Privacy Policy

Last updated: June 8, 2026

CarHistoryReport.ca (“we”, “our”, “us”) is operated by Tactics Digital in Calgary, Alberta. We respect your privacy and handle your personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act(PIPEDA) and other applicable Canadian privacy laws, including Quebec's Law 25.

This Policy explains what we collect, how we use it, who we share it with, and the rights you have over your information. By using our website at https://carhistoryreport.ca(the “Service”), you consent to the practices described here.

1. What We Collect

We collect only what we need to run the Service:

• Email address — when you purchase a Smart Buyer Report or contact support.
• Payment information — handled directly by Stripe. We never see or store your full card number, CVV, or expiry date; we only receive a transaction confirmation and the last four digits of the card.
• VIN lookups — VINs identify vehicles, not people, and are not personal information about you.
• Technical data — IP address, browser type, device, approximate location (country/city), and pages viewed, captured automatically for security, fraud prevention, and aggregate analytics.
• Public vehicle data — recall, complaint, and safety information sourced from NHTSA, Transport Canada, and the EPA. This relates to vehicles, not individuals.

We do not knowingly collect sensitive personal information (health, biometric, identifiers like SIN, etc.). Please don't send us any.

2. How We Use Your Information

We use your information to:

• Provide free VIN decoding and recall data;
• Process Smart Buyer Report purchases and deliver reports by email;
• Generate AI-powered analysis through Anthropic (we send only vehicle data — year, make, model, recall history — never your email or any other personal information);
• Respond to support requests and refunds;
• Detect and prevent fraud;
• Improve the Service through aggregated analytics;
• Comply with our legal obligations (including 7-year tax record retention under the Income Tax Act).

We do not sell, rent, or trade your personal information. We do not send marketing emails. We do not run advertising trackers, behavioural profiling, or retargeting pixels.

3. Cookies

We use essential cookies to keep the Service running (for example, maintaining your session at checkout) and Google Analytics with IP anonymization enabled to understand aggregate usage. You can disable cookies in your browser, or opt out of Google Analytics specifically at https://tools.google.com/dlpage/gaoptout. We don't use advertising cookies, social media pixels, or session-replay technology.

4. Who We Share Information With

We share information only in these limited cases:

• Our service providers (listed below) — to operate the Service. They're contractually limited to what we authorize.
• Legal requirements — when required by law, court order, or a lawful government request.
• Fraud and safety — when we reasonably believe it's necessary to investigate fraud or protect anyone from harm.
• Business transfer — if Tactics Digital is ever acquired, merged, or sold, your information may transfer to the successor. We'd notify you, and the successor would be bound by this Policy.

Our service providers:

5. How Long We Keep It

• Smart Buyer Reports: accessible to you for 90 days; retained internally up to 12 months for refund and dispute support.
• Purchase records: 7 years (CRA / tax law requirement).
• Support emails: 24 months.
• IP address logs: up to 12 months for fraud prevention and security.
• Anonymized analytics: retained indefinitely; cannot be linked back to you.

When we no longer need your information, we delete or anonymize it.

6. Security and Storage

Your data is stored on servers operated by Vercel and Supabase in North American data centres. We use TLS encryption in transit and at rest, and restrict access to personnel who need it. No system is perfectly secure, but if we ever experience a breach that affects your information, we will notify you and the appropriate privacy regulator as required by law.

Your Smart Buyer Report is accessed via a unique email link. Treat it like a password — don't share it.

7. International Transfers

Several of our service providers (listed above) are based in the United States, so your information is transferred there. By using the Service, you consent to this transfer. Information processed outside Canada may be subject to access by foreign authorities under US law. We require all our providers to maintain appropriate safeguards through written agreements.

8. Your Rights

Under PIPEDA, you have the right to access the personal information we hold about you, correct inaccuracies, withdraw your consent, and request deletion (subject to legal retention obligations like tax records).

If you live in Quebec, Law 25 also gives you the right to receive your information in a portable format, request de-indexing in certain circumstances, and be informed of any decision made about you based solely on automated processing (we don't currently make any).

To exercise any of these rights, email us at support@carhistoryreport.ca. We'll respond within 30 days. If you're not satisfied with our response, you can complain to the Office of the Privacy Commissioner of Canada (https://www.priv.gc.ca) or, for Quebec residents, the Commission d'accès à l'information du Québec (https://www.cai.gouv.qc.ca).

9. Children

The Service is not intended for anyone under 18. We don't knowingly collect information from children. If you believe we have, contact us and we'll delete it.

10. Changes to This Policy

We may update this Policy from time to time. The “Last updated” date above reflects the most recent revision. For material changes, we'll notify you through the Service or by email where reasonably possible.

11. Contact

Questions, requests, or concerns:
Email: support@carhistoryreport.ca

This Privacy Policy was last revised on June 8, 2026.