Privacy

This page says what we collect, why we need it, who else touches it, how long we keep it and how to make us delete it. It covers dataplate.art and nothing else.

WHAT WE COLLECT

• Your VIN. We send it to the United States National Highway Traffic Safety Administration's public vPIC service to decode the factory record, and we keep the result so we never have to ask twice.
• Photos of your car, if you ask for artwork. We use them to render the piece and to check the render against them. We do not publish them and we do not sell them.
• Your email address, when you give it, so we can send your preview and your order updates.
• What you tell us to correct in the refinement chat, in your own words.
• Ordinary web data: IP address, browser and device, the pages you visit, and where you arrived from, including any advertising click identifier on the link you followed.

WHAT WE DO NOT COLLECT

No account, because there is no account. No password. No card number: payment happens on Stripe and your card details never reach our servers. We do not buy personal data about you from anyone.

HOW YOUR PHOTOS ARE USED

Your photos are sent to a generative image model to draw your car, and then to a second, independent model that compares the drawing against those same photos and rejects it if it does not match. Both are named below. Your photos are not used to train anyone's model by us, and we do not grant anyone the right to do so.

WHO ELSE TOUCHES IT

• Google (Gemini): renders the artwork from your photos.
• Anthropic (Claude): checks each render against your photos.
• Supabase: stores your VIN, photos, email and messages.
• Vercel: runs and serves the site.
• Stripe: takes payment. We never see your card details.
• Prodigi: prints, frames and ships your piece.

If you arrived from an advertisement, we also report that a conversion happened to the advertising platform that sent you, so we can tell which advertisements work. That report contains an identifier the platform itself gave us, your IP address, and, where you have given us your email address, a one-way cryptographic hash of it. We never send the address itself.

HOW LONG WE KEEP IT

• Decoded VIN records: indefinitely. They are factory history about a car, not about you, and keeping them is what lets the next person who looks up that VIN get an instant answer.
• Photos and previews from a session that never ordered: 90 days.
• Order records, including the final file: seven years, because tax and consumer law require us to be able to show what we sold and to whom.

HAVING IT DELETED

Write to hello@dataplate.art and say what you want removed. We will confirm within 30 days. If you have ordered, we have to keep the order record itself, but we can still delete your photos and the artwork. If you are in California, the EEA or the UK, you have specific rights to access, correct, export and delete your data, and to object to us using it. Use the same address and say so; we will not charge you or make it difficult.

COOKIES

Three, and only the third needs your agreement. One keeps your session together so your preview finds its way back to you, and the site does not work without it. One remembers which version of the homepage you were shown, so the page does not change under you as you move around; it is not read by anyone else and it does not follow you anywhere. The third remembers which advertisement or link brought you here, so we can tell what is worth paying for. Decline that one and everything else still works, and we tell no advertising platform anything about you.

CHILDREN

This is a product for people who own cars. It is not directed at children and we do not knowingly collect anything from anyone under 16.