Your details stay yours.

Who handles your information

The Lemon Check is operated by M & S CRANES Pty Ltd, ABN 58 604 165 693.

Vehicle searches and website use

We use the vehicle year, make and model you enter to find or prepare a report. New research uses OpenAI and web sources. We do not include your payment email, card details or private report link in the vehicle research request.

Vercel hosts the website and may process technical information such as IP addresses, browser details and request logs. Our application uses one-way fingerprints derived from request details to limit repeated requests and protect the service from misuse.

Sentry receives limited software-error information so important failures can alert us. It is configured not to deliberately send customer identity, cookies, request headers or bodies, URL query details, payment information, private report links, database values, or vehicle-research content.

A private operating dashboard stores aggregate service figures and short manual records of report corrections, source checks and support incidents. Those manual records are deliberately non-personal and must not contain customer names, email addresses, payment details or private report links.

We store small preferences in your browser to remember whether you have joined the email list or recently seen the signup prompt. These preferences do not contain your email address. Clearing browser storage removes them.

Email updates

If you choose to join the email list, we store your email address, when and where you signed up, and the version of the consent wording you accepted. We use it for occasional used-car buying tips and Lemon Check updates. Signup is optional and the box is never ticked for you.

Payments and reports

Stripe processes card payments. The Lemon Check does not receive your full card details. We retain your purchase email, vehicle reference, payment references, amount, recorded GST, payment status and dates for report access, purchase confirmations and support. Your purchase email is also used to deliver or recover the private report link, but is not treated as permission to send marketing. Readable private links are not stored in our application database; the email provider processes the link when delivering it.

Saved vehicle reports are scheduled for annual review. When fresh research replaces a report, we retain the previous report and its source list as part of our business and service records rather than silently rewriting its history.

Email providers and your choices

Application records are stored in Supabase. One-to-one report messages may be delivered through Resend. Marketing signups may be synchronised to Resend only after you tick the consent box. Every marketing email provides an unsubscribe option, and Resend tells The Lemon Check when an address unsubscribes so the local consent record can also be updated.

Unsubscribing from marketing does not remove your purchased report access or stop purchase-related messages you request. You can also contact support to ask us to stop marketing emails.

Overseas processing

Our providers may store or process information outside Australia. Resend stores customer data, including email content and delivery records, in the United States. Sentry stores the limited error information described above in Germany. Other providers use international infrastructure and service providers; locations depend on the service and its settings. Contact us if you need more information.

Provider information is available from Supabase, Stripe, Resend, Vercel, OpenAI and Sentry.

Keeping records

We keep the application records described in this notice for at least five years from when they are created or last meaningfully used. This includes purchase, report versions and sources, report-access, support, email-consent and unsubscribe records. Some records may be kept longer where needed to maintain report access, resolve a refund or support matter, respect your email choices, prevent misuse, or meet legal and accounting obligations.

This period does not mean we hold full card details: Stripe handles those and The Lemon Check does not receive them. Records held by our service providers are also subject to their own retention and legal requirements. Unsubscribing does not automatically erase separate purchase or support records. You can ask for removal; we will explain what can be removed and what still needs to be retained.

Access, corrections and privacy concerns

To ask about your information, request access, correction or removal, or make a privacy complaint, email support@thelemoncheck.com. Describe your request and the email address you used with us. Please do not send card details or private report links. We may need to confirm your identity before sharing or changing personal information.

We will review your concern and explain our response. If it remains unresolved, the Office of the Australian Information Commissioner provides information about privacy complaints and whether it can assist.