Privacy Policy

Last updated: 1 June 2026

1. Who We Are

CFax ("we", "us", "our") is a vehicle history report service operating at cfax.io. We provide Carfax-based reports for vehicles from the USA, Canada, Europe and Asia. Contact: [email protected]

2. What Data We Collect

• Account data: email address and password (hashed) when you register.
• VIN search history: VIN codes you search are stored to show your history and improve caching.
• Payment data: transaction amounts and package details. We do not store card numbers.
• Technical data: browser type, IP address, language preference, session cookies.

3. How We Use Your Data

• To provide and operate the vehicle history report service.
• To manage your account balance and purchased reports.
• To improve our service and cache report data to reduce API costs.
• To communicate with you about your account (transactional emails only).

4. Third-Party Services

We use the following third-party services:

• AllReports / Carfax API — provides vehicle history data. Your VIN is sent to their servers when a report is requested. See their privacy policy at allreports.tools.
• Google OAuth — optional login method. If you use Google sign-in, Google receives your authentication request.

5. Data Retention

We retain your account data while your account is active. Purchased reports are stored permanently so you can re-open them at any time. You may request deletion of your account by contacting [email protected].

6. Your Rights

You have the right to access, correct or delete your personal data. To exercise these rights, contact us at [email protected]. EU/EEA residents have additional rights under GDPR.

7. Cookies

We use essential session cookies to keep you logged in and remember your language preference. See our Cookie Policy for details.

8. Changes to This Policy

We may update this Privacy Policy from time to time. The date at the top of this page indicates when it was last updated.

9. Contact

Questions about this policy? [email protected]