Privacy Policy

Last updated: August 7, 2026

TBuddy ("we", "our", or "us") operates the website at teslabuddy.co and the Telegram bot @TeslaBuddy_Bot (the "Service"). This page informs you of our policies regarding the collection, use, and disclosure of personal data when you use the Service.

1. Information We Collect

We collect the following information to provide the Service:

• Account data: email address, display name, and profile photo when you sign in with Google or Telegram.
• Tesla account data: your Tesla account OAuth tokens (encrypted at rest), Tesla user ID, and a list of your linked vehicles (model, year, color, VIN suffix — not full VIN).
• Chat history: messages you send to the AI and the AI's responses, used to provide the conversation experience.
• Command log: records of vehicle commands sent (lock, climate, charging, etc.) for debugging and abuse prevention.
• Vehicle data: battery level, climate state, location, and other telemetry fetched from the Tesla API when you use the Service.

2. How We Use Your Data

We use the data to:

• Authenticate you and maintain your account
• Send commands to your Tesla on your behalf
• Provide AI-powered chat responses using MiniMax-M3 (a third-party LLM provider)
• Improve the Service and debug issues

We do not sell your data. We do not use your data for advertising.

3. Third-Party Services

We share data with the following third parties only as needed to operate the Service:

• Supabase: database and authentication (data stored in US, encrypted at rest)
• Google OAuth: authentication provider (we receive your email and profile)
• Telegram: if you link Telegram, message routing (Telegram's own privacy policy applies to messages in transit)
• MiniMax-M3 (Anthropic-compatible API): your chat messages are sent to the LLM provider to generate responses. Conversation content is NOT used for model training.
• Tesla Fleet API: we send commands to your vehicle on your behalf using your OAuth tokens
• Railway: hosting infrastructure (logs may include IP addresses)

4. Data Storage and Security

Your data is stored in Supabase (PostgreSQL) in the US East region. Tesla refresh tokens are encrypted at rest using AES-256-GCM. We use HTTPS for all data in transit. Supabase Row-Level Security (RLS) ensures users can only access their own data.

5. Your Rights

You can at any time:

• Disconnect your Tesla account (Settings → Disconnect)
• Delete your account (contact us; we will delete all your data)
• Request a copy of your data (contact us)
• Opt out of chat history storage (contact us)

6. Cookies

We use only essential cookies for authentication (Supabase session) and OAuth state (Tesla, Telegram). No tracking or analytics cookies.

7. Children's Privacy

The Service is not intended for users under 18. We do not knowingly collect data from children.

8. Changes to This Policy

We may update this policy. Material changes will be announced via the Service. Continued use after changes means acceptance.

9. Contact

Questions? Email: hello@teslabuddy.co