Privacy notice
This notice explains how VatioLibre, Inc. handles information across the VatioLibre Services, including its websites, applications, APIs, connected services, subscriptions and optional cloud synchronization.
Who we are and what this notice covers
VatioLibre, Inc., a Delaware corporation, is the controller of personal information handled through vatiolibre.com, the VatioLibre driving-tools application at vatioboard.com, and related applications, APIs and support channels. Together these are the VatioLibre Services.
This notice does not cover Tesla or other third parties when they process information under their own notices. Browser-local driving-tool information does not become VatioLibre cloud information unless a user deliberately signs in and synchronizes supported content.
Information we collect
The table describes the categories VatioLibre may collect, representative examples and where the information comes from. The specific information collected depends on which Services, permissions and optional synchronization features a user chooses.
| Category | Examples | Source and collection point |
|---|---|---|
| Account, profile, authentication and preferences | Name, email address, user and session identifiers, authentication records, language, units, time zone and account preferences. | Provided during signup or account use and generated when VatioLibre authenticates and secures the account. |
| Tesla authorization, account, order and vehicle records | Authorization tokens and scopes, account and product details, order status and changes, VIN and other vehicle identifiers, eligibility, enrollment and vehicle-command audit records. | Received from Tesla after the user connects an authorized account, grants permissions or requests a supported command. |
| Telemetry, precise location, trips and energy | Vehicle status, precise location, routes, speed, gear, odometer, battery, charging, climate, energy signals and driving or charging activity. | Received from Tesla Fleet services when the user enables eligible telemetry and related features. |
| User-created and synchronized content | Browser GPS and speed recordings, acceleration sessions, drawings, delivery-checklist entries, VIN captures, photos, notes, media and playlists. | Provided directly or transmitted only when an eligible signed-in user deliberately uploads or synchronizes a supported record. Device-local records are not received merely because the tool is opened. |
| Subscription and transaction records | Stripe customer and subscription identifiers, plan, status, billing-period dates and transaction or refund status. | Received from Stripe after checkout or billing activity. Stripe, not VatioLibre, directly processes complete payment-card credentials. |
| Communications and support | Support messages, attachments a user chooses to send, service-message preferences and order-change notification records. | Provided by the user or generated when VatioLibre sends, receives or manages a requested communication. |
| Device, network, usage, security and diagnostics | IP or network information, request timestamps, session and security cookies, basic browser or device information, access, diagnostic and error logs. | Collected automatically when the cloud Services are requested, operated, protected or troubleshot. |
| Derived records | Activity summaries, route overviews, energy calculations, eligibility results, abuse-prevention signals and diagnostic conclusions. | Generated by VatioLibre from account, integration, telemetry, content and operational records. |
| Local preferences and aggregate marketing measurements | Theme preference; and, only if approved and enabled, landing page, locale, acquisition channel, event, CTA, timestamp and aggregate counts. | Stored by the browser or generated through the limited attribution and aggregate-metrics process described below. |
Tesla account, order and vehicle data
Connecting Tesla is optional. When authorized, VatioLibre uses the granted access to retrieve supported account, order, vehicle or Tesla Fleet API information and to provide the features the user requests. Pre-delivery information can come from connected Tesla account services and is not represented as being supplied entirely by the Tesla Fleet API.
Full telemetry can include precise location and driving or charging activity. It requires the applicable settings, permissions, vehicle eligibility and subscription. Limited previews are identified as non-live. Vehicle commands appear only when separately eligible and requested.
Local driving-tool data and optional cloud sync
VatioLibre driving tools are local first. Browser storage, including localStorage or IndexedDB, can hold language and theme choices, GPS sessions, replay data, acceleration results, drawings, checklists, media state and application preferences on the current device.
Local information can be lost if the browser or device clears site data. VatioLibre does not receive it merely because the user opens the driving tools. When an eligible signed-in user deliberately synchronizes a supported record, the selected information is transmitted to the private VatioLibre account and becomes subject to cloud retention and access rules.
Why we use information and our legal bases
We use information to create and secure accounts; connect requested integrations; display orders and vehicles; deliver telemetry, maps, history, replay, energy and cloud-library features; process subscriptions; send requested service or order-change messages; answer support; prevent abuse; diagnose failures; and comply with law.
Depending on the user and jurisdiction, processing is based on performing the service contract, the user's consent or instructions, VatioLibre's legitimate interests in securing and improving the services, and compliance with legal obligations. A user may withdraw consent where consent is the basis, without affecting earlier lawful processing.
Service providers and disclosures
VatioLibre may disclose only the information reasonably needed to infrastructure, authentication, payment, storage, email, mapping, terrain, camera-data, charging-data, security and professional-service providers. Services currently used or supported include Tesla, Stripe, Google Cloud components, S3-compatible object storage and network data providers. Provider participation and processing locations can change as the Services evolve.
VatioLibre uses artificial-intelligence-assisted tools internally for development and operations. If an AI provider processes personal information or confidential user content for VatioLibre, that processing is limited to an authorized business purpose and is subject to applicable provider, contractual, security and retention controls. Internal AI use alone does not make a local browser record available to VatioLibre or create a user-facing AI collection feature.
We may also disclose information when required by law, to protect users or the Services, in connection with a corporate transaction, or at the user's direction. VatioLibre reviews production integrations and will update this notice when a material change affects the disclosures described here.
Subscriptions and payment information
Stripe hosts the checkout and billing-management flows. VatioLibre receives subscription and transaction status needed to grant access, reconcile billing and provide support. Stripe processes payment credentials under its own privacy notice and terms.
Retention
Different records serve different purposes. The periods below describe VatioLibre's current retention targets. A record may be retained for a shorter or longer period when required for security, account administration, dispute resolution, accounting, backups or applicable law.
| Record type | Current target | Important qualification |
|---|---|---|
| Raw telemetry payloads | 7 days | Provider controls or operational deletion can shorten this period. |
| Canonical telemetry history | 14 days | Used for recent signals and activity processing. |
| Detailed route geometry | 90 days | More detailed than longer-lived route overviews. |
| Activity summaries and route overviews | Up to 24 months | Current code uses 24 months or 730 days depending on record type. |
| Account, orders, synchronized content and subscription records | While needed for the account, service, legal or support purpose | Deletion requests remain subject to backup cycles and legal or security retention needs. |
| Aggregate conversion metrics | 13 months | Only if metrics are legally approved and enabled. |
Security and administrative access
VatioLibre uses access controls, encrypted credential storage, signed requests and owner-scoped customer APIs where implemented. No service can guarantee absolute security. Authorized operational administrators and providers may have limited access when needed for support, security, maintenance or legal obligations, and that access should be logged and restricted.
International processing
VatioLibre and its providers may process information in the United States and other countries whose laws differ from the user's home jurisdiction. VatioLibre uses contractual or other transfer safeguards when applicable law requires them for EEA, UK or other protected transfers.
Privacy rights
Depending on location, a user may have rights to access, correct, export or delete information; restrict or object to processing; withdraw consent; opt out of certain sale, sharing or targeted advertising; and appeal a denied request. EEA and UK users may also complain to their supervisory authority. These rights can be limited by identity verification, legal exceptions and records VatioLibre must retain.
VatioLibre will not discriminate against a user for exercising an applicable privacy right. An authorized agent may submit a request where local law permits, subject to verification of authority and identity.
Disconnecting Tesla, stopping recording and deleting data
Disconnecting Tesla removes the stored Tesla authorization token. Turning recording off stops future full telemetry collection. Neither action automatically deletes existing account, order, trip, route, synchronized-content, billing, support or backup records.
Submit a privacy request to privacy@vatiolibre.com. VatioLibre may verify identity and authority before exporting, correcting or deleting information and will review relevant account records, Tesla tokens, telemetry stores, route objects, synchronized media, Stripe metadata, logs and backups. Some information may be retained when required for security, disputes, accounting or law.
Age requirement
VatioLibre accounts and cloud features are intended only for people who are at least 18 years old. VatioLibre does not knowingly offer accounts or cloud collection to children. A person who believes a minor supplied personal information should contact privacy@vatiolibre.com.
Changes and contact
VatioLibre may update this notice as services, providers or law change. Material changes will receive notice appropriate to their effect, and the visible version and dates will be updated.
Privacy requests may be sent to privacy@vatiolibre.com or to the Business Mailing Address shown below.