What information does VIN Lookup keep about my order?
The order record, the VIN stored encrypted, your checkout email, amounts and status, the report file and access activity - never full card numbers.
Check the review date and linked sources for context. Live availability, prices and record coverage can vary by VIN, source, jurisdiction and time.
The order itself: its identifier, the product and credit count, the VIN stored as ciphertext plus a hash, a vehicle label, the amounts and currency, your checkout email and a record that you accepted the terms. The privacy policy adds the ClearVIN report identifier, fulfilment status, the original report file, integrity information and report-access activity. Full payment-card details stay with the payment provider.
- The VIN is stored encrypted, with a separate hash used for matching.
- IP address and browser string are stored as hashes, not in the clear.
- Full card numbers are never needed by VIN Lookup.
What the order record holds
When a checkout is created, the order row records an order ID, the product code and number of credits, the VIN as ciphertext and as a hash, a vehicle label, the email used at checkout, an account ID if the order is linked to one, the expected amount and currency, and the terms version with the time you accepted it. It also stores a hash of the IP address and a hash of the browser user-agent as proof of that acceptance - hashes, not the values themselves.
After payment, the same row keeps the payment identifier, the total, tax and discount amounts, and the paid time.
What delivery adds
The privacy policy states that VIN Lookup may retain the ClearVIN report identifier, fulfilment status, the original report file, integrity information and report-access activity for secure delivery, customer support, billing disputes, fraud prevention and contractual recordkeeping.
That access activity is concrete: each download writes a row with the report ID, the order ID, the account ID or a guest flag, a hashed request fingerprint and a hashed user-agent string. Again, no raw IP address is written.
How long, and what you can ask for
The policy does not publish a fixed retention period. It says retention depends on account, order, tax, dispute, security and contractual needs, and that access controls, encryption and monitoring are used to protect the data, with no guarantee of absolute security.
Depending on where you live, you may request access, correction, deletion or a copy of personal information, or object to certain processing. Requests go through the contact page, and identity verification may be required.
What this does not cover
- The privacy policy states no fixed retention period, only the needs that determine it.
- This describes VIN Lookup's own records; ClearVIN and the payment provider keep their own under their terms.
- A deletion request may require identity verification and does not override tax, dispute or legal recordkeeping needs.
Sources reviewed
Open the underlying public source and verify that its scope matches the question you are asking.
Frequently asked questions
Is my VIN stored in plain text?
No. The order stores the VIN as ciphertext, alongside a separate hash the system uses for matching, so the readable VIN is not sitting in the order row.
Is my IP address stored with my order?
Not as a raw address. The checkout acceptance record and each report download store a hash of the request fingerprint and of the browser user-agent instead.
Can I ask for my data to be deleted?
You can ask. The privacy policy says you may request access, correction, deletion or a copy depending on your location, through the contact page, and that identity verification may be required.