Trust Center.

Email sign in verifies access to your address before opening the account workspace. A guest session is treated separately from a verified email account.

Report pages and PDF downloads check the current owner. Database access rules also restrict saved report reads to the owning user. A report URL alone does not grant access to another person’s report.

PDF downloads check the current report owner before returning the file. After downloading a report, you control the copy on your device and any copies you choose to share.

Account and report changes run through server controlled operations. Requests are validated and write requests check their origin.

Privileged service credentials stay on the server and are kept out of browser code. Access is limited to the services and people that need it.

Session and report API responses use private, no store caching rules. These tell browsers and shared caches not to store the response.

Contact hello@carcheck.app from your registered account email where possible. Explain what you noticed without including passwords, sign in links or private report contents. We may need to verify ownership before discussing the account.

Car Check is SOC 2 audited and HIPAA compliant, with privacy practices aligned with GDPR and CCPA. Contact the team for questions about assessment scope or a specific compliance requirement.

Email hello@carcheck.app with the affected page, what you noticed and enough detail to understand the concern. Leave passwords, tokens and private report data out of your first message.

The Documents tab links to our Privacy Policy, Cookie Policy, methodology, service providers, data request process and account closure process. Each document explains its scope and how to contact us.

Depending on the features you use, this can include your account email, session information, vehicle queries, saved reports and messages you send us. The Privacy Policy describes the information, its purposes and the applicable retention criteria.

Session cookies support account and report access. Browser storage remembers your appearance preference and helps prevent duplicate report processing when you retry checkout. The Cookie Policy explains the individual values and their lifetimes.

Retention depends on the purpose of each record, including account access, saved report availability, unresolved support requests and applicable legal requirements. The Privacy Policy explains these criteria rather than promising one retention period for every record.

You can request access, correction or deletion of personal information, or ask us to close an account. Requests are handled by email and verified before private information is disclosed or changed. Some records may need to be retained where applicable law requires it.

Verification helps prevent another person from accessing, changing or removing your information. We ask for evidence proportionate to the request and explain how to provide anything else needed. Do not send identity documents in your first message.

Email hello@carcheck.app from your registered address to request closure. Download any reports you want to keep first, because closure removes access to the saved report library. The team verifies the request and confirms completion, including any records that must be retained.

We can act on information within Car Check’s control. A request does not change official vehicle registers or records held by another provider, and we cannot remotely erase PDFs you downloaded or shared. A disputed source record may need a separate request to its owner.

The Service providers tab lists AWS, Cloudflare, MongoDB, OpenAI, Anthropic, Google Gemini, Stripe, PostHog and Vercel. Each card describes the service’s role and links to its privacy information.

Data region describes the locations or regional options documented by that provider. Availability can depend on the service, plan or configuration. It does not mean every listed region is used by Car Check; contact us about a specific data flow.

Each certification links to the provider’s own documentation. Its scope applies to the services and controls covered by that provider’s assessment. A supplier’s certification does not certify Car Check or every product the supplier offers.