Privacy policyHow we handle your data

Cellproof takes your personal data seriously. This policy says what we collect, why we collect it, how we use it, and what rights you have.

Last updated: 2026/09/22

1. What we collect

What you give us

Name, phone number, email address, LINE account
The test location, such as your home or parking space
Payment and invoice details

What we read from the car

The vehicle identification number (VIN)
Mileage
Battery data: voltage, current, charge level, cell status, temperature, charge and discharge records

What we do not read

Navigation history, routes, calls or media on the car
Our test equipment records no location data on a customer's car

2. Why we collect it

To arrange and carry out the test
To produce the certificate and report
To provide online verification of certificates
To contact you, issue invoices and handle payment
To improve our test method (see section 4)

3. What a certificate makes public

Whether a certificate is public is the client's decision.

If it is made public, the verification page shows: the model, year, battery specification, the last 8 characters of the VIN, the mileage at the time of the test, the test date, the test results, and the tester's name.

The owner's name, phone number, address and the full VIN never appear on a certificate.

4. Research use of de-identified data

We are building a dataset of EV batteries in Taiwan, to improve our test method and, in future, to offer estimates.

For that purpose we keep test data with everything that could identify a person removed (name, contact details, the full VIN) and use it for statistical analysis and model building.

You may decline this use. Tell us on LINE when you book, or at any time after. Declining does not affect your test or your certificate.

5. How long we keep it

Contact and transaction data: for the period required by tax and accounting law
Test data that can identify a person: from the end of the service until you ask us to delete it
De-identified research data: kept long term

6. Who we share data with

We do not sell your personal data. We may share what is necessary in these cases:

With providers needed to deliver the service, such as cloud hosting and payment services
When the law or a competent authority lawfully requires it

7. Data and security

Where it is stored. Certificates and measurement data are stored in a managed Postgres database hosted in Tokyo. The data is encrypted at rest, and every connection between the site and the database is encrypted.
What a public page shows. Only the last eight characters of the VIN. The full VIN, internal notes and raw measurement logs never appear on any public page, and the public interface cannot read those fields.
Who can read the database. Access is restricted by row-level security. The public interface can read only published certificates. Unpublished certificates are visible only to testers who are signed in.
Raw measurement files. They are kept in a private bucket with no public address, and only we can access them. Photos and report PDFs are kept in public storage.
Lookup limits and log. Lookups on the verify page are limited to 5 a minute and 30 an hour per network address and must pass a Cloudflare Turnstile check. Each lookup is recorded as a hash of the address, the time and whether it found a certificate; never the address itself, never the VIN entered. A run of failed lookups in a short time is refused for a while. Records are kept for 30 days. Scanning the QR code on the certificate or badge opens it directly and is not limited.
Certificate IDs. Ten random characters, not a serial number, so one ID cannot be worked out from another. A published certificate is itself a public page. That is the purpose of the service.

8. Your rights

Under Taiwan's Personal Data Protection Act you may:

Ask about or view your personal data
Get a copy of it
Add to it or correct it
Ask us to stop collecting, processing or using it
Ask us to delete it

If you do not provide data we need, such as a way to reach you, we cannot arrange a test.

9. Use of this website

The website keeps the technical records needed to stay secure and working, such as a rate limit that prevents abuse of the lookup. These records are handled in a form that does not directly identify a person.

This site has no analytics and no advertising trackers. We use two cookies only. One remembers the language you chose. The other is for tester login to the staff area. Neither is used to track you.

Cell, in the bottom right corner, is a set of answers written in advance. You tap options and there is nowhere to type. It sends nothing anywhere and stores no conversation.

10. Changes to this policy

We may update this policy. Significant changes will be announced on the website.

11. Contact us

Cellproof (芯況有限公司)