PlateAPI

Privacy Policy

Last updated: 6 July 2026

This Privacy Policy describes how WolfStack Solutions ABN 26 877 229 839 ("we", "us", "our") collects, uses, and handles information in connection with the PlateAPI vehicle registration plate lookup service ("Service"). We are committed to handling personal information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

1. Information We Collect

Account Information

When you register for an account, we collect your email address and any other information you provide during registration. If you subscribe to a paid plan, our payment processor (Stripe) collects your payment details -- we do not store credit card numbers or bank account details on our servers.

API Usage Data

When you make API requests, we log the following for each lookup:

  • The registration plate number and state submitted in the request
  • The vehicle data returned (year, make, model, body type, engine)
  • Your API key identifier (not the full key)
  • Timestamp of the request
  • Response time and success/failure status
  • Your IP address

This data is used for billing enforcement, rate limiting, service monitoring, and abuse prevention.

Shopify Widget Data

If you use the PlateAPI Shopify widget, we receive API requests containing the plate number and state entered by your store's visitors, along with your Shopify store domain. We do not collect any other information about your store's visitors (no names, email addresses, browser fingerprints, or tracking cookies).

Website Analytics

We may use privacy-respecting analytics on our website. We do not use Google Analytics. We do not sell advertising and do not share analytics data with third parties.

2. Vehicle Registration Data

The vehicle data returned by our API is sourced from publicly accessible Australian vehicle registration databases. We return vehicle specifications (year, make, model, body type, engine) -- we do not return and do not have access to vehicle owner names, addresses, or any other personal information associated with a registration.

Registration plate numbers submitted to the API are logged for billing and operational purposes. We do not use submitted plate numbers to build profiles of vehicle owners or track vehicle movements.

3. How We Use Your Information

We use the information we collect to:

  • Provide and maintain the Service
  • Process payments and manage your subscription
  • Enforce usage limits under your plan
  • Monitor and improve the performance and reliability of the Service
  • Detect and prevent abuse, fraud, and unauthorised access
  • Communicate with you about your account, billing, or service issues
  • Comply with legal obligations

4. Information Sharing

We do not sell your personal information. We share information only in the following circumstances:

  • Payment processing: We share your email address with Stripe to process payments. Stripe's handling of your data is governed by Stripe's Privacy Policy.
  • Legal requirements: We may disclose information if required by law, regulation, legal process, or government request.
  • Protection of rights: We may disclose information where we believe it is necessary to protect our rights, your safety, or the safety of others, or to investigate fraud.

5. Data Storage and Security

Your data is stored on servers located in Sydney, Australia. We use industry-standard security measures to protect your information, including encrypted connections (HTTPS), secure API key generation, and access controls on our infrastructure.

API keys are generated using cryptographically secure random number generation. We recommend you treat your API key like a password and do not expose it in client-side code or public repositories.

6. Data Retention

We retain your account information for as long as your account is active. API usage logs are retained for 12 months for billing verification and service improvement purposes, after which they are deleted.

If you delete your account, we will delete your personal information within 30 days, except where we are required to retain it by law (for example, financial records required under Australian tax law).

7. Your Rights

Under the Australian Privacy Act 1988, you have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate information
  • Request deletion of your personal information (subject to legal retention requirements)
  • Complain to the Office of the Australian Information Commissioner (OAIC) if you believe we have breached the APPs

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

8. Cookies

Our website uses essential cookies for authentication and session management only. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

9. Third-Party Services

The Service integrates with the following third-party services:

10. Children

The Service is not directed at children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email to your registered address at least 14 days before the changes take effect. The "Last updated" date at the top of this page indicates when the policy was last revised.

12. Contact

For questions or concerns about this Privacy Policy or our handling of your personal information, contact us at [email protected].

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.