VINAFI & VINHUB Privacy Policy

1. Our Commitment to Institutional Privacy

At Vinafi Inc. ("Vinafi," "we," "us," or "our"), operator of the Vinafi Platform and the VinHub™ Cross-Lender Network, protecting confidential financial and operational data is central to our business. We do not sell, rent, monetarily trade, or commercialize your personal or corporate data to third parties under any circumstances.

Data transmitted through Vinafi and VinHub is protected by bank-grade security protocols and is utilized strictly to deliver continuous collateral monitoring, lien verification, out-of-trust detection, and automated inventory audit services.

2. Information We Collect

To provide automated floorplan auditing and cross-lender verification, we collect and process the following categories of data:

• Account & Entity Information: Name, corporate email address, financial institution or dealership entity name, job title, phone number, and administrative credentials.
• Collateral & Vehicle Identification Data: Vehicle Identification Numbers (VINs), serial numbers, title statuses, lienholder records, floorplan advance dates, curtailment details, and dealership inventory records.
• System & Transaction Data: Dealer Management System (DMS) integration feeds, state titling registry queries, audit scan activity, physical location logs during automated audits, and transaction metadata generated across the VinHub network.
• Technical & Security Data: IP addresses, browser types, session tokens, device identifiers, and event audit logs collected for access security and system diagnostics.

3. How We Use Information Across Vinafi & VinHub

We process personal and operational data exclusively for necessary business and collateral risk management purposes:

• Core Risk Monitoring: Operating the Vinafi continuous monitoring engine to detect double-brokering, out-of-trust sales, and unperfected liens.
• VinHub Network Verification: Aggregating encrypted VIN-level data across connected floorplan lenders to identify duplicate financing risks without exposing confidential loan terms or proprietary dealer rosters to competing institutions.
• Integrations & Operations: Executing 50-state titling verifications, real-time DMS syncs, and automated inventory audit workflows.
• Platform Security & Compliance: Protecting network infrastructure against fraud, cyber threats, and unauthorized access.
• Communications: Providing critical system notifications, security alerts, and administrative updates regarding your account.

4. Institutional Data Sharing & Disclosure

Vinafi does not monetize user or collateral data. Data is shared only under strict operational boundaries:

• Connected Network Parties (VinHub): Specific VIN and collateral status data is queried across connected floorplan lenders and financial institutions within the VinHub network solely to verify collateral clearing and prevent duplicate floorplanning.
• Authorized Service Providers: Trusted enterprise sub-processors (e.g., SOC-2 compliant AWS cloud hosting, state title registry APIs, and encrypted communication infrastructure) working under strict confidentiality and data-processing agreements.
• Institutional Authorization: With your explicit instruction or authorization when linking third-party platforms (e.g., DMS connectors or specialized floorplan accounting software).
• Legal & Regulatory Obligations: When strictly mandated by law, court order, or binding regulatory authority following valid legal process (e.g., formal subpoenas or judicial warrants).

5. Government & Regulatory Inquiries

Vinafi enforces rigorous legal review standards for government or law enforcement data requests. We only comply with requests that follow proper statutory authority. Unless legally restricted by court order, Vinafi will promptly notify affected institutional clients before disclosing requested account or vehicle transaction data.

6. Bank-Grade Security & Infrastructure

Vinafi implements technical, administrative, and physical safeguards engineered for institutional financial operations:

• Encryption Standards: Data in transit is encrypted using TLS 1.3, and static data is protected with AES-256 encryption.
• Infrastructure Compliance: Platform services operate within SOC-2 Type II compliant data center environments hosted on secure AWS infrastructure.
• Access Controls: Multi-Factor Authentication (MFA), role-based access control (RBAC), continuous vulnerability assessments, and 24/7 security logging.

7. Data Retention & Governance

We retain account information and vehicle transaction logs only as long as necessary to fulfill core service agreements, enforce floorplan audit integrity, and comply with legal, tax, or regulatory recordkeeping mandates. Collateral transaction logs within VinHub are archived in accordance with institutional financial audit guidelines.

8. Your Data Rights

Subject to applicable jurisdiction and contractual obligations, authorized users and partners maintain the right to:

• Access, review, and export personal account data in standard electronic formats.
• Request immediate updates or corrections to inaccurate operational or contact information.
• Request account deactivation or data deletion (subject to mandatory regulatory and transaction retention periods).
• Manage security preferences, notifications, and administrative permissions.

9. Cookies & Technical Telemetry

The Vinafi web applications and API portals utilize essential session cookies and technical telemetry to authenticate users, protect active sessions against CSRF attacks, and analyze system performance. We do not employ tracking cookies for third-party advertising or cross-site behavioral targeting.

10. Policy Updates

We may update this Privacy Policy periodically to reflect changes in system capabilities, regulatory frameworks, or security standards. Material changes will be communicated via corporate email or through prominent platform alerts prior to taking effect.

11. Contact Us

For privacy inquiries, enterprise data governance questions, or security disclosures, please contact our Compliance & Privacy Office: