Privacy Policy
Last updated: July 25, 2026
Street Sweep Alerts uses your phone number, Tesla vehicle information, and vehicle location only to send street-sweeping notifications.
What we store
- Account: your phone number and a record of whether alerts are enabled.
- Linked vehicle: VIN, display name, and Tesla OAuth tokens. Tokens are encrypted at rest with AES-256-GCM.
- We do not store your vehicle's location. When our nightly job runs, it reads your car's location from Tesla, compares it against the street-sweeping schedule in memory, and discards it. No latitude/longitude is ever written to our database.
- Alert history (3 days): the date, sweeping corridor, and message body for each alert we send, used to avoid sending duplicate alerts.
- SMS delivery logs (3 days): phone number, message body, and Twilio delivery status. One-time login codes are redacted before they are written to this log.
- Location-check log (7 days): for transparency, we record the timestamp and outcome (e.g. checked, no sweeping, alert sent, or error) of every nightly check. We never record the coordinates themselves.
- Login codes: short-lived hashes of your one-time SMS codes (deleted shortly after they expire).
- Feedback you send (kept indefinitely): the message you type into the in-app feedback box, and which page you sent it from. We read these as a product backlog, so unlike the logs above they are not deleted on a schedule. Please don't include anything in a feedback message you wouldn't want us to keep — if you mention where you park, that text is stored even though we never store your car's coordinates.
- City nominations (12 months): if you tell us you'd like Street Sweep Alerts in another city, we store that city and your email address so we can let you know if we launch there. You don't need an account to send one, and we use the address only for that notice. Email support@streetsweepalerts.com to have yours removed sooner.
Who we share it with
We do not sell your personal information. We share data only with service providers required to operate the product:
- Tesla — to authenticate your account and read vehicle location.
- Twilio — to deliver SMS messages.
- Supabase — managed PostgreSQL database hosting.
- Vercel — application and serverless function hosting.
- Sentry (when enabled) — error monitoring. Error reports include the request path and a handler name; we strip query strings before sending so OAuth codes and signed tokens are not transmitted.
Text messaging and your consent
When you sign up you consent to receive text messages from Street Sweep Alerts: a one-time login code when you sign in, and recurring street-sweeping alerts for your linked vehicle. We use your phone number only to provide this service.
We do not share your mobile opt-in information or SMS consent with any third parties or affiliates for their own marketing or promotional purposes. Your phone number is shared only with Twilio, our messaging provider, solely to deliver these messages on our behalf, and it is never sold.
Message frequency varies and message and data rates may apply. You can stop messages at any time by replying STOP. For help, reply HELP to any message or email support@streetsweepalerts.com.
Stopping alerts and deleting your data
You can stop alerts at any time by replying STOP to an SMS, or by disabling alerts in the app. To delete your account, use the in-app account-deletion option. When you delete:
- Your user record, SMS delivery logs, and login codes for your phone number are removed.
- If you were the only person subscribed to a vehicle, the vehicle row (including its encrypted Tesla tokens) is removed and we ask Tesla to revoke the refresh token on a best-effort basis.
- If a vehicle you co-subscribe to has other subscribers, it remains so they keep receiving alerts. If you were the person who linked that vehicle's Tesla account, we revoke and remove your Tesla tokens and prompt a remaining subscriber to re-link their own Tesla account.
- Any feedback you sent is kept, but the link to your account is removed so the message is no longer associated with you. If you'd like the message itself deleted, ask us at support@streetsweepalerts.com.
If you nominated a city, that entry is separate from any account — it expires on its own after 12 months, and you can ask us to remove it at any time at support@streetsweepalerts.com.
Questions
Questions about privacy can be directed to support@streetsweepalerts.com.