Greenevreport

Tesla data & authorization

What we ask Tesla for, and what we never ask you for.

Authorization happens on Tesla's own sign-in page. We never see, receive, or store your Tesla password.

We never ask for your Tesla password

Greenevreport uses Tesla’s official OAuth authorization flow. You sign in on a page hosted by Tesla, at a Tesla address, and Tesla tells us whether you approved the request. Your username and password never pass through Greenevreport. If any site claiming to produce Tesla reports asks you to type your Tesla credentials into their own form, do not do it.

What we request, and why

We request the narrowest set of permissions that can produce the report. Greenevreport cannot unlock, start, drive, summon, honk, or open your vehicle, because we never request the permission that would allow it.

One honest caveat. The report shows how your car has been charged, and charging history is the one thing Tesla does not offer as a read-only permission — it bundles the history together with the ability to start, stop and schedule charging. So the authorization you grant does technically permit those charging actions. We never send any command: there is no code in Greenevreport that can start or stop your car charging, and an automated test in our codebase fails the build if one is ever added. We would rather tell you this than let you find it on the Tesla consent screen and wonder.

  • Sign-in

    openid

    Confirms to Tesla that you completed the sign-in. It carries no vehicle data.

  • Refresh access

    offline_access

    Lets us finish collecting data if your vehicle is asleep and the process spans more than one short session, without asking you to sign in again.

  • Basic account details

    user_data

    Identifies which Tesla account authorized the report so we attach it to the right purchase.

  • Read vehicle data

    vehicle_device_data

    The report itself: range, state of charge, charge limit, configuration, odometer and recent alerts. Read-only.

  • Charging history

    vehicle_charging_cmds

    Tesla's record of the charging sessions it billed for, which is where the report's charging figures and its estimated fast-charging share come from. Tesla does not offer a read-only version of this permission — it bundles the history with the ability to start, stop and schedule charging. We use only the history and never send a command.

How the access token is handled

  • Tokens are encrypted at rest with AES-256-GCM before being written to our database.
  • Tokens are used only on our servers. They are never sent to your browser, never embedded in a page, and never included in a report.
  • Tokens are used only to collect data for the report you paid for.

Withdrawing access

You can revoke access in two independent ways, at any time:

  • From your Greenevreport account page, which disconnects the vehicle and deletes the stored tokens.
  • From your Tesla account’s third-party app settings, which revokes our access at Tesla’s end regardless of anything on our side.

Revoking access does not delete a report you already purchased. A report is a snapshot of the collection date, not a live connection to your car — once it is generated, it no longer needs access to your vehicle.

What we do not do with your data

  • We do not sell vehicle data.
  • We do not track your vehicle’s location over time. Location is not part of the report and we do not request it.
  • We do not poll your vehicle after the report is generated.

Questions about authorization? Write to support@greenevreport.com, or read the privacy policy.