Privacy
Privacy policy
What we collect, why we collect it, how long we keep it, and how to get it deleted.
Draft — requires legal review before launch
This policy describes the data flows the product actually implements, and is written to be accurate rather than boilerplate. It has not yet been reviewed by counsel, and jurisdiction-specific obligations (CCPA/CPRA, GDPR, state privacy laws) must be confirmed before launch.
What we collect
Account information
- Your email address and, optionally, your name.
- A cryptographic hash of your password. We never store the password itself and cannot recover it.
- Session records, so you stay signed in. We store a hash of the session token, not the token.
Payment information
Payments are processed by our payment provider. Card numbers, expiry dates and security codes are entered on their systems and never reach ours. We retain the payment reference, amount, status and receipt link so we can support and refund your purchase.
Tesla vehicle data
With your authorization, we retrieve the vehicle data needed to produce your report: range and state of charge, charge limit, charging sessions on record, vehicle configuration, odometer, and recent vehicle alerts. We store the resulting report. Access tokens are encrypted at rest and are never sent to your browser. Details are on the Tesla data page.
We do not request or store your vehicle’s location, and we do not poll your vehicle after your report has been generated.
What is public, and what is not
A report’s verification page is public by design — that is the point of it. It shows the vehicle’s year, model, a partially masked VIN, the report date, the data collection date, the verification status, and the summary score.
It never shows:
- Your name, email address, or contact details.
- Your Tesla account information or any access token.
- Your vehicle’s location, past or present.
- Your full VIN.
Whether the full report is publicly viewable is your choice, and you can change it at any time from your account.
Who we share data with
- Our payment provider, to take payment and issue receipts.
- Tesla, to the extent required to authenticate your authorization and request your vehicle’s data.
- Our hosting and email providers, as processors.
We do not sell personal information or vehicle data, and we do not share it with advertisers or data brokers.
How long we keep things
- Reports are kept while your account is open, so that verification links you have given to buyers keep working.
- Tesla tokens are deleted when you disconnect, and are not needed once a report has been generated.
- Payment records are kept as long as required for tax and accounting purposes.
Deleting your data
Write to support@greenevreport.com and we will delete your account and reports. Note that deleting a report breaks any verification link you have already shared with a buyer, so you may wish to withdraw those listings first.
Cookies
We set one cookie, to keep you signed in. It is HTTP-only, so scripts cannot read it, and it carries no advertising or tracking identifiers. We do not use third-party advertising cookies.
Contact
Privacy questions go to support@greenevreport.com.