Privacy Policy

Information We Collect

Depending on how you use BMWVetGroup, we may collect the following categories of information:

• Account information: name, email address, account status, email-verification status, password hash, registration-agreement version and acceptance information.
• Authentication and security information: login timestamps, session records, IP addresses, browser/user-agent information, hashed device identifiers, trusted-device records, login-verification challenges, rate-limit events, and security-event records.
• Access information: trial history, subscriptions, entitlements, access status, expiration dates, and administrator-granted access records.
• Technical tool information: search terms or identifiers submitted to supported tools, result status, and technical inputs required to create requested outputs.
• Communications: information you provide when contacting BMWVetGroup and transactional email information used for verification, password resets, and login security.

How Tool Data Is Handled

The current Bosch ECU Lookup stores lookup-audit information associated with the member account, including the submitted search query, lookup type, match status/count, network address, and browser user-agent information. This is used for service operation, abuse detection, troubleshooting, and administrator review.

BMW FSC Lookup search requests are processed to return results and are protected by account and rate-limit controls. The current application does not write FSC search text into the Bosch lookup-audit table.

The BMW ZCS / VO / FA Creator processes vehicle and configuration information you provide—including, when entered, VIN, series, model, Type Key, production date, market, steering, paint, upholstery, and option/FA data—to generate the requested preview or download. The current BMWVetGroup application does not intentionally persist those generator inputs in the member account database. Hosting and security infrastructure may still process request metadata as necessary to operate and protect the service.

How We Use Information

• Provide, operate, maintain, and troubleshoot BMWVetGroup accounts and technical tools.
• Verify email addresses, reset passwords, and deliver two-step login codes.
• Manage one-time trials, subscriptions, entitlements, and member access.
• Protect accounts and infrastructure from credential sharing, automated abuse, scraping, excessive requests, fraud, and unauthorized access.
• Investigate errors, failed lookups, security events, and suspected violations of the Terms & Access Agreement.
• Send service-related and security-related communications.
• Meet applicable legal obligations and protect BMWVetGroup, its users, and the service.

Cookies and Trusted-Device Access

BMWVetGroup uses essential cookies or similar browser storage for authenticated sessions and trusted-device login protection. These controls keep you signed in, associate a valid session with your account, and help determine when an additional emailed verification code is required. The current BMWVetGroup application does not use advertising cookies or behavioral advertising trackers.

Service Providers

BMWVetGroup uses third-party infrastructure providers to operate the service. Current providers include:

• Render: website/application hosting and PostgreSQL database infrastructure, including the network and server processing needed to deliver the service.
• Resend: transactional email delivery for verification, password reset, and login-security messages, which requires processing recipient email addresses and delivery-related message data.
• Cloudflare Turnstile: bot and automated-abuse protection on supported account forms. Turnstile may process network, browser, device, and challenge signals to evaluate whether a request appears automated.

These providers process information as needed to provide their services and under their own privacy and security terms. BMWVetGroup is not currently processing payment-card information through the website. If a payment processor is added for paid subscriptions, this policy will be updated before or when that feature launches.

Sharing and Sale of Personal Information

BMWVetGroup does not currently sell personal information and does not use member information for targeted advertising. Information may be disclosed to service providers that operate BMWVetGroup infrastructure, when reasonably necessary to protect the service or users, to investigate abuse, to comply with legal process or applicable law, or in connection with a business transfer where permitted by law.

Data Retention

BMWVetGroup retains account and access records for as long as reasonably necessary to provide the service, maintain account history, protect the platform, resolve disputes, enforce agreements, and satisfy applicable legal obligations. Verification, password-reset, login-challenge, rate-limit, lookup-audit, and security records may be retained for operational or security purposes and may be removed during normal maintenance.

NETTODAT files uploaded to the E-Series CC-ID Editor are processed only for the active analysis or file-generation request. BMWVetGroup does not save those uploaded NETTODAT files to the database, persistent server storage, or object storage; the request-scoped upload is closed after processing is complete.

NCD files uploaded to the BMW Ambient Lighting Editor are likewise processed only for the active analysis or file-generation request. BMWVetGroup does not save uploaded or generated Ambient Lighting Editor NCD data to the database, persistent server storage, or object storage after the request is complete.

Account deletion removes or de-identifies many account-linked records according to the current database design. Certain security or audit records may be retained when reasonably necessary and may no longer remain directly associated with the deleted member account.

Security

BMWVetGroup uses technical controls intended to reduce unauthorized access, including password hashing, hashed session and security tokens, secure authentication cookies, HTTPS, access controls, server-side entitlement checks, rate limiting, two-step login verification, and bot protection. No internet service or storage system can guarantee absolute security, so members should also protect their email account and password.

Your Privacy Choices and Rights

Depending on where you live and applicable law, you may have rights to request access to, correction of, deletion of, or a portable copy of certain personal information. You may also request closure of your BMWVetGroup account. BMWVetGroup may need to verify your identity before completing a privacy request, and some information may be retained where permitted or required for security, legal, fraud-prevention, or recordkeeping purposes.

International Use

BMWVetGroup is operated using service providers that may process or store information in the United States and other locations where they operate. If you access BMWVetGroup from outside the United States, your information may be transferred to and processed in a country with privacy laws different from those in your location.

Children's Privacy

BMWVetGroup is a technical automotive service and is not directed to children under 13. BMWVetGroup does not knowingly collect personal information from children under 13. If such information is identified, BMWVetGroup may delete it as appropriate.

Changes to This Policy

BMWVetGroup may update this Privacy Policy when the service, security controls, service providers, payment features, or legal requirements change. The effective date and policy version below will be updated when material revisions are made.