Data Collection
Analytics
Used to collect data about how users use your app, or how your app performs. For example, to see how many users are using a particular feature, to monitor app health, to diagnose and fix bugs or crashes or to make future performance improvements.
Fraud prevention, security and compliance
Used for fraud prevention, security or compliance with laws. For example, monitoring failed login attempts to identify possible fraudulent activity.
Account management
Used for the setup and management of user accounts. For example, to enable users to create accounts, log in to your app or verify their credentials.
Vehicle identifiers and fitment lookups
Our vehicle fitment tools may ask you to enter a Vehicle Identification Number (VIN), Japanese chassis or frame number, manufacturer model or type code, engine code, or a description of your vehicle. We use this information to identify the likely vehicle family, compare it with our fitment database and suggest a roof profile or compatible product. A vehicle identifier does not by itself guarantee roof-rack fitment, and we may ask you to confirm visible vehicle features or provide a roof photo.
NHTSA vPIC transfer
If you submit a valid 17-character VIN, we may send that VIN to the United States National Highway Traffic Safety Administration Vehicle Product Information Catalog (NHTSA vPIC) service for decoding. This is an overseas disclosure made for the purpose of returning vehicle information such as make, model, model year and body class. NHTSA operates its service under its own privacy and data-handling policy. We do not send Japanese chassis or frame serials to vPIC.
Lookup records and technical information
To operate, secure and improve the lookup service, we may record the submitted and normalised identifier, detected identifier type, lookup result, matched vehicle or roof profile, response information, session or customer reference, IP address, browser information and referring page. These records may contain a unique VIN or chassis/frame number. We restrict their use to fitment support, service operation, security, troubleshooting and improving vehicle mappings. We do not sell vehicle identifiers.
Retention
We retain vehicle lookup records only for as long as they are reasonably required for the purposes described above, to resolve a support request, or to meet legal, security and record-keeping obligations. We periodically review information that is no longer required and delete or de-identify it. Where a non-unique vehicle family or model code is useful for improving fitment coverage, we may retain that non-identifying information after removing the unique VIN or chassis/frame serial.
Vehicle photos and AI-assisted Photo Scan
Photo Scan may process a vehicle image to compare its outline with our vehicle roof profiles. Before AI-assisted analysis, we ask you to actively select a checkbox allowing the image to be sent to OpenAI for that purpose. The image is transmitted through ozroofracks systems and may be processed outside Australia. OpenAI explains its handling of business and API inputs in its enterprise privacy commitments and API data-controls documentation. Selecting AI analysis does not by itself give us permission to keep the photo permanently for staff review.
If you later separately agree to submit the result for fitment confirmation, we may receive and store the original image, a processed image and an overlay or comparison image, together with your contact details, comments and fitment-match information.
30-day photo deletion promise
Unless you expressly agree otherwise before using a particular feature, vehicle photos submitted through Photo Scan, Vehicle Photo Assessment (VPA), Enuma Elish or another site feature are securely retained for no more than 30 days and are then scheduled for deletion. Any request to keep a photo for longer must be presented separately before the photo is submitted or the feature is used, and must clearly identify the purpose and longer retention period. Merely using a feature, accepting general site terms or asking an ordinary fitment question does not amount to agreement to longer storage. Copies included in an administrative notification or processed by a service provider may also be held during the applicable retention period.
Optional support consent
In some cases you may ask ozroofracks staff to investigate a difficult vehicle identification or fitment issue. We will only retain a full vehicle identifier or vehicle photo specifically for that support case when you knowingly provide it for that purpose or select the relevant consent option. Support information is available only to staff who need it to handle the request and is not used for unrelated marketing. You may withdraw this optional consent, but withdrawal does not affect processing already completed or information we must retain by law.
Access and deletion requests
You may ask us to locate, access or delete vehicle identifiers, Photo Scan images and related personal information. Please submit the request through our contact form and use the subject Privacy deletion request. Include the email address or mobile number used with the submission, the approximate submission date and whether the request concerns a VIN/chassis lookup, Photo Scan or support case. For your security, do not include a complete VIN or chassis/frame serial in the contact form unless we specifically ask for it after verifying the request.
We may ask for enough information to confirm your identity and locate the relevant record before acting. We will delete or de-identify information that we no longer need, subject to any legal, fraud-prevention, security, dispute-resolution or record-keeping requirement. Information in protected backups may remain until the applicable backup expires and will not be restored for ordinary business use. We will respond through the contact details supplied with the request.
Overseas services
Some service providers used for vehicle decoding, AI-assisted image analysis, analytics, email delivery, security or website operation may process information outside Australia. These include NHTSA vPIC in the United States and OpenAI for AI-assisted Photo Scan. Where required, we take reasonable steps to use providers and arrangements appropriate to the information and the service being supplied.
Complaints
If you have complaints about how we process your personal information, please contact us through our contact form. If you are not satisfied with our response, you may be entitled to lodge a complaint with the Office of the Australian Information Commissioner or another data protection authority that applies to you.