Privacy Policy

1. Scope

SC01Guide.com is operated by Vermel Ventures LLC, a California limited liability company. This policy covers the SC01Guide.com website, account services, vehicle reports, and the SC01 Guide mobile app.

We collect the information needed to run VIN lookups, provide reports, manage accounts and purchases, prevent abuse, support users, and operate the service. We do not sell personal information or use it for third-party targeted advertising.

2. Accounts and sign-in

When you create or use an account, we collect your email address and account identifier. We store your available report quantities, purchase history, report history, and the VINs connected to your account activity. A one-time sign-in code expires after 10 minutes. A signed-in session normally expires after 30 days.

We use this information to sign you in, show your research history, provide purchased reports, and respond to support requests.

3. VIN lookups, reports, and searches

When you submit a VIN, we send it to our backend to retrieve or create a vehicle record. We may use NHTSA and other vehicle-data services to obtain available vehicle details. We store decoded vehicle data so the same VIN can be researched again without repeating every external request.

A lookup may be linked to your account when you are signed in. We also record a device identifier, IP address, request time, request outcome, and basic device or browser information for report access, service measurement, fraud prevention, rate limiting, and security. VIN and place searches can form part of your research history.

A successful complimentary lookup creates a temporary report-access record. Its IP address is removed after 30 days, and an expired access record is deleted within 90 days after expiry.

4. Purchases and payment information

Payments are processed by Stripe. Stripe collects the payment method, billing address, name, email address, and other details needed to process the transaction. We do not receive or store your full card number. We receive transaction identifiers, amount, currency, payment status, and customer details Stripe sends us so we can add purchased reports, issue refunds, prevent fraud, and provide support.

Stripe handles payment data under its own privacy policy.

5. Camera scans and inspections

If you scan a VIN, the app uses the camera to read text from the windshield plate or door-jamb sticker. Recognition happens on your device. The image is not uploaded to us or added to your photo library. Temporary camera files remain in app-controlled storage under the device operating system's storage lifecycle.

When you use an inspection while signed in, we store its VIN, vehicle description, checklist answers and state, custom checklist items, item notes, overall notes, finish or reopen state, and created, updated, and completion timestamps with your account. We also store a client-reported sync device identifier. This lets inspections sync between the website and the SC01 Guide app after a connection is available. Offline changes remain queued on the mobile device and sync after a connection is available. The mobile app keeps a local copy so a temporary connection problem does not erase your work.

For an inspection sync request, we record the request IP observed by our server as security and support evidence. We remove that IP from the inspection sync record after 90 days.

You can delete an individual inspection from your account. We keep a deletion tombstone while the account remains active so an offline or out-of-date device cannot restore the deleted inspection by mistake. Account deletion removes its server-backed inspection records and sync history, including tombstones linked to that account.

To remove inspection data from a previously signed-in device after account deletion, the app creates a random, deletion-only device handle and the server stores only a one-way form of it. The handle cannot authenticate a user or read or modify account or inspection data. At account deletion, the server severs the handle's link to the account and keeps only a deletion receipt for a maximum of 400 days. The device that completes account deletion removes its local inspection records and sync data after the server confirms deletion. On another previously signed-in device's next successful connection, the handle can return only the deletion result so the app can remove that account's local inspection records and sync data. If the device never reconnects, its remaining app storage is subject to the device operating system, app removal, device erasure, and backup settings.

6. Location and maps

With permission, the app can use precise location to show nearby chargers and repair shops or to choose a trip origin. Nearby charger matching can occur on the device. Repair searches and trip planning send the coordinates needed for that request to our services. Trip planning also sends the route points to Mapbox. Typed locations are sent to a mapping service so they can be converted into coordinates.

We do not add precise GPS coordinates to your account history. Our security and operational records may contain a coarse network location inferred from an IP address. You can deny or withdraw location access in iOS Settings and enter a location manually where the feature allows it. Mapbox processes data under its own privacy policy.

7. Device, usage, and diagnostic information

We collect service events such as the feature used, request result, duration, error details, app or browser type, device identifier, IP address, and account identifier when signed in. We use these records to operate the service, understand feature use, diagnose failures, enforce access limits, and investigate abuse. We do not track you across apps or websites owned by other companies.

8. Service providers

We share data only as needed with providers that help us deliver the service:

• Cloudflare for hosting, network security, storage, and service logs
• Stripe for checkout, payments, refunds, and payment fraud controls
• Resend for one-time sign-in codes and service email
• Mapbox for location search and route planning
• NHTSA and vehicle-data services for available vehicle information

We may also disclose information when required by law, to protect users or the service, or as part of a business transfer where the recipient must continue to handle the data under applicable law.

9. Retention

We keep account, report, and purchase records while your account is active and as needed to provide the service. Routine operational logs are normally kept for up to 90 days. Security records may be kept for up to 365 days. Transaction, refund, fraud, tax, dispute, or legal records may be kept longer when required for those purposes.

Account deletion removes the live account and email link. Report-lot quantities and ledger events retained for transaction and product audit may remain under an opaque former-account identifier, together with a deletion timestamp so they are not mistaken for orphaned data.

Provider retention periods are controlled by each provider. Local app data normally remains until you delete it, clear the app's data, or remove the app. After account deletion, a previously signed-in device removes that account's inspection data on its next successful connection as described above.

10. Your choices

You can use public educational pages without an account. You can deny camera or location permission and type a VIN or location instead where supported. You can request access to, correction of, or deletion of your account information through the account controls or by contacting us. We may retain limited records when required for security, fraud, payment disputes, taxes, or other legal obligations.

To ask a privacy question or make a data request, email hello@sc01guide.com. You can also visit our Support page.

11. Children's privacy

The service is not directed to children under 13. We do not knowingly collect personal information from children under 13. Contact us if you believe a child has provided personal information so we can review and remove it where required.

12. Policy changes

We may update this policy when the service or our practices change. We will post the revised policy here and change the date at the top. If a change materially affects how we handle personal information, we will provide notice where required.