Privacy Policy

1. Introduction

VanityPlateGenerator ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address, name (optional)
• Generation Inputs: Name, profession, hobbies, and other details you provide for plate generation
• Payment Information: Processed securely by Stripe; we do not store credit card numbers
• Contact Information: Name, email, and message content when you contact us

2.2 Information Collected Automatically

• Device Fingerprint: A unique identifier generated from your browser and device characteristics, used to track free generation usage
• Usage Data: Pages visited, features used, generation history, time spent on site
• Technical Data: IP address, browser type, device type, operating system
• Cookies: Session cookies for authentication and analytics cookies for improving our service

3. How We Use Your Information

We use your information to:

• Provide and maintain the Service
• Generate personalized vanity plate suggestions
• Process payments and manage your account
• Track and enforce free generation limits
• Send transactional emails (purchase confirmations, etc.)
• Respond to your inquiries and support requests
• Analyze usage patterns to improve the Service
• Prevent fraud and enforce our Terms of Service
• Send marketing communications (with your consent)

4. Legal Basis for Processing

We process your information based on:

• Contract Performance: To provide the Service you requested
• Legitimate Interests: To improve our Service, prevent fraud, and ensure security
• Consent: For marketing communications and optional data collection
• Legal Obligations: To comply with applicable laws

5. Information Sharing

We do not sell your personal information. We may share information with:

• Service Providers: Stripe (payments), Supabase (authentication), Vercel (hosting), OpenAI (AI generation), FingerprintJS (device identification), Resend (email)
• Analytics Partners: Google Analytics, Vercel Analytics (anonymized data)
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets

6. Data Retention

We retain your information for:

• Account Data: Until you delete your account
• Generation History: 2 years after last activity
• Payment Records: 7 years for tax and legal compliance
• Device Fingerprints: 30 days for free-tier tracking
• Contact Submissions: 2 years

7. Your Rights

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Delete your personal information
• Export your data in a portable format
• Opt out of marketing communications
• Withdraw consent where processing is based on consent
• Object to certain processing activities

To exercise these rights, please contact us at privacy@vanityplategenerator.com.

8. Cookies and Tracking

We use the following cookies:

• Essential Cookies: Required for authentication and core functionality
• Analytics Cookies: Help us understand how you use the Service (can be disabled)
• Preference Cookies: Remember your settings and preferences

You can control cookies through your browser settings. Note that disabling essential cookies may affect Service functionality.

9. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

• Encryption of data in transit (HTTPS/TLS)
• Encryption of sensitive data at rest
• Regular security assessments
• Access controls and authentication
• Secure payment processing via Stripe

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

10. Children's Privacy

The Service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers, including standard contractual clauses where applicable.

12. California Privacy Rights (CCPA)

California residents have additional rights under the CCPA, including:

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt out of the sale of personal information
• Right to non-discrimination for exercising privacy rights

We do not sell personal information as defined by the CCPA.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.