Privacy Policy
Last updated: February 2026
1. Data Controller
Tesla Inventory Europe, contactable at support@teslainventory.app. We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR).
2. Data We Collect
Account information — When you register, we store your email address, a securely hashed password (never in plain text), and your display name. For Google sign-in users, we store the email and name provided by Google.
Subscription data — If you subscribe, our payment processor Creem (creem.io) stores your payment details. We only store a Creem customer ID and subscription ID — we never see or store your card number or payment details.
Alerts and favourites — If you create price alerts or save favourites, we store these preferences linked to your account.
Notification preferences — Your email and Telegram notification settings, including your Telegram chat ID if provided.
Session cookies — We use a single HTTP-only, Secure session cookie ("ti_session") containing a random token to keep you logged in. It expires after 30 days. No tracking cookies are used.
Browser storage — We use sessionStorage (browser-side only) to preserve your search filters during a session. This data never leaves your browser.
3. Data We Do NOT Collect
We do not use analytics, tracking pixels, or advertising tools. We do not collect browsing behaviour, IP addresses for profiling, or any data beyond what is described above. We do not sell, share, or transfer any user data to third parties for marketing purposes.
4. How We Use Your Data
Your data is used exclusively to: provide and maintain your account; send notifications you have opted into (price alerts, favourite updates); process your subscription through Creem; improve the service. We will never send you unsolicited marketing emails.
5. Third-Party Processors
We use the following third-party services to operate:
Supabase — Database hosting (AWS infrastructure, EU region).
Creem (creem.io) — Payment processing and subscription management (Merchant of Record).
Resend — Transactional email delivery (verification codes, alerts).
Telegram Bot API — Delivering Telegram notifications (only if enabled by you).
Google Sign-In — OAuth authentication (only if you choose Google login).
Vercel — Application hosting.
6. Data Storage & Security
All data is stored securely using Supabase, hosted on AWS infrastructure within the European Union. Passwords are securely hashed and never stored in plain text. Session tokens are cryptographically random. All connections use HTTPS encryption.
7. Your Rights (GDPR)
Under GDPR, you have the right to: access your personal data; correct inaccurate data; delete your data (right to be forgotten); restrict processing; data portability; object to processing. You can delete your account from the Account page, which permanently removes all your data (including alerts, favourites, and sessions). For any data request, contact support@teslainventory.app. We will respond within 48 hours.
8. Data Retention
Account data is retained as long as your account is active. Upon account deletion, all personal data is permanently removed from our systems. Unverified accounts are automatically deleted after their verification code expires.
9. Children
This service is not intended for users under 18 years of age. We do not knowingly collect data from minors.
10. Changes to This Policy
We reserve the right to update this privacy policy at any time. Changes will be reflected on this page with an updated date.
11. Contact
For privacy questions, data requests, or concerns, contact us at: support@teslainventory.app. We will respond within 48 hours.