Privacy Policy

1. Introduction

Vroova ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our vehicle management application.

We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

We collect the following types of information:

Account Information

• Email address
• Name (if provided)
• Password (encrypted)

Vehicle Information

• Vehicle registration numbers
• MOT status and expiry dates
• Road tax status and due dates
• Vehicle details (make, model, colour, fuel type, etc.)
• Mileage records
• Service and maintenance records

Technical Information

• IP address
• Browser type and version
• Device information
• Usage data and analytics

3. How We Use Your Information

We use your information to:

• Provide and maintain our vehicle management service
• Send you MOT, tax, and service reminders
• Look up vehicle information from the DVLA and DVSA
• Improve and personalise your experience
• Communicate with you about your account
• Ensure the security of our service

4. Third-Party Data Sources

We retrieve vehicle information from government APIs including:

• Driver and Vehicle Licensing Agency (DVLA) - for vehicle and tax information
• Driver and Vehicle Standards Agency (DVSA) - for MOT history (when available)

This data is used solely to provide you with accurate vehicle information and reminders.

5. Data Storage and Security

Your data is stored securely using industry-standard encryption and security measures. We use Supabase as our database provider, which employs:

• Encryption at rest and in transit
• Row Level Security (RLS) to ensure you can only access your own data
• Regular security audits and updates

6. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete all associated data within 30 days, except where we are required by law to retain certain information.

7. Your Rights Under UK GDPR

You have the right to:

• Access - Request a copy of your personal data
• Rectification - Request correction of inaccurate data
• Erasure - Request deletion of your data ("right to be forgotten")
• Restriction - Request restriction of processing
• Portability - Request transfer of your data
• Object - Object to processing of your data

To exercise any of these rights, please contact us at privacy@carvault.app

8. Vehicle Registration Numbers

Vehicle registration numbers stored in your account are considered personal data under UK GDPR as they can be linked to individuals. We treat this information with the same level of protection as other personal data.

9. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your data only:

• With service providers who assist in operating our service (under strict data processing agreements)
• When required by law or to protect our legal rights
• With your explicit consent

10. Cookies

We use essential cookies to maintain your session and preferences. For more information, please see our Cookie Policy.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: privacy@carvault.app