Privacy Policy
Street Sweep Alerts uses your phone number, Tesla vehicle information, and vehicle location only to send street-sweeping notifications.
What we store
- Account: your phone number and a record of whether alerts are enabled.
- Linked vehicle: VIN, display name, and Tesla OAuth tokens. Tokens are encrypted at rest with AES-256-GCM.
- We do not store your vehicle's location. When our nightly job runs, it reads your car's location from Tesla, compares it against the street-sweeping schedule in memory, and discards it. No latitude/longitude is ever written to our database.
- Alert history (3 days): the date, sweeping corridor, and message body for each alert we send, used to avoid sending duplicate alerts.
- SMS delivery logs (3 days): phone number, message body, and Twilio delivery status. One-time login codes are redacted before they are written to this log.
- Location-check log (7 days): for transparency, we record the timestamp and outcome (e.g. checked, no sweeping, alert sent, or error) of every nightly check. We never record the coordinates themselves.
- Login codes: short-lived hashes of your one-time SMS codes (deleted shortly after they expire).
Who we share it with
We do not sell your personal information. We share data only with service providers required to operate the product:
- Tesla — to authenticate your account and read vehicle location.
- Twilio — to deliver SMS messages.
- Supabase — managed PostgreSQL database hosting.
- Vercel — application and serverless function hosting.
- Sentry (when enabled) — error monitoring. Error reports include the request path and a handler name; we strip query strings before sending so OAuth codes and signed tokens are not transmitted.
Text messaging and your consent
When you sign up you consent to receive text messages from Street Sweep Alerts: a one-time login code when you sign in, and recurring street-sweeping alerts for your linked vehicle. We use your phone number only to provide this service.
We do not share your mobile opt-in information or SMS consent with any third parties or affiliates for their own marketing or promotional purposes. Your phone number is shared only with Twilio, our messaging provider, solely to deliver these messages on our behalf, and it is never sold.
Message frequency varies and message and data rates may apply. You can stop messages at any time by replying STOP. For help, reply HELP to any message or email support@streetsweepalerts.com.
Stopping alerts and deleting your data
You can stop alerts at any time by replying STOP to an SMS, or by disabling alerts in the app. To delete your account, use the in-app account-deletion option. When you delete:
- Your user record, SMS delivery logs, and login codes for your phone number are removed.
- If you were the only person subscribed to a vehicle, the vehicle row (including its encrypted Tesla tokens) is removed and we ask Tesla to revoke the refresh token on a best-effort basis.
- If a vehicle you co-subscribe to has other subscribers, it remains so they keep receiving alerts. If you were the person who linked that vehicle's Tesla account, we revoke and remove your Tesla tokens and prompt a remaining subscriber to re-link their own Tesla account.
Questions
Questions about privacy can be directed to support@streetsweepalerts.com.