Privacy Notice

Last updated: 2026-10-07

We process account, Tesla integration, device, billing and support data to provide portal features. Legal basis: contract performance for core functionality; consent where explicitly requested.

• Controller: Wristla. Processors/subprocessors include hosting, Apple (App Store billing), Stripe, Tesla APIs, Garmin integration services, Anthropic (Anthropic Ireland, Limited: AI assistant answer generation and knowledge-base indexing), Voyage AI (a MongoDB company: text embeddings for AI assistant search), OpenRouter, Inc. with its model provider TypeSafe AI, Inc. (classification of AI assistant questions and ranking of search results), an EU-hosted diagnostics and quality-monitoring provider for AI assistant requests, and optional Google/Reddit measurement and advertising services where consented.
• Data categories: account data, technical logs, consent records, vehicle/device identifiers, command metadata, subscription metadata.
• Tesla integration: VIN, vehicle status/telemetry and command metadata needed for requested portal actions.
• Command model: the portal stores command metadata for audit/security, does not autonomously trigger vehicle commands without user-initiated actions, and status polling/command delivery may wake a sleeping vehicle with minor battery impact.
• Garmin integration: device identifiers and integration telemetry only; health metrics are not collected by this portal.
• Billing: App Store transaction data (Apple) and Stripe checkout/session/payment metadata required for the subscription lifecycle.
• Optional Google Analytics, Google Ads, and Reddit Ads features may process browser, page, referrer, consent-state, and conversion-related metadata according to your cookie choices and the regional defaults described in the Cookie Policy.
• AI assistant: to power your personal Tesla AI assistant, Wristla processes your trip summaries, charge sessions, vehicle telemetry, usage statistics and the questions you ask. Before this data is sent to our AI providers (Anthropic for answer generation and knowledge-base indexing, Voyage AI for text embeddings, OpenRouter/TypeSafe for question classification and result ranking, and a diagnostics provider for quality monitoring), it is de-identified: your VIN, precise GPS coordinates, email address, vehicle name and Wristla subscription/payment details are removed, your vehicle is referred to by its model, and locations are no more precise than the nearest town. Data is sent both when you ask a question and when new trips and charges are added to your personal knowledge base, which is stored on Wristla's own infrastructure and used only for your account. The text of your questions and the recent conversation history (including earlier assistant answers) is sent as written, so avoid including personal information you do not want processed. Our AI providers do not use this data to train their models. Anthropic deletes API inputs and outputs within 30 days (longer only where required by law or to investigate misuse); Voyage AI and OpenRouter do not retain request content after processing; diagnostic records are stored in the EU and kept for a limited period for debugging and quality monitoring.
• Anonymised benchmarks: for cross-user efficiency comparisons and aggregate statistics, only anonymised and aggregated metrics are used. These cannot be linked back to your account, vehicle or identity.
• Security logs may include IP, user-agent, timestamps and action outcomes to detect abuse and investigate incidents.
• Retention: only as long as needed for service delivery, billing, legal obligations and security operations.
• Cross-border transfers: some providers process data outside the EEA/UK, including in the United States. Transfers to Anthropic, Voyage AI and OpenRouter (including onward transfer to its model provider TypeSafe AI) rely on the EU Standard Contractual Clauses (with the UK Addendum and, where applicable, Swiss amendments) incorporated in their data processing addenda. Diagnostic records for the AI assistant are stored in the EU. Other providers may process data outside your country/region under their own transfer safeguards.
• User rights: access, correction, deletion, export, restriction and objection requests.

Your data protection

• Wristla does not sell or rent your personal or vehicle data and does not share it with third parties for their own purposes. Data is disclosed only to the service providers listed in this notice, solely to provide Wristla services to you.
• Vehicle telemetry is stored in encrypted form and linked to your account only while your subscription is active.
• Cross-user comparisons and aggregate benchmarks use only anonymised, aggregated metrics that cannot be traced back to individual users or vehicles. These are used solely to identify correlations and improve service quality.
• The AI assistant builds a personal knowledge base from your vehicle data to improve its accuracy over time. This knowledge base belongs to your account only and is not accessible to other users. The assistant does not access data from other accounts. Data passed to AI providers is de-identified: no VIN, precise location, email address, vehicle name or subscription/payment details.
• Tesla authentication tokens are encrypted at rest and revoked immediately upon account disconnection or logout.
• You can request a full export or deletion of all your data at any time by contacting support.

Provider references: Tesla Fleet API, Garmin legal, Stripe legal, Anthropic DPA, Voyage AI DPA, OpenRouter DPA, Google Privacy Policy, Reddit Privacy Policy.

Requests: contact support via the portal footer.