Privacy Policy

This Privacy Policy describes how EVIQ (“EVIQ,” “we,” “us”) collects, uses, protects, and shares information when you visit our website at eviq.pro, use our mobile web application at /app, or authorize EVIQ to read your Tesla vehicle telemetry through the official Tesla Fleet API.

The short version: EVIQ does not store your Tesla vehicle information on our servers. Vehicle information is retrieved directly from Tesla through the official Tesla Fleet API after you authorize access via Tesla OAuth. You authenticate directly with Tesla — we never see or receive your Tesla password.

The information EVIQ accesses falls into two categories:

• Account information you provide. Your email address, chosen plan (Basic Monthly / Yearly), region/state (for climate math), and — during paid checkout — billing details processed by our payment provider.
• Vehicle telemetry from Tesla (only after you sign in with Tesla). This is limited to the read-only scopes you approve during Tesla OAuth, typically:
  • Vehicle identifier (VIN, model, year, trim)
  • State-of-charge and estimated range
  • Battery-pack diagnostics needed to compute the EVIQ Score™
  • Odometer reading
  • Charging session metadata (start/stop, kWh, location if you grant it)

EVIQ has read-only access. EVIQ cannot unlock, drive, honk, summon, precondition, or otherwise control your vehicle. See our Security page for details.

EVIQ uses Tesla OAuth 2.0 — the same authorization mechanism Tesla uses for its own apps and its official third-party developer partners. When you click “Sign in with Tesla” in EVIQ, the following happens:

1. You are redirected to Tesla’s own authentication page at auth.tesla.com. EVIQ never sees your Tesla email or password.
2. You authenticate directly with Tesla and choose which vehicles and which read-only scopes you wish to authorize EVIQ to access.
3. Tesla returns a short-lived access token and refresh token to our OAuth callback endpoint at eviq.pro/api/tesla/callback.
4. EVIQ uses that token to request vehicle data on demand from Tesla’s Fleet API. You can revoke access at any time from your Tesla account or from within EVIQ.

EVIQ does not store your Tesla vehicle information on our servers. Vehicle information is retrieved directly from Tesla through the official Tesla Fleet API after you authorize access via Tesla OAuth, and used only to render the analytics you requested during your session.

What we do store, minimally, and only to make the service work:

• Your email address, plan, and subscription status.
• Your encrypted Tesla refresh token, so you don’t have to re-authorize on every visit.
• Non-personal aggregate telemetry (e.g., total packs monitored) used purely for platform statistics on our home page. No VIN, no identifier, no address.
• Standard server logs (IP address, timestamp, HTTP path) retained for a limited time for security and debugging.

What we do not store:

• Your Tesla password (Tesla never shares it with EVIQ).
• Real-time vehicle telemetry after the request that used it.
• Location history or drive routes.
• Vehicle unlock, drive, or charge-control commands (EVIQ never sends these).

All traffic between your browser, EVIQ, and Tesla is encrypted in transit using TLS 1.2 or higher (HTTPS). Refresh tokens are encrypted at rest using AES-256 before being written to our database. Our database is hosted with a SOC 2-audited cloud provider with encryption-at-rest enabled at the disk layer as well.

Payment card details are handled by our PCI-DSS-compliant payment processor (Stripe). EVIQ’s servers never see, store, or transmit your card number, CVC, or expiration date.

EVIQ does not sell, rent, or trade your personal information. We share information only with the small set of service providers required to operate EVIQ, and only the minimum needed for each purpose:

• Tesla, Inc. — to fetch the vehicle data you authorized.
• Stripe, Inc. — to process your subscription payment.
• MongoDB Atlas — to store your account, subscription, and encrypted refresh token.
• Anthropic — for the AI narrative generation used inside EVIQ Intelligence™. Prompts sent to Anthropic contain only the computed metrics you see on-screen (score, degradation curve, warranty ETA); they do not contain your email, VIN, or Tesla token.
• Resend — to deliver transactional emails such as your battery report PDF and receipts.

We may disclose information if required by law, a valid subpoena, or to protect EVIQ, our users, or the public from fraud, abuse, or imminent harm.

EVIQ uses a small number of first-party cookies that keep you signed in and remember your preferences (e.g., selected vehicle, language). See our Cookie Policy for the full list, including any analytics or marketing pixels currently in use.

SMS text alerts are opt-in only and are used exclusively to send transactional, account-related battery-health notifications (e.g., warranty-threshold risk, charging anomaly, weekly report). We never send marketing or promotional messages by SMS.

To enable alerts, you must (a) enter your mobile number inside the EVIQ app, (b) tick a required consent checkbox showing the exact disclosure copy, and (c) confirm a 6-digit verification code we send you. We record your consent timestamp, IP, phone number, and the exact copy shown at that moment for our audit trail. Message frequency is capped at 4 messages per month. Message & data rates may apply.

You can revoke consent at any time by (i) tapping Unsubscribe on the Alerts screen or (ii) replying STOP to any EVIQ SMS. Reply HELP to receive support instructions. Revocation is honored immediately; the consent record itself is retained for regulatory audit purposes. SMS is delivered by our third-party provider (Twilio) under a strictly transactional 10DLC campaign — see Terms §9 for the full messaging agreement.

Depending on where you live, you may have the right to:

• Access the personal information EVIQ holds about you.
• Correct information that’s inaccurate or out of date.
• Delete your account and associated data.
• Export your account data in a portable format.
• Withdraw consent for Tesla OAuth (which immediately revokes our access).
• Opt out of the “sale” or “sharing” of personal information under CCPA/CPRA. (EVIQ does not sell personal information — but you have the right regardless.)

Email support@eviq.pro to exercise any of these rights. We’ll respond within 30 days.

We retain account and subscription data for as long as your account is active. When you close your account, we delete or anonymize your personal information within 90 days, except where a longer retention period is required by law (for example, tax records for paid subscriptions).

EVIQ is not directed to children under 16 and we do not knowingly collect personal information from them. If you believe a child has provided us information, please contact us and we’ll delete it.

We may update this Privacy Policy from time to time. Material changes will be announced by email and on this page. The “Last updated” date at the top always reflects the current version.

Questions about this policy or your data? Email us at support@eviq.pro — we typically respond within 1–2 business days.