Privacy Policy
Street Sweep Alerts uses your phone number, Tesla vehicle information, and vehicle location only to send street-sweeping notifications.
What we store
- Account: your phone number and a record of whether alerts are enabled.
- Linked vehicle: VIN, display name, and Tesla OAuth tokens. Tokens are encrypted at rest with AES-256-GCM.
- Most recent location only: when our nightly job polls Tesla, we overwrite a single latitude/longitude on your vehicle row. We do not keep a history of past coordinates.
- Alert history (14 days): the date, sweeping corridor, and message body for each alert we send, used to avoid duplicate alerts.
- SMS delivery logs (30 days): phone number, message body, and Twilio delivery status. One-time login codes are redacted before they are written to this log.
- Location-poll log (180 days): for transparency, we record the timestamp and outcome of every Tesla location query we make. We do not record the coordinates themselves.
- Login codes: short-lived hashes of your one-time SMS codes (deleted shortly after expiry).
Who we share it with
We do not sell your personal information. We share data only with service providers required to operate the product:
- Tesla — to authenticate your account and read vehicle location.
- Twilio — to deliver SMS messages.
- Supabase — managed PostgreSQL database hosting.
- Vercel — application and serverless function hosting.
- Sentry (when enabled) — error monitoring. Error reports include the request path and a handler name; we strip query strings before sending so OAuth codes and signed tokens are not transmitted.
Stopping alerts and deleting your data
You can stop alerts at any time by replying STOP to an SMS, or by disabling alerts in the app. To delete your account, use the in-app account-deletion option. When you delete:
- Your user record, SMS delivery logs, and login codes for your phone number are removed.
- If you were the only person subscribed to a vehicle, the vehicle row (including its last known GPS fix and encrypted Tesla tokens) is removed and we ask Tesla to revoke the refresh token on a best-effort basis.
- Vehicles you co-subscribe to with another user remain so the other subscriber keeps receiving alerts.
Questions
Questions about privacy can be directed to the contact information provided by the service operator.