Geolocation (IP-based, non-precise)	Analytics providers; fraud prevention	Advertising partners
Protected classifications	Not disclosed	Not sold or shared
Audio/visual information (call recordings)	Call-center / telephony provider	Not sold or shared
Inference data (preferences, profile data)	Analytics providers	Not sold or shared
Sensitive Personal Information (account credentials)	Hosting and security providers, strictly to operate the service	Not sold or shared

“Sale” or Sharing of Personal Information

We do not “sell” Personal Information for monetary consideration. However, under the CCPA’s broad definitions of “sale” and “sharing,” we share the following categories with advertising and analytics partners — including Google, Meta, and our post-purchase offers partner Rokt — for cross-context behavioral advertising:

Identifiers (name and email address, including hashed forms; phone number; IP address; device identifiers)
Commercial information (orders, subscriptions, and amounts, as purchase and conversion events)
Internet or other electronic network activity (browsing and usage data)
Geolocation data (IP-based, non-precise)

These categories correspond to the “Sold or shared — recipients” column of the table above.

We share certain personal information with Rokt, our post-purchase offers partner, so that Rokt can select and present relevant offers, content, or experiences during or after your transaction and support related measurement and reporting. Because Rokt uses this information for cross-context behavioral advertising, the CCPA treats this as “sharing.” Our contract with Rokt limits its use of the information to the purposes described here and requires Rokt to comply with the CCPA. The information we share with Rokt may include identifiers such as your email address (which we provide in hashed form), name, billing geography (such as ZIP code, city, and state), and transaction details.

If you choose to interact with or accept an offer presented through the Rokt placement, information related to that interaction may be used to facilitate the offer you selected and to measure performance. In that case, your information may also be provided to the advertiser whose offer you engaged with, and that advertiser’s own privacy policy will govern its use of the information.

If you opt out on our Do Not Sell or Share My Personal Information page, or send us a Global Privacy Control signal, we stop sharing your Personal Information with Rokt.

To opt out of the sale or sharing of your personal information, visit our Do Not Sell or Share My Personal Information page. No account or login is required, and the opt-out takes effect for your current browser immediately. If you additionally verify the email address of your EpicVIN account on that page, the opt-out is applied to your account as well. We also honor the Global Privacy Control (GPC) browser signal as a valid request to opt out of sale/sharing for the browser that sends it. You can withdraw an opt-out at any time by contacting support@epicvin.com.

We process the GPC signal at the browser level: it applies to the browser that sends it and to any profile associated with that browser, takes effect automatically without any additional steps, and is treated as a valid request to opt out of sale/sharing. If you are logged in when we receive the signal, we also apply the opt-out to your EpicVIN account. If you have previously chosen to allow sale/sharing, we still honor the signal; you may afterwards opt back in on our Do Not Sell or Share My Personal Information page.

Your CCPA Rights

California residents may:

Know what Personal Information we collect, use, disclose, or sell.
Access specific pieces of Personal Information.
Correct inaccurate Personal Information.
Delete Personal Information (subject to exceptions).
Opt-out of sale/sharing for behavioral advertising — via our Do Not Sell or Share My Personal Information page or the Global Privacy Control browser signal.
Limit our use of your Sensitive Personal Information.
Non-discrimination for exercising rights.

To exercise any right, please contact us at support@epicvin.com. We will verify your identity before processing requests. The sale/sharing opt-out is an exception: it is available on our Do Not Sell or Share My Personal Information page without an account, login, or identity verification; verifying your email is required only if you choose to apply the opt-out to your EpicVIN account.

You may designate an authorized agent to submit a request on your behalf. We may ask the agent for proof of authorization and, for requests other than the sale/sharing opt-out, verify your identity directly.

12. Other State Privacy Laws

Several U.S. states have enacted comprehensive privacy laws similar to the CCPA. Although many may not apply to us due to exemptions, we voluntarily adhere to their core principles:

We do not process Sensitive Personal Information for unauthorized secondary purposes.
We use and disclose Personal Information as described in Sections 2–4.
We will not discriminate against you for exercising privacy rights.

State-specific rights (e.g., deletion, correction, access, portability, opt-out of sale/targeted advertising) can be exercised by contacting support@epicvin.com. To opt out of sale/targeted advertising, you may also use our Do Not Sell or Share My Personal Information page; we honor opt-out requests submitted through that page for all users, regardless of your state of residence.

By using EpicVIN’s Website or Services, you acknowledge that you have read, understood, and agree to this Privacy Policy.