← Back to VIN Report

Privacy Policy

Version 1.0 — Effective April 1, 2026 — Last Updated April 1, 2026

1. Introduction

KHouse Holdings LLC (“we,” “us”) operates VIN Report at vin.khousellc.com. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information. We are committed to transparency and minimal data collection.

2. Information We Collect

We collect minimal information necessary to provide the Service:

  • VIN Queries: The Vehicle Identification Numbers you submit are transmitted to government APIs to generate your report. VINs are processed in real-time and are not stored persistently in our systems.
  • Payment Information: If you purchase a paid title report, payment is processed by Stripe. We receive a payment confirmation and session ID but never receive, process, or store your credit card number, expiration date, or CVV.
  • Server Logs: Standard web server logs may include your IP address, browser type, and request timestamps. These are used for security monitoring and are retained for no more than 30 days.

3. Information We Do NOT Collect

  • We do not require or collect email addresses, names, or account information
  • We do not use cookies for tracking or advertising
  • We do not use Google Analytics, Facebook Pixel, or any third-party tracking
  • We do not sell, share, or trade any user data with third parties
  • We do not store VIN search history beyond the immediate request

4. How We Use Your Information

  • To generate vehicle reports by querying government databases on your behalf
  • To process payments for paid title reports via Stripe
  • To verify payment status when delivering paid report data
  • To monitor service health and prevent abuse

5. Payment Processing

Payments are processed by Stripe, Inc., a PCI DSS Level 1 certified payment processor. When you purchase a title report:

  • You are redirected to Stripe's secure checkout page
  • Card details are entered directly on Stripe's servers
  • We receive only a session ID and payment confirmation status
  • Your card information never touches our servers

Stripe's privacy policy applies to all payment data: stripe.com/privacy

6. Third-Party Services

To provide the Service, we transmit VIN data to the following third-party APIs:

  • NHTSA (U.S. Department of Transportation) — VIN decoding, recalls, complaints, safety ratings
  • EPA / DOE — fuel economy data
  • VinAudit (NMVTIS consumer access provider) — title history for paid reports
  • NICB (National Insurance Crime Bureau) — theft/salvage check
  • Stripe — payment processing
  • Cloudflare — hosting, CDN, and DDoS protection

Each third-party service has its own privacy policy. We transmit only the VIN and necessary request parameters — no personal information is shared with these services.

7. Data Retention

  • VIN queries: Not stored. Processed in real-time and discarded.
  • Server logs: Retained for up to 30 days, then automatically deleted.
  • Payment records: Maintained by Stripe per their retention policies. We retain Stripe session IDs for payment verification purposes.

8. Data Security

All data in transit is encrypted using TLS (HTTPS). We do not store personally identifiable information. Payment processing is handled entirely by Stripe's PCI-compliant infrastructure. Our hosting on Cloudflare Workers provides built-in DDoS protection and edge security.

9. Your Rights

California Residents (CCPA): You have the right to know what personal information we collect and to request its deletion. Since we do not store personal information beyond transient server logs, there is generally no data to delete. You may contact us to confirm.

EU/EEA Residents (GDPR): You have the right to access, rectify, or erase any personal data we hold. VIN data transmitted to government APIs is processed in the United States. Contact us to exercise your rights.

To make any privacy-related request, email scott@bluewatervision.net.

10. Children's Privacy

The Service is not intended for individuals under 18 years of age. We do not knowingly collect information from children. If you believe a minor has used the Service, please contact us.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. Continued use of the Service after changes constitutes acceptance.

12. Contact

KHouse Holdings LLC
Hampstead, North Carolina
scott@bluewatervision.net