VBVINBRIDGE
Legal

Privacy Policy

Last updated: 14 October 2026

Draft — not yet reviewed by a lawyer.

This policy explains what personal data Vinbridge (“we”, “us”) collects when you use Vinbridge, why we collect it, who we share it with, and the rights you have under the Israeli Protection of Privacy Law, 5741-1981, including Amendment 13.

1. Data we collect

  • Account details: name, work email, company, the country you import into, phone number and any note you add when you sign up.
  • Google sign-in: if you sign in with Google, the basic profile details Google shares with us (name, email address and profile picture).
  • Requests: the emails you send to your Vinbridge inbox, including their contents and attachments.
  • Dealer correspondence: dealers’ replies and attachments, which may include VINs, vehicle history reports, title documents and photos. These documents may contain personal data of other people, such as a previous owner’s name.
  • Dealer contact details: dealers’ business names, email addresses and phone numbers taken from public listings and dealer websites.
  • Session and security data: IP address, browser user agent and sign-in times.
  • Activity log: a record of actions taken by administrators and users in the service, such as account approvals, rule changes and decisions about vehicles.
  • Preferences: your interface language.

2. How we use it

  • to provide the service: understand your requests, find vehicles, contact dealers, read documents and show you recommendations;
  • to review new accounts and prevent abuse and fraud;
  • to contact you about your account and your requests;
  • to keep the service secure, investigate problems and keep an audit trail; and
  • to comply with our legal obligations.

We do not sell personal data and do not use it for advertising.

3. AI processing

Requests and documents are sent to Anthropic, our AI provider, to extract their contents. Under Anthropic’s commercial terms, data sent through its API is not used to train its models by default.

The AI produces recommendations only. Every decision about a vehicle is made by a person; we make no automated decisions about individuals.

4. Service providers

We share personal data only with providers that process it for us to run the service:

  • Vercel — hosting and file storage (Vercel Blob);
  • MongoDB Atlas — database;
  • Anthropic — AI reading of requests and documents;
  • Amazon Web Services (Amazon SES, USA) — sending and receiving email;
  • Cloudflare Turnstile — bot check on sign-up;
  • Google — sign-in with Google;
  • MarketCheck and NHTSA (US National Highway Traffic Safety Administration) — vehicle listings and VIN data.

5. Transfers outside Israel

Our providers store and process data outside Israel, mainly in the United States and the European Union. We transfer data abroad only as permitted by Israeli law, including the Privacy Protection (Transfer of Data to Databases Abroad) Regulations, 5761-2001, and rely on our providers’ contractual and security safeguards.

6. Retention

We keep personal data for as long as your account is active and as needed to provide the service. After that we delete or anonymise it within a reasonable time, unless we must keep it longer to meet legal obligations, resolve disputes or enforce our agreements.

7. Security

We protect data with encrypted connections, role-based access, two-factor authentication for administrators and an audit log of sensitive actions. No system is perfectly secure; if a security incident affects your data, we will act as the law requires.

8. Cookies

We use only essential cookies: a session cookie that keeps you signed in and a cookie that remembers your language. We do not use advertising or analytics cookies. The Cloudflare Turnstile check on sign-up processes technical browser data to tell people from bots.

9. Your rights

You may ask to see the personal data we hold about you, to correct it, or to delete it. Write to privacy@example.com. We will answer within the time the law requires and may need to confirm your identity first.

If you are not satisfied with our answer, you may complain to the Israeli Privacy Protection Authority.

10. Age

Vinbridge is a business service and is not intended for anyone under 18.

11. Changes to this policy

We may update this policy. The date at the top of this page shows when it last changed. If a change is material, we will tell you by email.

12. Contact

Privacy questions and requests: privacy@example.com.