Privacy Policy
Customer Privacy Notice
Last Updated: January 2025
Your privacy is and will always be enormously important to us. Our Privacy Notice is designed to provide transparency into our data practices in a format that is easy to read and navigate. Please read the sections below to understand how we collect, use, share, and safeguard your information in order to offer you the most seamless Tesla vehicle management experience imaginable.
Privacy From Day One
Tesvian is built with your privacy as a fundamental principle. We act as an authorized third-party application that connects to your Tesla vehicle through Tesla's official API. To protect your privacy from the moment you authorize our platform, we implement strict data minimization and security practices.
Your Tesla generates vehicle, diagnostic, and telemetry data. When you authorize Tesvian to access your vehicle data through Tesla's official API, we only request the minimum permissions necessary to provide you with our services. We do not have access to any data beyond what you explicitly authorize through Tesla's OAuth consent process.
Data Minimization: Unlike Tesla, which has direct access to your vehicle, Tesvian only receives data you authorize us to access through Tesla's API. We cannot access cabin camera footage, Sentry Mode recordings, or any data stored locally on your vehicle. We only collect what is necessary to provide analytics, charging insights, trip tracking, and fleet management features you have requested.
Secure API Integration: All communication between Tesvian and Tesla's servers is encrypted using industry-standard protocols. Your Tesla account credentials are never stored on our servers. Instead, we use OAuth 2.0 authorization tokens that you can revoke at any time through your Tesla account settings.
You Are In Control: You maintain complete control over what data Tesvian can access. You can revoke our access to your Tesla account at any time, and we provide clear controls within our platform to manage your privacy preferences, data retention settings, and account deletion.
Information We May Collect
Information from or about you
- Account Information: Name, email address, password
- Tesla Account Integration: OAuth authorization tokens to access your vehicle data through Tesla's official API
- Payment Information: Billing details for subscription plans (processed securely through our payment providers)
- Communications: Support requests, feedback, and correspondence with our team
Information from or about your Tesla vehicle
- Vehicle Data: Battery status, charge level, range estimates, odometer readings
- Charging Information: Charging sessions, location, duration, energy added, charging costs
- Trip Data: Start and end times, distance traveled, energy consumption patterns
- Location Data: GPS coordinates during trips and charging sessions (when authorized)
- Vehicle Configuration: Model, year, software version, VIN, and vehicle capabilities
Important: We only access data you explicitly authorize through Tesla's OAuth process. We cannot access cabin camera footage, Sentry Mode recordings, or data stored locally on your vehicle.
How We Use Your Information
- Provide Services: Display vehicle analytics, track charging sessions, monitor trip data, generate efficiency reports, and provide fleet management features
- Account Management: Create and manage your account, authenticate access, process subscription payments, and manage user preferences
- Improve Services: Analyze usage patterns, develop new features, enhance user experience, and optimize platform performance
- Communications: Send service notifications, respond to support requests, share important platform updates, and provide customer assistance
- Security: Detect and prevent security issues, fraud, unauthorized access, and protect the integrity of our services
- Compliance: Comply with legal obligations, enforce our terms of service, and respond to lawful requests from authorities
We retain personal data only as long as necessary to fulfill these purposes or as required by law.
Sharing Your Information
We do not sell your personal data to anyone for any purpose, period.
We may share information with:
- Service Providers: Cloud hosting providers, payment processors, customer support tools, and analytics services (all under strict confidentiality agreements)
- Tesla, Inc.: Communication via official Tesla API to retrieve your authorized vehicle data in accordance with Tesla's terms of service
- Legal Requirements: When required by law, court orders, subpoenas, or to protect rights, property, and safety
- Business Transfers: In connection with mergers, acquisitions, or asset sales (with advance notice to you and opportunity to delete your data)
All third-party service providers must abide by our privacy requirements and cannot use your data for any other purposes.
Your Rights and Choices
Subject to applicable law, you have the right to:
- Access: Request a copy of the personal data we hold about you
- Correction: Update or correct inaccurate or incomplete information
- Deletion: Request deletion of your personal data ("right to be forgotten")
- Restriction: Restrict or limit the processing of your data
- Portability: Receive your data in a structured, machine-readable format
- Object: Object to certain types of data processing
- Withdraw Consent: Revoke your Tesla account authorization at any time
How to Exercise Your Rights
- Access your account settings to update personal information
- Revoke Tesla API access through your Tesla account at tesla.com
- Contact us at [email protected] for data access or deletion requests
- Delete your account entirely through account settings (irreversible)
Protection of Personal Data
We implement administrative, technical, and physical safeguards to protect your personal data:
- Encryption: All data transmission uses TLS/SSL encryption (HTTPS)
- OAuth 2.0: Secure authorization without ever storing your Tesla credentials
- Access Controls: Strict internal access limitations with role-based permissions
- Regular Security Audits: Continuous monitoring, vulnerability assessments, and security updates
- Secure Data Storage: Industry-standard database encryption and secure backup practices
- Multi-Factor Authentication: Optional 2FA for enhanced account protection
While no system is 100% secure, we continuously work to protect your information using industry best practices. If you believe your account has been compromised, contact us immediately at [email protected].
International Transfers
Tesvian operates internationally and may transfer your information to countries other than your place of residence. We ensure appropriate safeguards are in place to protect your data:
- Standard Contractual Clauses (SCCs) for EEA/UK/Switzerland data transfers
- Full compliance with GDPR and applicable international data protection laws
- Appropriate technical, organizational, and legal security measures
For EEA, UK, or Switzerland residents: You have the right to lodge a complaint with your local data protection authority if you have concerns about our data processing practices.
Updates to this Privacy Notice
We may update this Privacy Notice from time to time to reflect changes in our practices, legal requirements, or new features. When we make material changes, we will:
- Update the "Last Updated" date at the top of this notice
- Notify you via email or platform notification for significant changes
- Provide you an opportunity to review the changes before they take effect
- For material changes that affect your rights, we may require your renewed consent
We encourage you to review this Privacy Notice periodically to stay informed about how we protect your information.
Privacy Questions
For privacy questions, comments, data requests, or concerns, please contact us:
General Privacy Inquiries: [email protected]
Data Protection Officer: [email protected]
Security Issues: [email protected]
Submit Data Request: Online Form
This Privacy Notice was last updated on January 20, 2025 and is effective immediately.