Privacy Policy
Last updated: August 2026 | Worldwide GDPR & DPPA Compliance
1. Zero-Knowledge Cryptographic Hashing
To ensure absolute compliance with the Driver's Privacy Protection Act (DPPA) and international privacy laws, raw license plate strings are transformed using SHA-256 cryptographic hashing with unique server-side environment salts. No raw plate numbers or plain-text PII are ever stored in our database.
2. Data Collection & Vault Claims
Vehicle owners voluntarily claim their plate inboxes digitally via secure email authentication. Physical registration documents or government identification uploads are strictly prohibited to prevent unnecessary data exposure.
3. Referral Tracking & Local Storage
When visitors arrive via a unique referral link, we temporarily store the referrer identifier in your browser's local storage to attribute earned reward passes and prevent duplicate milestone claims upon conversion. Referral tracking is tied strictly to anonymized user metrics and authenticated email events.
4. Global Data Rights & Account Deletion (GDPR)
For international users across the European Union, United Kingdom, and Canada, RoadEcho complies with regional data privacy frameworks. Users maintain absolute Data Subject Rights, including instant self-service account deletion and permanent data record purging via your user dashboard.
5. Security & Compliance Audit Trails
We maintain secure immutable audit logs confirming terms agreement timestamps and message queue events without compromising sender or recipient anonymity.