Privacy Policy
1. Who is the controller of your data
The controller is Oskar Kozaczka (a natural person) (the “Controller”). Contact on personal data matters: kontakt@beyondtes.site. A Data Protection Officer has not been appointed.
2. What data we process
- Account data: email address and a password hash (we do not store passwords in plain form), settings (currency, energy prices, battery parameters, home location if you set it).
- Data from your Tesla account, to which you grant access yourself: vehicle identifier, VIN, the name of the car and access tokens for the Tesla interface.
- Vehicle data: battery charge level, charging sessions (time, energy, power, type of charger, Supercharger charging receipts: energy, cost, place), trips (time, distance, speed, energy use, outside temperature), odometer.
- Location data: trip routes (GPS points) and charging places.
- Technical data: IP address, server and error logs, browser information.
3. Why and on what basis
- Providing the service (trips, charging, costs, consumption, battery degradation): contract, Article 6(1)(b) GDPR.
- Access to Tesla account data and location data: your consent, Article 6(1)(a) GDPR, given when you connect your Tesla account. You can withdraw it at any time, which does not affect the lawfulness of processing up to that moment.
- Security, detecting errors and abuse, pursuing claims: legitimate interest, Article 6(1)(f) GDPR.
- Legal obligations (e.g. accounting, if the service becomes paid): Article 6(1)(c) GDPR.
Providing data is voluntary, but without it we cannot provide the service.
4. Where we get the data
From you and from Tesla, when you connect your account and pair the car with telemetry. You sign in to Tesla on Tesla's own site, so we do not see the password to your Tesla account.
5. Who we share data with
- The infrastructure provider that processes data on our behalf: Microsoft Azure (hosting, database, backups, logs and monitoring) in regions in the European Union (Poland and Sweden).
- Tesla, Inc. and its entities are a separate controller of your Tesla account data. Their rules are described in Tesla's documents.
We do not sell data and do not share it with advertisers. One user's data is not visible to other users.
6. Transfers outside the European Economic Area
We store data in the European Union. Tesla, Inc. is an entity from outside the EEA and acts under its own rules as a separate controller.
7. How long we keep data
| Data | Period |
|---|---|
| Account, vehicle, trip, charging and route data | until the account is deleted (we do not delete it automatically after any period of time) |
| Tesla access tokens | until the Tesla account is disconnected or the account is deleted |
| Server and monitoring logs | up to 30 days |
| Database backups | the last 14 daily backups, so after an account is deleted its data disappears from backups after 14 days at the latest; deleted backup files are kept by Azure for up to another 30 days in hidden form, without access for the app |
| Accounting documents (if the service becomes paid) | as long as the law requires |
8. Your rights
You have the right of access to your data, to rectification, erasure, restriction of processing and portability, to object to processing based on legitimate interest, and to withdraw consent. You also have the right to lodge a complaint with the President of the Personal Data Protection Office in Poland (ul. Stawki 2, 00-193 Warsaw).
You can exercise most of these rights yourself in the app: in Settings you can download all your data (a JSON file, without tokens) and delete your account together with its data. In other matters write to kontakt@beyondtes.site. We reply within a month.
9. How to revoke access to Tesla data
In the app choose Settings and then “Disconnect”. This deletes the stored tokens and stops data collection. You can also revoke access in your Tesla account settings (third-party apps). Data collected so far remains until the account is deleted.
10. Security
We send data over an encrypted connection (HTTPS). We store Tesla access tokens in encrypted form and passwords as a salted hash. The account that owns a vehicle has access to its data, and so does the Controller to the extent necessary to run the service. Administrative actions on accounts are recorded in a log. If a personal data breach could result in a high risk to you, we will inform you without undue delay.
11. Cookies and browser storage
We use one necessary session cookie (HttpOnly, Secure, valid for up to 30 days) that keeps you signed in, and the browser's local storage for display preferences (including the interface language). We do not use advertising cookies or third-party analytics cookies.
12. Changes to the policy
We will inform you of significant changes in the app and, where possible, by email too.