Privacy Policy

Last Updated: May 16, 2026

1. Controller

The controller responsible for data processing on this website is BSI OÜ (Maakivi tn 8-2, Räni alevik, Kambja vald, Tartu maakond, 61708, Estonia). For privacy-related inquiries, contact us at info@carlytics.eu.

2. What Data We Collect

2.1 VIN Check Results (Summary Records)

When you perform a VIN or license plate check, we store the decoded vehicle information (make, model, specifications, recall data, etc.) in a Summary record. Summary records are not linked to your identity — they contain only the vehicle data, a random report ID, and (for paid reports) payment metadata.

2.2 Page Views & Analytics

We log page views for internal analytics. Each page view records: the page path, referrer, country (from Vercel headers), and a hashed IP address. IP addresses are hashed with a daily-rotating salt and cannot be reversed to your original IP.

2.3 Payment Processing

Premium reports are processed by Stripe, Inc. (510 Townsend Street, San Francisco, CA 94103, USA). We never receive or store your full credit card number. Stripe Privacy Policy

3. Your Rights (GDPR Art. 15–21)

You have the right to access, rectify, erase, restrict processing, port, and object to processing of your data. To exercise these rights, use our self-service GDPR endpoint at /api/gdpr, or contact us at info@carlytics.eu.

4. Contact

Email: info@carlytics.eu
BSI OÜ, Maakivi tn 8-2, Räni alevik, Kambja vald, Tartu maakond, 61708, Estonia

For the complete privacy policy, please refer to the English version. A full Norwegian translation will follow.