Privacy Policy

YugoVIN is a service operated by YUGO INC., Lake County, Illinois ("Yugo," "we," "us," or "our"). This Privacy Policy explains how we collect, use, disclose and protect information when you visit yugovin.com, send us an inquiry, or use the YugoVIN VIN decoding API and dashboard.

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

• Email address
• Name (optional)
• Company name (optional)

Sign-in is provided by Yugo Inc.'s shared sign-in service, which stores passwords only in hashed form.

1.2 Payment Information

When you subscribe to a paid plan, payment processing is handled by Stripe, Inc. We do not store your full credit card number. We receive and store:

• Last 4 digits of your card
• Card brand (Visa, Mastercard, etc.)
• Billing address
• Payment history and invoices

1.3 API Usage Data

When you use our API, we automatically collect:

• VINs you decode (stored for caching and improving service performance)
• API request timestamps
• Response times and status codes
• IP addresses
• API key identifiers

1.4 Technical Information

We automatically collect certain technical information:

• Browser type and version
• Operating system
• Referring URLs
• Pages viewed

1.5 Inquiries You Send Us

When you use the contact form or the enterprise quote form, or email us, we collect what you send: your name, email address and company, and, if you provide them, your job title, industry, expected monthly volume, current VIN data provider, timeline, use case, the features you are interested in and your message. We use this information to reply to you and follow up on your request. Form submissions are stored in the YugoVIN database, our team is notified, and a confirmation is emailed to the address you entered through our email provider (Resend). We keep inquiries while we are in contact with you and as part of our business records. To have an inquiry deleted, email privacy@yugoinc.com.

2. How We Use Your Information

We use the information we collect to:

• Provide our services: Process VIN decode requests, manage your account, and deliver API responses
• Improve performance: Cache decoded VINs to provide faster responses
• Process payments: Bill for subscription services and manage your subscription
• Communicate with you: Send service updates, security alerts, and support responses
• Ensure security: Detect and prevent fraud, abuse, and security threats
• Comply with legal obligations: Meet regulatory requirements and respond to legal requests
• Improve our services: Analyze usage patterns to enhance features and user experience

3. Data Storage and Security

3.1 Data Storage

YugoVIN runs on servers that Yugo operates on OVHcloud infrastructure in the United States. Traffic reaches those servers through Cloudflare. Within that infrastructure we operate:

• PostgreSQL: account, usage, billing and inquiry records
• Redis: caching, sessions and background job coordination

Database backups are kept on the same infrastructure and copied to Cloudflare R2 object storage.

3.2 Security Measures

Our security measures include:

• Data in transit is encrypted with TLS (1.2 or higher)
• API keys are stored as SHA-256 hashes, not in readable form
• Access controls and audit logging

3.3 Data Retention

We retain your data for the following periods:

• Account data: Until you delete your account, plus 30 days
• Usage and decode history: Retention depends on your plan: 60 days for Starter and Basic usage history, 180 days for Pro, 270 days for Scale and 450 days for Enterprise decode history. Billing and security records may follow separate retention requirements
• Cached VIN data: Indefinitely (used to improve response times)
• Payment records: 7 years (legal requirement)

4. Third-Party Services

We use the following third-party services that may process your data:

• Stripe: Payment processing (Privacy Policy)
• Resend: Transactional emails (Privacy Policy)
• NHTSA: Public vehicle data source. When a VIN cannot be decoded from our own copy of NHTSA data, the VIN is sent to NHTSA's public vPIC service; no account information is sent
• OVHcloud: Server infrastructure in the United States
• Cloudflare: CDN, security, web analytics and backup storage (Privacy Policy)
• Google Fonts and jsDelivr: Our public web pages load fonts from Google Fonts and open-source script libraries from the jsDelivr CDN, so your browser sends your IP address and browser details to those services when you view the pages

5. Your Rights

Depending on your location, you may have the following rights:

5.1 Access and Portability

You can request a copy of your personal data in a machine-readable format.

5.2 Correction

You can update your account information through your dashboard or by contacting us.

5.3 Deletion

You can request deletion of your account and associated data. Some data may be retained for legal compliance or legitimate business purposes (e.g., payment records, cached VIN data).

5.4 Restriction and Objection

You can request that we limit processing of your data or object to certain processing activities.

5.5 Withdraw Consent

Where we rely on consent, you can withdraw it at any time by updating your preferences or contacting us.

6. Cookies and Tracking

We use cookies and similar technologies for:

• Essential cookies: Required for sign-in and security on the YugoVIN dashboard

Our public pages include Cloudflare Web Analytics, which records page views, referring pages, browser type, page load performance and approximate country. It does not set cookies. You can block it with a browser content blocker. You can manage cookies through your browser settings.

7. Where Data Is Processed

YugoVIN is operated in the United States, and we store and process information in the United States. Cloudflare serves our pages from its global network, so your requests may pass through a Cloudflare location near you.

8. Children's Privacy

Our service is not intended for children under 16. We do not knowingly collect personal information from children. If you believe we have collected such information, please contact us.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through our service. Your continued use after changes constitutes acceptance of the updated policy.

10. Contact Us