Privacy Policy

• Account and authentication data: your email address, authentication provider, authentication requests submitted through Firebase Authentication, and the profile details you add in AutoInsight, such as first name, last name, username, avatar, about text, or address.
• Selection and lot data: selection name, visibility setting, optional assigned client email for private selections, auction source, lot number, title, lot URL, image, any VIN already visible on the page, and any max bid you enter.
• Collaboration and report data: comments, likes, report orders, generated report files, and metadata that links a report to your account, selection, lot, or VIN.
• Billing and payment records: access plan, trial status, subscription or prepaid access status, report purchase records, payment provider, amount, currency, checkout or invoice identifiers, provider status, and payment history shown in the web app. Payment method details such as full card numbers are processed by the payment provider and are not stored by AutoInsight.
• Contact request data: the name, email, subject, message, and reCAPTCHA token you submit through the support contact form.
• Operational and security data: timestamps, access status flags, processing state, and service records needed to run the product, troubleshoot failures, and prevent abuse.

• You provide data directly when you sign in, edit your profile, save a selection, choose visibility, enter a client email, set a max bid, add comments, start a trial, buy or manage access, order a report, or use the support contact form.
• The extension reads lot details only from supported Copart and IAAI auction pages that you actively visit in Chrome.
• Our backend also processes the lot or VIN data you submit to save a selection, resolve a missing VIN, and generate requested reports.

• Authenticate users and keep account access working.
• Save and sync selections between the extension and the web app.
• Support sharing, max bids, comments, likes, and other selection-review workflows.
• Resolve missing VINs and generate reports you request.
• Manage trials, subscriptions, prepaid access, one-time report purchases, payment history, and payment-provider reconciliation.
• Protect the service, investigate misuse or failures, and respond to support or privacy requests.

When you purchase or use AutoInsight digital products, we may process payment, order, legal consent, fraud-prevention, security, and digital delivery information. This may include account email, billing details, payment provider identifiers, order identifiers, report identifiers, subscription identifiers, policy acceptance records, timestamps, IP address, IP hash, user-agent, device/browser metadata, report availability events, report open events, report download events, support requests, refund requests, and dispute or chargeback records.

We use this information to provide digital products, verify delivery, prevent fraud and abuse, secure the service, process payments, manage subscriptions, handle refunds, provide customer support, comply with legal, accounting, and tax obligations, and respond to payment disputes or chargebacks.

AutoInsight may record report availability events, report open events, report download events, timestamps, account identifiers, order identifiers, report identifiers, IP address, IP hash, user-agent, and related technical metadata for security, delivery verification, support, refund review, fraud prevention, and payment dispute handling.

We may share relevant information with payment providers such as Stripe, with service providers that help operate AutoInsight, and with third-party, provider, or reseller sources where necessary to fulfill report orders. We do not sell customer conversation or payment dispute data to advertisers. For CARFAX availability checks and report orders, our server sends the vehicle VIN to CARFAX Europe GmbH using our partner authentication; it does not send the buyer’s name, email or payment details to the CARFAX API. We store the hosted link and its expiry in protected report storage. When you open the official report, your browser connects to CARFAX and sends ordinary connection information such as IP address and browser headers, subject to CARFAX privacy terms.

The extension requests only the storage permission. It uses that permission to keep the current selection draft, theme preference, and the limited signed-in user state needed by the popup and supported auction-page buttons.

The extension's content scripts run only on supported Copart and IAAI pages that you actively open. It also requests host access to autoinsight.pro and www.autoinsight.pro so the popup can retrieve privacy-policy version information from our website. It does not collect browsing data from unrelated websites or monitor browsing activity outside those supported auction pages.

We do not sell, rent, or trade personal data. We do not use it for personalized advertising or data brokerage. We share data only with people you choose to share with and with service providers needed to run the product.

• Your sharing choices: public selections can be viewed by anyone with the link. Private selections are available only to the assigned recipient and authorized AutoInsight admins/operators who need access to run and support the service.
• Google Firebase: authentication, database, server-side functions, and file/report delivery.
• Firebase Analytics: the web app initializes analytics for basic product usage measurement.
• Google reCAPTCHA: spam protection for the support contact form.
• Payment providers: Stripe and Trybit, when enabled, are used for subscription checkout, prepaid access, one-time report purchases, customer self-service, payment confirmation, and webhook/postback reconciliation. Trybit is an external crypto payment provider; availability depends on applicable provider terms, network conditions, and compliance checks. AutoInsight does not control blockchain confirmation times, network fees, Trybit service availability, or provider compliance decisions. For purchases using Stripe Managed Payments, Stripe/Link acts as merchant of record and processes applicable payment, tax, receipt and transaction-support data. Standard Stripe purchases retain the existing AutoInsight merchant relationship. The checkout identifies the applicable payment arrangement.
• Configured SMTP email service: delivery of support contact form messages.
• NHTSA, EPA and U.S. DOT public data: VIN decoding and AI Basic report data: recalls, complaints and safety ratings from NHTSA; fuel economy estimates from the EPA (fueleconomy.gov); recall campaign details from U.S. DOT open data (datahub.transportation.gov). The EPA receives only the model year, make and model (and its own vehicle record numbers), and the U.S. DOT only NHTSA recall campaign numbers; neither receives the VIN or any personal data.
• OEM sticker providers: depending on the vehicle make and report you request, VINs may be sent to providers such as Stellantis, Ford Direct, GM, Subaru, Nissan DealerSocket, or Revcue CDN to retrieve an OEM window sticker.
• Configured auction-data provider: if you save a supported lot without a full VIN, our backend can query a relay and provider service to resolve that VIN from the auction lot number.

• The extension uses chrome.storage.local for the current selection draft, visibility choice, optional client email, and saved lot details. It uses chrome.storage.sync for theme preference and limited signed-in user state needed by the popup and supported auction-page buttons.
• The extension popup also uses localStorage and sessionStorage for sign-in persistence, account-access display cache, and privacy/cookie acknowledgements.
• The web app uses localStorage and sessionStorage for sign-in persistence, theme, consent state, and temporary UI state such as draft VIN input and comment-panel state.

• Data is sent over HTTPS between the extension, the web app, and our backend/services.
• Access to selections, reports, and admin tools is controlled by authentication and server-side or Firestore authorization checks.

We keep account, selection, lot, comment, and report data while your account or shared content remains active, or until it is deleted by you or by AutoInsight operations. Billing, payment, and provider reconciliation records may be retained as needed to provide access, preserve payment history, handle disputes, prevent duplicate fulfillment, and meet legal or accounting obligations. Signing out of the extension ends your authentication session. Your local selection draft, preferences, and some cached account and policy information may remain until you clear the extension's browser storage. Contact messages and basic operational records may be retained as needed to respond to you, maintain security, and meet legal obligations.

Payment, order, legal consent, delivery evidence, support, refund, dispute, fraud-prevention, tax, accounting, audit, and legal claim records may be retained for as long as reasonably necessary to provide the service, comply with legal obligations, resolve disputes, prevent abuse, enforce agreements, and respond to chargebacks or payment network inquiries. Some records may be retained even after an account deletion request where retention is required or permitted by law.

You can sign out, clear browser storage, delete selections, and contact us to request access, correction, or deletion of your data. Use the support form at /support.

AutoInsight uses data from supported auction pages only to provide the user-requested selection, sharing, VIN, and report workflow. It is not used for unrelated browsing surveillance, sold to third parties, or used for personalized advertising.

Email

support@autoinsight.pro

Address

Millöckerstraße 8/4 9020 Klagenfurt am Wörthersee Austria

Company

AutoInsight

For account, billing, report delivery, refund, cancellation, privacy, or technical questions, use the support contact form. /support.