Privacy Policy
Effective: 2026-10-02
This policy explains what personal information Tow Tek Manufacturing Inc. (“VINready”, “we”) collects through VINready, why, and how we protect it. We follow Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).
What we collect
Your account. The email address and password you sign up with. Passwords are stored only in a scrambled (hashed) form; we can’t see them.
Your business details. What you enter in setup and Settings so it can print on your documents: company name, address, email, phone, HST number, dealer details, WMI, manufacturer ID, plant code, National Safety Mark number, and the NSM image and logo you upload.
Your VIN records. Each VIN you issue and what was printed with it: trailer options, dates and, if you enter them, the buyer’s name, address, city, province, postal code and phone number for the NVIS. We also record which user issued or voided each VIN.
Billing. When you subscribe, Stripe collects your payment card and billing address. Card numbers go to Stripe, never to us. We keep the Stripe customer and subscription references, your plan status and renewal dates.
Files you import. If you use “Import from a file”, the VIN chart you upload is sent to Anthropic to be read and turned into your VIN layout. We don’t store the file itself; we keep a record of the import (file name, size and date) to limit how often it can be used.
Technical information. Our hosting providers keep standard server logs (such as IP address, browser type and the pages requested) to keep the service running and secure.
Why we use it
- to run your account and produce your VINs, compliance labels and NVIS sheets;
- to take payments and send receipts, account and security emails (such as sign-up confirmation and password resets);
- to provide support when you ask for it;
- to keep VINready secure, prevent misuse such as VIN fraud, and fix problems;
- to meet our legal and tax obligations.
We do not sell personal information, and we do not use it for advertising.
Information about your buyers
When you enter a buyer’s details for an NVIS, you collect that information and decide how it is used; we store and process it on your behalf only to provide VINready. You are responsible for having a lawful reason to collect it and for telling your buyers about it. If one of your buyers contacts us, we will refer them to you.
Cookies
VINready uses only the cookies needed to keep you signed in. We do not use advertising or tracking cookies, and we do not use third-party analytics.
Who we share it with
We use these service providers, who may only use your information to provide their service to us:
- Supabase: database, sign-in and file storage (your account, business details, VIN records and images).
- Vercel: hosting of the VINready website and app.
- Stripe: payment processing and invoices.
- Anthropic: reads the VIN chart you upload when you use “Import from a file”.
- an email delivery provider, to send sign-up, password and account emails.
Your data is stored in Canada. Some providers may process information in other countries, including the United States, where it may be subject to the laws of that country. We may also disclose information when the law requires it.
How we protect it
- all connections use encryption (HTTPS);
- each company’s data is kept separate by database access rules, so one company can’t see another’s records;
- only the account owner can change company settings and billing;
- access by our own staff is limited to what is needed to run and support VINready.
No system is perfectly secure. If a breach creates a real risk of significant harm, we will notify you and report it as the law requires.
How long we keep it
We keep your information while your account is open, because your VIN log is a permanent record of the VINs you issued. If you close your account, we delete your data within 90 days, except billing records and anything else we must keep by law (for example, for tax purposes).
Your rights
You can see and correct most of your business information yourself in Settings, and export your VIN log at any time. You can also ask us for access to the personal information we hold about you, ask us to correct it, or withdraw consent (which may mean closing your account). Email us and we will respond within 30 days.
If you are not satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada.
Changes
If we make a significant change to this policy, we will email account owners before it takes effect. The date at the top shows when it was last updated.
Contact
Privacy questions and requests: Privacy Officer, VINready, support@vinready.ca, Tow Tek Manufacturing Inc., 48 Wellington Street, Mitchell, ON N0K 1N0.
See also our Terms of Service.