Privacy Policy
EFFECTIVE DATE: TO BE SET AT LAUNCH · LAST DRAFTED JULY 2026
1. What we collect
- Email address — for passwordless sign-in and report delivery.
- VINs you check and report inputs (asking price, mileage, ZIP) — to produce your reports.
- A random device identifier — for free-check rate limiting.
- Usage analytics and error logs — product analytics (PostHog) and error tracking (Sentry), tied to your account id, to improve the product.
- Saved preferences — like a budget you choose to save.
2. What we never collect
No payment card numbers (Apple/Google process purchases), no government IDs, no precise location, and no contact lists. VIN data relates to vehicles, not to people.
3. How data is used
To generate reports, operate free checks, prevent abuse, provide support, and improve the product. We do not sell personal information. Vehicle data (VIN histories) is cached and shared across users — your email is never attached to it.
4. Marketing emails
We send promotional and update emails only if you explicitly opt in — an unticked checkbox you choose to tick. We store the timestamp of that consent. Every marketing email includes a one-click unsubscribe link, and there's an opt-out toggle in My Reports. Transactional emails — sign-in links, report-ready notices, listing-renewal reminders — are sent regardless of this setting, because the service can't work without them.
5. Public listings
If you list a vehicle for sale, the listing is public. Creating one publishes the vehicle's VIN, title, asking price, city, the contact line you choose, and the seller report link for anyone to see. Nicknames and account emails are never published — the only contact detail shown is what you type into the contact line yourself.
6. Third parties we use
Government and commercial vehicle-data providers (e.g. NHTSA, market-data vendors) receive the VIN being checked; email delivery (SMTP2GO); product analytics (PostHog); web-traffic analytics (Clicky, which logs the pages you visit — in the app these page addresses include the VIN you are viewing); ad measurement (TikTok Pixel, which records page visits and purchase events so we can measure our advertising); error tracking (Sentry); infrastructure (Vultr, Cloudflare). Affiliate partners receive nothing about you unless you click through to them.
7. Cookies & storage
We use browser localStorage for your session token and device identifier. The TikTok Pixel sets an advertising cookie used to measure our ad campaigns; we do not run third-party ad networks on the site itself.
8. Retention & deletion
Delete your account any time in the app: your email and identifiers are removed immediately; purchase records are retained in anonymized form for accounting and fraud prevention. Cached vehicle data (not tied to you) is retained.
9. Your rights
Email [email protected] to access, correct, or delete your data, or to ask questions. California and EU/EEA residents may have additional statutory rights, which we honor.
10. Children
NoLemon is not directed at children under 13 and we do not knowingly collect their data.
11. Changes
Material changes will be announced in-product with an updated effective date.
