Privacy Policy

1. Information we collect

Account information. Your name, email address and a securely hashed password. If you sign in with Google, we receive your name, email address and profile picture from Google instead of a password.

Sign-in records. When you sign in we record the date, your IP address and your browser's user agent with your session, to keep your account secure.

Reports you request. The VINs you look up, when you looked them up, and how each report was paid for. Vehicle records returned by Tesla for a VIN are saved and may be shown to other users who look up the same VIN; they describe the car, not you.

Purchases. Payments are handled by Stripe. We receive a record of each purchase (the amount, what was bought and a Stripe reference), but never your card number or bank details.

Tesla account data (Check my car). If you choose to sign in with Tesla, you approve read-only access on Tesla's own site; we never see your Tesla password. We then read your list of cars and, for the car you choose, its factory options, warranty, service status, Supercharger history (dates, energy added, amounts billed and station names) and, if you allow us to wake the car, its odometer, battery level, range and software version. We do not request or read your car's location, and we never send your car commands other than waking it when you ask.

Activity on the SC01 Marketplace. When you open a car's advert or build sheet from the list, or save a car to your shortlist, we record it with your account — once per car per day — to work out which cars are popular. Only totals are ever shown to anyone; nobody else can see what you opened or saved.

Technical information. Our servers and our network provider keep standard logs (such as IP addresses, pages requested and errors) to run and protect the service.

2. How we use it

• To create and secure your account and keep you signed in.
• To produce the reports you ask for and let you re-open them.
• To process payments and keep records we're required to keep.
• To prevent fraud, abuse and resale, and to enforce our Terms.
• To answer your questions and fix problems.

We don't use your information for advertising, and we don't build profiles of you.

3. Tesla access and owner-verified reports

Your Tesla access token is stored encrypted and only until your report is built (at most 8 hours). You can disconnect it at any time on the Check my car page, and you can revoke TrueSpec's access in your Tesla account. The report itself is saved as a snapshot so you can open, customise and export it later.

You decide what's public. An owner-verified report has a verification link that anyone who has it can open; it shows only the sections you choose, Supercharger station names are hidden unless you switch them on, and you can switch the link off at any time. Verification pages ask search engines not to index them.

TrueSpec's administrators can see the reports, lookups and purchases on every account, including sections of an owner-verified report you haven't shared. They use this only to answer support requests, fix problems and prevent abuse, and they can never see your password or your Tesla sign-in.

If you ask us to prepare a factory build record for a car, we send it to you as a private link. Anyone who has the link can open it, and search engines are asked not to index it. Ask us and we'll delete it.

4. Cookies

We use only the cookies needed to run the site: a session cookie that keeps you signed in, and a short-lived cookie that protects the Tesla sign-in. We don't use advertising or third-party analytics cookies. Our network provider may set a cookie used to block automated attacks.

5. Who we share it with

We share information only with the service providers that help us run TrueSpec, and only what they need:

• Stripe, to take payments (they receive your email address and payment details).
• Tesla, to look up vehicle records and, if you sign in with Tesla, to read your car's data with your permission.
• Google, if you choose to sign in with Google.
• Cloudflare, which delivers and protects the website.

We may also disclose information if the law requires it, to protect the rights and safety of our users or of TrueSpec, or as part of a sale or transfer of the service, in which case this policy continues to apply.

6. How long we keep it

We keep your account information, reports and purchase records while your account is open. Tesla access tokens are deleted as soon as your report is built, or after 8 hours. Deleting your account from the Account page erases it immediately; if you ask us to delete it, we do so within 30 days, except records we must keep for legal, tax or fraud-prevention reasons. Saved vehicle records for a VIN, which aren't tied to you, may be kept.

7. Security

The site is served only over HTTPS. Passwords are hashed, Tesla tokens are encrypted, and access to our servers is restricted. No method of storage or transmission is completely secure, but we work to protect your information and will tell you if a breach affects you as the law requires.

8. Your choices and rights

You can delete your account and all its data yourself at any time from your Account page. You can also ask us for a copy of your personal information, ask us to correct it, or ask us to delete your account for you, by contacting [email protected]. Depending on where you live, you may have further rights, for example under the California Consumer Privacy Act or the GDPR, including the right not to be discriminated against for using them. We don't sell or share personal information as those laws define it. We may need to confirm your identity before acting on a request.

9. Children

TrueSpec is not directed to children under 13, and we don't knowingly collect information from them. If you believe a child has given us information, contact us and we'll delete it.

10. Where your information is kept

We store information on servers in the United States. If you use TrueSpec from elsewhere, your information will be transferred to and processed in the United States.

11. Changes to this policy

We may update this policy. We'll post the new version here with a new date, and if the changes are significant we'll let you know on the site.

12. Contact

Questions about this policy or your information? Contact [email protected].