Privacy Policy

1. Information We Collect

We collect information in the following categories:

1.1 Personal Information (Provided by You)

• Name
• Email address
• Password (hashed, never stored in plain text)
• Payment information processed via Stripe (we never see or store card numbers)
• Any details you provide when creating an account, subscribing, or contacting support

1.2 Automatically Collected Information

When you access Plate Index, we automatically collect:

• IP address
• Device type and browser information
• Pages visited
• Usage analytics (search queries, filters used, patterns viewed, plates viewed, frequency of use)
• Date/time of visits
• HTTP request logs and Supabase access logs

1.3 Plate Search & Usage Data

Because Plate Index is a data analytics tool, we collect:

• Plate numbers you look up
• Patterns you search
• Saved plates and watchlist items
• Historical comparisons you view
• Features you interact with

This data is used to improve the platform, provide analytics, and personalise user experience.

1.4 Cookies & Tracking Technologies

We use:

• Essential cookies (authentication, sessions)
• Analytics cookies (performance insights)
• Stripe cookies (for checkout and billing functionality)

You can disable cookies, but some features may not work.

2. How We Use Your Information

We use your information for the following purposes:

2.1 To Operate and Improve Plate Index

• Provide search functionality
• Serve analytics and historical price data
• Maintain account authentication
• Track rate limits and prevent abuse
• Improve accuracy of pricing, patterns, and analytics

2.2 For Payment Processing

We use Stripe for:

• Subscriptions
• Upgrades and downgrades
• Invoices and receipts

Stripe handles all sensitive card data. We never store credit card numbers.

2.3 To Provide Customer Support

• Respond to email enquiries
• Resolve account issues
• Assist with billing questions

2.4 To Enhance User Experience

• Personalised recommendations
• Recently viewed plates
• Saved plates and watchlist behaviour

2.5 To Ensure Security & Compliance

• Enforce RLS (Row-Level Security) policies
• Detect fraud or suspicious behaviour
• Monitor platform performance and reliability

We follow Australian Privacy Act 1988 (Cth) requirements regarding data handling.

3. Sharing of Information

We do not sell your data. We share information only when necessary.

3.1 Service Providers

We use trusted third-party services, including:

• Supabase (database, authentication, logs, storage)
• Stripe (billing, payments)
• Vercel (hosting)
• Cloudflare (security and performance)
• Analytics providers (product analytics)

These providers only access information needed to perform their functions.

3.2 Legal Requirements

We may disclose your data if required to:

• Comply with Australian law
• Protect the security and integrity of Plate Index
• Respond to law enforcement requests

3.3 Business Transfers

If Plate Index is sold, merged, or acquired, user data may be transferred as part of the business.

4. Data Storage & Security

4.1 Storage

All data is stored securely using:

• Supabase Postgres (Australia or nearest region)
• Industry-standard encryption
• RLS policies to isolate user data

4.2 Security Measures

We use:

• HTTPS everywhere
• Database encryption at rest
• Rate limits on searches
• Strict API authentication
• Audit logs
• Secure password hashing (bcrypt or similar)

4.3 Retention

We keep data only as long as required:

• Account data: while your account is active
• Payment data: stored through Stripe according to their retention laws
• Usage logs: retained for diagnostic purposes (typically 12–24 months)

5. Your Rights

Under Australian privacy law, you have the right to:

5.1 Access

Request a copy of the personal data we hold.

5.2 Correction

Request updates or corrections to your information.

5.3 Deletion

Request deletion of your account and associated personal data.

5.4 Data Portability

Request export of your Plate Index account data (excluding platform-level analytics).

To exercise your rights, email support@plateindex.com.

6. Third-Party Links

Plate Index may link to external auction websites, valuation tools, or external resources. We are not responsible for their privacy practices.

7. Children's Privacy

Plate Index is not intended for users under 13 years old. We do not knowingly collect data from children.

8. International Transfers

Our systems may process or store data outside Australia depending on provider infrastructure. All transfers comply with Australian Privacy Act standards.

9. Changes to This Policy

We may update this Privacy Policy as the platform evolves. When changes occur, we will update the "Last Updated" date at the top.

10. Contact Us

For privacy enquiries, data access requests, or account deletion:

• Email: support@plateindex.com
• Website: https://plateindex.com